Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/323430353a393230303a3a2f33322d3634203d3e20313331353936.roa
File:                     323430353a393230303a3a2f33322d3634203d3e20313331353936.roa (raw, json)
Hash identifier:          dAbBURhnuiErbe30kIQdlBxwSRrmmbsP0Vvl2KpUsCE=
Subject key identifier:   52:36:78:E6:8D:33:85:D9:40:AC:F1:E7:7B:A3:2E:00:23:E8:BC:B9
Certificate issuer:       /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial:       5B573BF79F71F290D998BCECD0A84CBCB73B126C
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TBCOM/0/323430353a393230303a3a2f33322d3634203d3e20313331353936.roa
Signing time:             Mon 11 May 2026 16:48:43 +0000
ROA not before:           Mon 11 May 2026 16:43:43 +0000
ROA not after:            Mon 10 May 2027 16:48:43 +0000
asID:                     131596
IP address blocks:        2405:9200::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
                          rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:57:3b:f7:9f:71:f2:90:d9:98:bc:ec:d0:a8:4c:bc:b7:3b:12:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
        Validity
            Not Before: May 11 16:43:43 2026 GMT
            Not After : May 10 16:48:43 2027 GMT
        Subject: CN=523678E68D3385D940ACF1E77BA32E0023E8BCB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:03:3f:f0:46:b6:e7:3c:05:d2:2a:38:ae:7e:
                    ca:a2:a5:ea:06:d9:24:22:77:f9:04:4b:51:a3:9a:
                    5e:76:c8:23:21:45:46:61:1c:32:66:3d:15:f7:a8:
                    88:52:70:a0:c2:4a:0f:ca:21:fe:8a:e3:1c:68:3d:
                    0c:0d:ee:da:9f:86:b4:2c:3c:44:69:74:1d:83:b4:
                    13:d3:7a:f0:0c:94:9c:a2:c6:e4:0c:f8:af:d4:4c:
                    01:e5:dc:b1:0b:7a:08:f5:72:dd:15:75:fd:3a:ee:
                    1a:d8:b3:21:5f:23:ee:f2:50:cd:20:9d:9d:bb:20:
                    83:59:b4:9f:52:e8:1b:be:22:a9:02:4f:ee:72:cb:
                    0b:6f:dc:85:52:21:5c:f1:dc:56:20:48:2b:88:d9:
                    87:0e:78:72:23:77:5b:c3:5c:6c:52:22:1c:8e:04:
                    d6:b2:cb:32:e3:9e:a9:8f:02:9e:6a:fc:79:1f:67:
                    13:1a:03:d3:d6:0d:e7:fb:ed:01:e8:fd:40:59:61:
                    93:0f:56:35:76:b4:96:e9:05:6d:ae:eb:ae:14:50:
                    4c:67:c2:14:86:60:5e:d9:5d:70:d3:0f:49:58:68:
                    f2:52:a8:1c:17:b8:05:88:92:cc:50:d8:bf:24:82:
                    10:4c:fe:89:bf:b3:11:14:e5:3b:eb:80:bf:28:d2:
                    bd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:36:78:E6:8D:33:85:D9:40:AC:F1:E7:7B:A3:2E:00:23:E8:BC:B9
            X509v3 Authority Key Identifier:
                keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/323430353a393230303a3a2f33322d3634203d3e20313331353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9200::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:b6:96:e7:2c:be:7f:20:8d:bd:ff:ba:a8:10:ad:02:4b:a0:
         97:af:87:79:9c:79:63:15:f2:a9:e5:58:bc:6f:18:cf:1f:61:
         7a:ea:4f:58:59:78:fa:1b:6d:32:d6:85:53:11:8f:36:4b:52:
         19:c0:75:75:25:42:c0:4f:a3:c3:d9:4f:87:27:2d:07:ec:b3:
         7e:e0:b2:50:cf:64:33:13:46:8a:37:8b:2b:da:82:45:85:c7:
         2e:55:f9:c0:03:fc:68:7f:3b:0a:62:4a:c5:c2:97:8b:71:2b:
         ca:92:d3:d1:41:09:70:63:31:da:26:38:e1:68:c1:45:2d:60:
         68:b3:d2:14:3e:1f:3e:4d:64:de:a2:8f:15:2b:86:8e:4a:89:
         9a:2a:7d:14:cb:83:c4:db:d7:83:09:a2:b7:73:dd:46:79:ce:
         4f:f1:f3:fb:b9:10:ff:58:40:4b:98:10:2e:57:0b:f2:c1:6e:
         ca:9a:b5:bb:1f:b8:47:cc:82:c3:61:6a:2e:64:f3:5f:cb:13:
         33:3e:ec:ff:82:32:96:5c:93:5a:f4:ec:09:37:4f:7f:12:86:
         17:00:fb:b3:9f:df:2a:c8:59:c4:e4:5a:7c:e8:5f:a9:d9:60:
         72:e8:26:c5:1a:8a:03:52:2f:f3:e6:34:78:d1:bd:c7:38:57:
         d3:d5:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:19 2026 by rpki-client