Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNCTU/0/323030313a6631383a3a2f33322d3634203d3e2039393136.roa
File:                     323030313a6631383a3a2f33322d3634203d3e2039393136.roa (raw, json)
Hash identifier:          4fzQlK7Do1Cwvcdk+e0kfmflXXnhAsZ2G8TwcC4Ef3A=
Subject key identifier:   8E:D4:DF:47:50:EA:C8:2D:41:70:AF:4D:68:AF:2F:10:95:D6:10:6E
Certificate issuer:       /CN=46AF3A717A403BC5489BF5532E8CB67721141841
Certificate serial:       6820518F54B3484504DBEF36527855D15A373A66
Authority key identifier: 46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNCTU/0/323030313a6631383a3a2f33322d3634203d3e2039393136.roa
Signing time:             Mon 11 May 2026 17:06:26 +0000
ROA not before:           Mon 11 May 2026 17:01:26 +0000
ROA not after:            Mon 10 May 2027 17:06:26 +0000
asID:                     9916
IP address blocks:        2001:f18::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.crl
                          rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:47:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:20:51:8f:54:b3:48:45:04:db:ef:36:52:78:55:d1:5a:37:3a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46AF3A717A403BC5489BF5532E8CB67721141841
        Validity
            Not Before: May 11 17:01:26 2026 GMT
            Not After : May 10 17:06:26 2027 GMT
        Subject: CN=8ED4DF4750EAC82D4170AF4D68AF2F1095D6106E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:5a:8f:ed:1d:c7:4d:75:97:11:f2:79:8d:
                    f3:16:d3:3c:bf:b0:81:5f:c6:e1:1c:c4:95:dd:b9:
                    df:64:53:d9:bf:92:0e:92:81:96:37:3a:fa:b4:05:
                    fa:e3:8c:a0:52:a0:9c:1a:c6:f8:1f:25:8e:99:cf:
                    f4:9e:6b:63:e6:65:c7:1a:5d:14:45:9f:f2:1e:85:
                    af:76:b9:46:45:e0:db:80:a8:ad:94:40:c4:4a:2f:
                    82:d1:80:08:2c:54:0c:cf:f9:05:ea:5d:cd:f6:9e:
                    ae:64:6c:dd:dd:95:a3:a1:c0:b1:12:5f:dd:94:48:
                    fa:00:26:e7:27:d7:b0:ee:ca:e2:af:f3:e0:dc:a2:
                    5f:a5:4c:80:63:0e:77:71:25:58:e9:6b:44:81:f9:
                    71:ea:60:5d:65:cf:dd:f9:6e:22:0d:d8:59:4d:02:
                    40:45:54:1c:41:88:38:06:de:56:30:20:18:f9:41:
                    46:57:02:bd:ea:8b:7c:0e:76:e6:b3:b6:dc:ae:1a:
                    57:f8:bc:30:45:28:56:23:87:0b:37:03:62:d2:74:
                    cd:46:43:bd:f1:0a:21:c1:54:65:c5:d5:d3:6c:7c:
                    de:3e:4f:60:0b:73:d1:e4:c6:ef:7d:a6:1a:72:b4:
                    e5:54:49:d1:85:8f:b2:b0:5d:c2:c4:58:37:06:0f:
                    bc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D4:DF:47:50:EA:C8:2D:41:70:AF:4D:68:AF:2F:10:95:D6:10:6E
            X509v3 Authority Key Identifier:
                keyid:46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/323030313a6631383a3a2f33322d3634203d3e2039393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:f18::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:ba:72:51:82:49:e8:d0:d2:ac:4a:04:ea:5c:fd:92:fa:51:
         cd:dc:3b:ad:42:d4:3a:ea:17:4f:a4:cc:a4:8a:35:f6:03:dc:
         e6:80:59:ad:2d:50:8f:f2:ff:ec:b9:6f:6e:ac:40:af:1c:86:
         9f:bc:e8:cc:62:9f:03:25:37:c2:79:e4:cf:6e:1a:e1:40:63:
         ee:7e:46:51:5a:bf:58:8f:be:b7:cd:2f:74:f7:10:1e:06:b8:
         91:9d:0f:cc:9c:47:29:b6:96:54:13:c0:c0:4a:c5:bd:c2:ed:
         7d:85:9b:62:43:8b:9b:85:29:78:c3:f5:22:ba:7e:96:e6:78:
         ef:20:b8:30:6e:90:e9:d5:ab:ea:af:4f:74:ff:c3:f3:9c:11:
         1f:cc:80:e5:50:8a:dd:8e:ae:8c:71:95:8d:eb:e4:f7:b2:dd:
         b4:4a:c4:52:c7:92:58:b2:89:0b:5a:dd:68:50:4b:fc:d1:4a:
         01:14:3e:e1:28:da:bd:da:55:b3:7c:6a:bf:c4:dd:d6:69:34:
         c7:f7:f0:8d:9e:cd:27:69:85:02:a4:55:33:41:49:43:8f:ca:
         c2:a4:7e:ec:b7:41:56:8c:49:8c:5b:75:b6:09:23:32:ee:42:
         aa:e6:cb:34:f7:70:4b:a1:20:d6:31:51:76:97:02:9c:19:1f:
         0a:f4:03:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:07 2026 by rpki-client