Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWANMOBILE/0/323430323a373530303a3a2f33322d3438203d3e203234313538.roa
File:                     323430323a373530303a3a2f33322d3438203d3e203234313538.roa (raw, json)
Hash identifier:          PC2QrQuCi6XqAimvFi27La2yG3q1xwjkDojFTZyFl4U=
Subject key identifier:   FA:9F:80:09:4D:24:3C:C2:B8:8F:9D:C8:F4:36:7C:42:20:A3:58:64
Certificate issuer:       /CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Certificate serial:       41E5B7B2C2B51F64930BB196CF7FC8903343485D
Authority key identifier: 86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/323430323a373530303a3a2f33322d3438203d3e203234313538.roa
Signing time:             Mon 11 May 2026 16:31:43 +0000
ROA not before:           Mon 11 May 2026 16:26:43 +0000
ROA not after:            Mon 10 May 2027 16:31:43 +0000
asID:                     24158
IP address blocks:        2402:7500::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
                          rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e5:b7:b2:c2:b5:1f:64:93:0b:b1:96:cf:7f:c8:90:33:43:48:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
        Validity
            Not Before: May 11 16:26:43 2026 GMT
            Not After : May 10 16:31:43 2027 GMT
        Subject: CN=FA9F80094D243CC2B88F9DC8F4367C4220A35864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c2:b8:1e:d7:d0:1e:ff:7b:dc:04:44:95:94:
                    7f:0f:ef:e0:0e:a7:c5:a1:0f:df:2a:e1:89:ab:d0:
                    02:50:34:26:e6:a9:94:b0:32:f2:81:78:9b:a0:9f:
                    c4:ed:8c:7d:c9:95:4c:c4:65:35:f8:4b:12:a8:aa:
                    fc:93:10:d1:9d:61:5d:6c:28:0a:3e:27:35:a5:29:
                    8e:bb:b2:5b:fb:c3:0c:9c:3c:0f:1e:ed:3e:b9:d0:
                    26:e6:3f:c6:12:89:68:c0:3f:5e:15:58:13:40:46:
                    2e:79:df:f2:6c:41:1b:76:8f:97:ff:65:fa:44:42:
                    ce:5d:a5:cf:83:58:b0:a8:04:22:75:bf:90:33:fc:
                    cd:f0:29:b1:7e:2a:31:d7:31:90:fb:d7:bc:a9:5d:
                    6c:96:08:20:b0:f1:1e:b4:c7:b4:e1:9d:79:22:29:
                    65:9a:a5:ff:d7:14:88:6f:48:62:2a:d1:9d:3c:2d:
                    22:e3:e2:9e:03:2e:5f:5e:83:87:16:da:f7:42:bf:
                    f3:2e:f5:fd:62:b8:7f:d1:99:4d:6c:8a:54:4f:c7:
                    28:cf:0e:8f:e6:68:c7:2f:c6:ee:df:45:ce:7a:e3:
                    01:ba:56:97:30:43:56:7b:99:b8:d2:0b:a8:18:3f:
                    45:d6:ef:d9:0f:34:30:19:32:07:6d:41:ac:e6:59:
                    d6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9F:80:09:4D:24:3C:C2:B8:8F:9D:C8:F4:36:7C:42:20:A3:58:64
            X509v3 Authority Key Identifier:
                keyid:86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/323430323a373530303a3a2f33322d3438203d3e203234313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7500::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:1b:e6:38:94:92:8b:37:c4:83:fb:cb:b4:35:7b:86:c8:59:
         f1:86:8b:93:e2:16:63:16:17:e0:ee:94:70:48:b7:54:8a:1b:
         13:bf:19:74:09:8c:ca:88:66:7f:0a:41:5a:31:6c:88:c7:11:
         f3:b0:0b:03:f0:a8:94:e4:6a:e0:c6:0a:b6:58:67:d2:35:30:
         21:26:55:d4:68:94:bf:cb:34:f1:18:6b:7f:30:a3:4b:88:d6:
         a5:40:54:4c:cf:1a:d8:79:f3:7c:9c:ad:e2:94:c4:02:1f:c9:
         ad:59:bf:70:6f:7a:71:00:4b:99:94:5e:9a:2f:1a:2c:e4:66:
         8f:fe:d1:ef:49:7f:94:f7:87:03:69:81:f5:1c:ef:b5:8a:94:
         d7:74:c5:db:77:ad:8a:cf:99:03:da:07:cd:59:4d:e8:33:3b:
         6d:89:7f:df:72:dd:8f:e2:09:87:ba:f6:1f:6b:26:b7:ec:04:
         99:7c:89:bf:94:5e:11:3b:6d:b1:99:01:5b:51:be:65:38:73:
         00:ef:b3:9f:5c:ad:14:fe:ba:09:fd:1a:61:28:9b:dd:e4:6b:
         18:a6:48:62:b1:e3:e8:e9:07:a7:5c:6c:43:29:76:1d:bb:7b:
         12:c2:e7:92:34:a8:e2:d2:da:12:9d:b8:f6:07:32:7a:02:33:
         70:e6:37:91
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUQeW3ssK1H2STC7GWz3/IkDNDSF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZGNEU2NEUyODU1QjJGRDAwRkVFNDkyRjZGQjgyRDdF
RDVDNDYxOTAeFw0yNjA1MTExNjI2NDNaFw0yNzA1MTAxNjMxNDNaMDMxMTAvBgNV
BAMTKEZBOUY4MDA5NEQyNDNDQzJCODhGOURDOEY0MzY3QzQyMjBBMzU4NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvwrge19Ae/3vcBESVlH8P7+AO
p8WhD98q4Ymr0AJQNCbmqZSwMvKBeJugn8TtjH3JlUzEZTX4SxKoqvyTENGdYV1s
KAo+JzWlKY67slv7wwycPA8e7T650CbmP8YSiWjAP14VWBNARi553/JsQRt2j5f/
ZfpEQs5dpc+DWLCoBCJ1v5Az/M3wKbF+KjHXMZD717ypXWyWCCCw8R60x7ThnXki
KWWapf/XFIhvSGIq0Z08LSLj4p4DLl9eg4cW2vdCv/Mu9f1iuH/RmU1silRPxyjP
Do/maMcvxu7fRc564wG6VpcwQ1Z7mbjSC6gYP0XW79kPNDAZMgdtQazmWdZjAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQU+p+ACU0kPMK4j53I9DZ8QiCjWGQwHwYDVR0j
BBgwFoAUhvTmTihVsv0A/uSS9vuC1+1cRhkwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFJV0FO
TU9CSUxFLzAvODZGNEU2NEUyODU1QjJGRDAwRkVFNDkyRjZGQjgyRDdFRDVDNDYx
OS5jcmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS84NkY0RTY0RTI4NTVCMkZEMDBGRUU0
OTJGNkZCODJEN0VENUM0NjE5LmNlcjCBgAYIKwYBBQUHAQsEdDByMHAGCCsGAQUF
BzALhmRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RBSVdBTk1PQklMRS8w
LzMyMzQzMDMyM2EzNzM1MzAzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzQz
MTM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAkAnUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtG+Y4lJKL
N8SD+8u0NXuGyFnxhouT4hZjFhfg7pRwSLdUihsTvxl0CYzKiGZ/CkFaMWyIxxHz
sAsD8KiU5Grgxgq2WGfSNTAhJlXUaJS/yzTxGGt/MKNLiNalQFRMzxrYefN8nK3i
lMQCH8mtWb9wb3pxAEuZlF6aLxos5GaP/tHvSX+U94cDaYH1HO+1ipTXdMXbd62K
z5kD2gfNWU3oMzttiX/fct2P4gmHuvYfaya37ASZfIm/lF4RO22xmQFbUb5lOHMA
77OfXK0U/roJ/RphKJvd5GsYpkhisePo6QenXGxDKXYdu3sSwueSNKji0toSnbj2
BzJ6AjNw5jeR
-----END CERTIFICATE-----
Generated at Wed May 13 12:05:29 2026 by rpki-client