Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/323430333a353230303a3a2f33322d3936203d3e203138303439.roa
File:                     323430333a353230303a3a2f33322d3936203d3e203138303439.roa (raw, json)
Hash identifier:          8trP9YMAatCvb5LAMVBWj3aQbEPdTxGi0t42/LC4V24=
Subject key identifier:   D3:BE:34:35:25:74:B9:67:A1:BA:E5:F3:4E:31:BD:34:36:41:B4:BE
Certificate issuer:       /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Certificate serial:       15F323558A8492BB9166DA1028D86A570567F3E6
Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TINP/0/323430333a353230303a3a2f33322d3936203d3e203138303439.roa
Signing time:             Mon 11 May 2026 16:42:15 +0000
ROA not before:           Mon 11 May 2026 16:37:15 +0000
ROA not after:            Mon 10 May 2027 16:42:15 +0000
asID:                     18049
IP address blocks:        2403:5200::/32 maxlen: 96
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl
                          rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f3:23:55:8a:84:92:bb:91:66:da:10:28:d8:6a:57:05:67:f3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
        Validity
            Not Before: May 11 16:37:15 2026 GMT
            Not After : May 10 16:42:15 2027 GMT
        Subject: CN=D3BE34352574B967A1BAE5F34E31BD343641B4BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6a:ba:3a:02:1a:94:e5:85:67:c6:69:44:45:
                    22:08:66:e7:5d:d4:be:65:9c:c6:9e:b0:cb:e1:57:
                    4f:e6:fb:67:3b:ff:71:de:52:37:05:be:c9:c8:0a:
                    6e:40:1b:09:33:8e:5b:aa:7d:65:6f:e6:bb:8a:6d:
                    7a:53:4c:2d:15:ee:5c:c0:28:55:b0:da:fe:55:47:
                    53:20:8f:00:b0:19:6f:1d:e3:5a:6c:c9:62:a4:06:
                    c6:f8:a1:94:e0:ee:90:06:d3:8a:00:12:78:8d:4e:
                    3e:1d:c5:58:75:4b:7f:84:dc:a6:54:9d:6f:7c:b7:
                    7a:53:5e:cf:94:a8:02:2f:21:82:d0:25:0a:3a:9f:
                    89:53:c6:7d:99:ad:1b:5b:c7:2b:43:31:0f:15:ba:
                    7e:62:a0:6a:74:7d:d2:17:f1:69:5d:e5:57:ab:dc:
                    d2:67:12:9e:c4:54:52:f7:7d:7f:8c:ed:2b:a4:ae:
                    6b:6f:27:0f:d4:28:2a:95:7c:fd:13:ae:a5:83:a5:
                    d3:fe:ae:3c:75:ca:bb:c1:43:53:ed:c6:a7:05:2c:
                    41:16:d0:be:5d:7b:bd:90:d4:9d:3a:29:6b:da:10:
                    bd:18:36:e8:37:4e:8d:ad:a5:93:bf:4b:9e:e3:a4:
                    1e:3e:df:8f:98:9a:50:1c:f1:05:7e:6e:f6:3f:66:
                    98:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BE:34:35:25:74:B9:67:A1:BA:E5:F3:4E:31:BD:34:36:41:B4:BE
            X509v3 Authority Key Identifier:
                keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/323430333a353230303a3a2f33322d3936203d3e203138303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:5200::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:a9:85:0a:2d:63:24:34:08:5e:02:9f:4b:ed:b6:cc:44:fa:
         c5:b1:f3:a4:46:bd:e1:2a:36:5c:85:bb:a6:82:df:cf:a9:65:
         1e:39:80:cf:d9:4d:14:38:fb:6b:49:e0:10:8d:22:2a:33:db:
         b0:17:a0:d2:30:bf:81:77:41:cc:e5:12:7a:8f:c5:02:66:41:
         90:51:eb:76:48:c4:35:f7:ae:37:ad:27:7a:93:11:9d:da:d1:
         65:db:70:a6:8c:7c:c3:e9:e8:97:fd:4a:5c:19:9c:52:88:ca:
         be:32:08:c9:bc:32:fe:0e:c2:24:60:d0:6f:4c:0f:58:5b:48:
         e9:54:14:64:78:1d:60:3d:47:aa:c6:3c:ea:d0:4d:c8:70:d4:
         88:1c:f9:d7:a0:9d:8d:6d:0f:55:39:80:54:37:06:90:d3:5c:
         f1:3b:ce:b0:a2:41:8c:13:cb:9f:15:e0:56:37:5d:20:e1:48:
         20:33:6a:87:4c:fd:21:20:40:98:1f:90:70:bc:09:f3:0c:23:
         92:01:ab:48:94:07:4f:7a:69:2a:a0:b5:01:95:e5:74:bc:36:
         93:48:9d:3e:7c:fa:29:96:0d:00:54:3d:ce:ee:11:25:7b:48:
         f3:4a:c5:53:26:11:10:54:08:ce:0c:9c:24:cd:00:29:87:be:
         0a:0c:b4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:59 2026 by rpki-client