Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/323430323a323538303a3a2f33322d3332203d3e203138343139.roa
File:                     323430323a323538303a3a2f33322d3332203d3e203138343139.roa (raw, json)
Hash identifier:          58Gd6eOLAXQyKRDaHjMyHFXtUb8aKfwzLrP5Psh4j8w=
Subject key identifier:   D2:9F:F8:3D:54:41:D5:40:60:69:62:4B:00:8F:98:84:82:F0:16:26
Certificate issuer:       /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial:       1C73CBE37A0DE053FEEAA917C3EF7EBEE1A7855A
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIGMA/0/323430323a323538303a3a2f33322d3332203d3e203138343139.roa
Signing time:             Tue 08 Sep 2026 07:44:12 +0000
ROA not before:           Tue 08 Sep 2026 07:39:12 +0000
ROA not after:            Tue 07 Sep 2027 07:44:12 +0000
asID:                     18419
IP address blocks:        2402:2580::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
                          rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 20:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:73:cb:e3:7a:0d:e0:53:fe:ea:a9:17:c3:ef:7e:be:e1:a7:85:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
        Validity
            Not Before: Sep  8 07:39:12 2026 GMT
            Not After : Sep  7 07:44:12 2027 GMT
        Subject: CN=D29FF83D5441D5406069624B008F988482F01626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:d1:ca:1e:24:b4:c0:e0:2d:b3:c2:50:33:
                    59:e8:e9:84:f0:ab:43:41:e5:1b:64:29:ab:04:25:
                    fa:52:0d:8c:88:c7:92:e7:63:25:5b:30:4a:bd:3f:
                    9e:4f:77:56:00:8c:23:29:70:4a:fb:3e:c1:0a:e5:
                    34:10:ed:47:12:a9:43:59:6e:cd:82:bf:ee:ba:2b:
                    f8:59:e8:b7:a8:7b:61:90:c1:b4:6d:01:6f:bc:10:
                    82:6a:5d:36:b3:2f:b9:1d:40:57:55:09:69:64:2e:
                    34:5e:90:41:71:57:79:03:1f:f6:83:b2:f7:b8:e1:
                    f1:9c:c6:f7:a7:69:57:01:64:53:ae:85:11:f1:7a:
                    30:2f:99:ab:e2:05:bf:82:66:8e:3f:a2:92:a4:56:
                    5a:00:8d:6c:8f:0c:4c:04:9c:11:af:39:7a:3c:c4:
                    10:20:3e:7d:da:30:5e:cf:d0:40:5c:0f:17:4b:25:
                    f6:eb:cd:6a:83:a8:50:40:59:bd:aa:5b:7d:62:da:
                    83:0b:29:ed:8b:a4:a7:1a:b1:95:67:41:1c:5c:a3:
                    bf:41:81:ac:a7:50:c6:a2:35:87:04:12:15:28:36:
                    8b:21:86:23:b0:7f:07:2b:a0:1e:a0:71:98:6c:3f:
                    2b:a9:25:7d:bc:85:75:2c:ae:1f:69:47:cd:f9:26:
                    57:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9F:F8:3D:54:41:D5:40:60:69:62:4B:00:8F:98:84:82:F0:16:26
            X509v3 Authority Key Identifier:
                keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/323430323a323538303a3a2f33322d3332203d3e203138343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:2580::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:9c:10:c8:9c:18:e6:53:a7:95:dd:14:e4:9f:38:84:26:f1:
         a4:5e:77:23:72:e5:72:18:dd:44:1a:04:6b:e9:7f:dd:43:c5:
         a1:1c:77:75:5a:2c:dc:61:c0:f9:57:e4:c3:6b:8e:e6:8b:d9:
         fa:41:ac:22:81:30:75:bd:63:74:58:ad:21:cf:d1:25:fb:61:
         93:52:ea:03:16:c6:ee:7d:d6:df:8d:39:a7:96:53:ef:15:1d:
         9a:ea:59:a1:13:a4:89:2c:9d:f6:21:03:59:48:61:77:66:fe:
         68:de:86:75:fe:10:17:a0:7d:a4:42:bc:62:af:41:d7:2c:9d:
         5d:05:92:61:ac:bb:45:54:4a:53:86:8d:da:e9:f2:93:ee:b8:
         5f:78:d4:f9:4e:a5:e6:fe:8b:96:03:13:7c:23:c0:c7:80:3a:
         49:b0:4e:61:76:19:cc:bc:de:ea:cc:1e:12:8a:91:38:a6:6d:
         85:bd:56:f6:18:5e:66:99:7d:0f:68:a3:1b:7c:19:7b:a9:49:
         9e:59:ff:58:44:ed:91:fa:33:c2:30:6e:d2:ab:e5:94:4e:3d:
         43:e0:3c:13:98:07:f5:f5:f3:db:57:f7:0b:31:3e:bb:57:df:
         2e:a3:ef:83:00:30:eb:bf:04:e5:a3:d4:98:b5:79:a0:84:f2:
         b2:34:22:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:31:58 2026 by rpki-client