Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WANIN/0/323430333a623963303a3a2f33322d3438203d3e20313331363336.roa
File:                     323430333a623963303a3a2f33322d3438203d3e20313331363336.roa (raw, json)
Hash identifier:          E288eui5EN66onNVEK7Y344pLWOHjEel/MAK2S1bEhQ=
Subject key identifier:   9C:36:E5:AD:27:F5:1A:97:3B:99:4B:2D:8D:43:FA:8D:9A:55:B7:6A
Certificate issuer:       /CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4
Certificate serial:       158718A6BF1FDB97E196C7757BC421276DAD1D2B
Authority key identifier: 10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WANIN/0/323430333a623963303a3a2f33322d3438203d3e20313331363336.roa
Signing time:             Mon 11 May 2026 17:04:58 +0000
ROA not before:           Mon 11 May 2026 16:59:58 +0000
ROA not after:            Mon 10 May 2027 17:04:58 +0000
asID:                     131636
IP address blocks:        2403:b9c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl
                          rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:87:18:a6:bf:1f:db:97:e1:96:c7:75:7b:c4:21:27:6d:ad:1d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4
        Validity
            Not Before: May 11 16:59:58 2026 GMT
            Not After : May 10 17:04:58 2027 GMT
        Subject: CN=9C36E5AD27F51A973B994B2D8D43FA8D9A55B76A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:03:35:f8:a2:70:d9:f9:4a:2c:05:b0:98:7c:
                    f4:17:44:dc:44:e4:c7:23:70:35:03:fb:cd:a3:3b:
                    50:25:73:a7:ed:0e:99:0f:c1:8c:b1:2c:6a:73:a7:
                    86:b6:c8:4a:da:b3:6d:a8:13:b8:92:b4:9f:2b:5b:
                    be:56:6b:6a:39:b9:ed:28:2f:d5:4a:b6:d7:12:a2:
                    5d:32:f7:64:26:58:3a:45:dd:cd:1b:64:74:74:cd:
                    1d:81:78:0c:5d:66:56:83:35:fb:54:0a:64:48:14:
                    b1:71:21:97:8b:2f:b3:b4:38:fd:02:b3:a0:b6:e7:
                    ba:1a:3f:a8:e3:ca:e7:9c:4a:06:18:d7:e0:54:df:
                    84:db:0f:84:bd:3a:a5:8c:4e:01:44:25:bc:b5:8f:
                    e5:a1:ab:ce:34:90:d8:3c:8c:1e:c1:21:52:0d:21:
                    8e:45:33:d3:ad:32:46:b7:c5:3a:94:d0:43:63:66:
                    43:e4:d2:03:3f:3e:a7:08:a3:b6:f7:65:6f:a7:7e:
                    60:87:e8:1f:81:20:7e:e0:50:b2:a9:48:ca:77:d1:
                    82:8b:6b:e5:0e:a2:45:26:d8:8e:78:25:e3:5a:b5:
                    bf:d1:df:fd:90:9c:93:de:53:08:e3:1f:06:5f:26:
                    cf:c3:8f:5d:b6:61:3f:9b:cf:0d:eb:5a:8e:64:a4:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:36:E5:AD:27:F5:1A:97:3B:99:4B:2D:8D:43:FA:8D:9A:55:B7:6A
            X509v3 Authority Key Identifier:
                keyid:10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/323430333a623963303a3a2f33322d3438203d3e20313331363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:b9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:a1:23:2e:f5:d8:54:ea:4c:db:c2:f8:5b:4a:71:dc:fc:8b:
         b6:98:4c:31:a1:ec:28:72:15:4a:5a:7a:ad:f5:91:ab:83:d2:
         a9:2f:11:e6:9c:fb:e3:b3:dd:e8:51:c1:be:dc:fd:30:89:23:
         b4:41:5a:11:fa:3f:cf:c1:cb:2c:a0:d1:7e:0a:b2:49:15:70:
         36:e7:aa:ac:9e:14:67:d5:a1:3e:ce:4e:1a:72:fd:cc:49:1b:
         5e:e1:bb:bd:1c:3c:66:99:f9:f1:30:2b:29:42:fd:32:41:74:
         ea:c8:dd:a4:64:69:82:5b:32:55:f5:49:f1:d9:c0:89:8d:e1:
         cc:9f:61:bc:8c:36:4d:17:17:5d:40:d5:ee:c0:c7:64:e9:b0:
         11:99:d1:0f:27:1a:3a:14:6c:7e:6a:d9:a4:95:98:0b:29:7f:
         68:29:03:0d:19:11:0f:a4:3b:dc:fe:d3:8e:5a:3e:34:dc:3c:
         3c:83:88:f5:b0:7c:cc:ee:7d:1a:c4:ad:3d:c4:77:85:c0:be:
         73:cd:ce:97:a2:d8:ac:fb:60:37:0b:fc:a8:9b:da:08:3e:b2:
         fc:b3:6b:e5:83:48:54:e2:bb:c5:3b:3c:29:e7:3d:62:e3:c2:
         51:5c:d9:f4:28:0a:a5:73:9b:26:ab:93:0d:61:44:fa:59:14:
         0e:18:1f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:58:11 2026 by rpki-client