Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/UNIGATE/0/323430333a616434303a3a2f33322d3438203d3e203137343038.roa
File:                     323430333a616434303a3a2f33322d3438203d3e203137343038.roa (raw, json)
Hash identifier:          wJNtwVwWGV2Ew01tEuJttk+ffpjPnv9QiD0Qlhkb3gk=
Subject key identifier:   D5:C5:25:A6:D3:90:28:C2:35:53:D1:B3:01:32:0A:AE:E8:3F:DB:22
Certificate issuer:       /CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
Certificate serial:       202ECEB2C9CFA9F367406231DD980E39450B2C44
Authority key identifier: 34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/UNIGATE/0/323430333a616434303a3a2f33322d3438203d3e203137343038.roa
Signing time:             Mon 11 May 2026 17:32:30 +0000
ROA not before:           Mon 11 May 2026 17:27:30 +0000
ROA not after:            Mon 10 May 2027 17:32:30 +0000
asID:                     17408
IP address blocks:        2403:ad40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl
                          rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2e:ce:b2:c9:cf:a9:f3:67:40:62:31:dd:98:0e:39:45:0b:2c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
        Validity
            Not Before: May 11 17:27:30 2026 GMT
            Not After : May 10 17:32:30 2027 GMT
        Subject: CN=D5C525A6D39028C23553D1B301320AAEE83FDB22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:fd:72:01:8a:af:68:09:97:94:fa:81:77:
                    10:a9:02:f6:2a:ca:83:9d:a4:63:03:34:64:45:72:
                    f9:ee:54:f8:6d:28:13:29:aa:63:34:ab:8d:88:6e:
                    2a:c2:25:56:24:08:8d:b0:d6:07:f4:59:19:f5:2a:
                    e1:6b:a2:cb:fb:c4:40:ba:ee:cb:6e:c4:ea:95:9c:
                    1f:f9:88:11:78:db:33:10:81:cc:9f:0a:f2:2e:ed:
                    2d:5e:db:7a:2a:3c:46:cb:11:4d:e4:00:55:bd:62:
                    b9:2f:00:ce:23:2d:82:42:2c:37:4d:65:b5:53:4d:
                    52:a8:88:b7:5b:a4:5d:38:29:6b:3e:b7:9c:44:c3:
                    d2:7c:80:82:a0:cb:f8:52:e7:ed:70:95:e8:e9:33:
                    7c:5c:f0:86:6f:38:37:65:a3:5b:1a:86:e7:8c:44:
                    64:e1:21:62:67:07:e3:b5:50:f7:79:7d:ec:0a:84:
                    b5:04:16:5b:50:c5:6f:9b:3e:c7:9f:b7:f1:bd:05:
                    bf:07:32:da:15:28:cf:e2:bd:97:1d:5b:47:22:db:
                    3e:d0:b4:2c:8d:04:65:9a:b1:d9:78:67:bf:66:03:
                    62:6d:63:95:bc:96:97:c8:79:5b:ba:0d:e8:16:1f:
                    d1:ad:87:f6:34:0b:42:c7:0f:8a:ff:ac:45:12:2b:
                    f4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C5:25:A6:D3:90:28:C2:35:53:D1:B3:01:32:0A:AE:E8:3F:DB:22
            X509v3 Authority Key Identifier:
                keyid:34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/323430333a616434303a3a2f33322d3438203d3e203137343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:ad40::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:ef:75:ed:92:b0:55:c7:28:4d:38:58:90:19:a7:54:b0:1d:
         c4:21:7f:bb:54:2b:7b:f7:42:c5:c1:26:5b:b7:29:8f:92:3e:
         70:39:08:7e:17:00:9d:45:1a:18:6c:1d:7f:70:63:48:eb:d1:
         98:8e:ed:82:d1:4c:d3:84:b3:82:02:2a:82:0d:2a:6c:a9:c5:
         c2:50:d9:9f:fc:3a:29:05:d8:8d:5b:84:78:a7:0c:33:1a:bd:
         c6:01:f5:68:d2:be:e9:7d:cc:2f:a6:cd:36:1b:25:88:8f:43:
         fe:a9:b3:01:98:54:85:c3:88:33:47:2e:12:58:98:68:8f:9b:
         97:50:29:20:26:e0:60:69:5c:fe:44:31:7c:1c:e2:da:cd:dc:
         1e:69:66:b3:a0:58:bf:ca:8e:5a:c4:aa:67:7f:5d:ba:b4:1a:
         ad:f4:af:6b:bf:2e:cf:82:43:88:4f:e9:3b:2e:f7:16:9a:54:
         08:db:d7:bb:4d:d8:b7:93:b4:e7:26:e1:2b:7a:c8:c4:87:ce:
         5b:c3:15:45:5c:f9:6c:48:7d:3c:3b:4a:1e:b2:c0:80:9c:f1:
         8e:7c:76:6c:74:f6:13:c1:e2:c7:c2:6a:ca:c3:a5:5c:1d:5c:
         a9:f1:32:93:fb:bf:db:bc:55:8f:e2:18:91:0d:b7:af:dc:85:
         8b:4c:e1:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 10:26:20 2026 by rpki-client