Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/323430353a383730303a393930303a3a2f34382d3438203d3e203138343234.roa
File:                     323430353a383730303a393930303a3a2f34382d3438203d3e203138343234.roa (raw, json)
Hash identifier:          hVJHxUw6RbuFl+rhLx25FzSrSbwk7KlZ8+83i04eWMY=
Subject key identifier:   73:92:6E:01:95:43:09:78:0E:C6:AC:12:6B:40:1C:D6:EF:E1:67:59
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       76B0DB98BD9BF0258BD47CF33335CB5F45289B3C
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/323430353a383730303a393930303a3a2f34382d3438203d3e203138343234.roa
Signing time:             Mon 11 May 2026 17:28:53 +0000
ROA not before:           Mon 11 May 2026 17:23:53 +0000
ROA not after:            Mon 10 May 2027 17:28:53 +0000
asID:                     18424
IP address blocks:        2405:8700:9900::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b0:db:98:bd:9b:f0:25:8b:d4:7c:f3:33:35:cb:5f:45:28:9b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 17:23:53 2026 GMT
            Not After : May 10 17:28:53 2027 GMT
        Subject: CN=73926E01954309780EC6AC126B401CD6EFE16759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:75:0a:d7:0e:ca:b8:c5:3b:e1:15:46:35:01:
                    7a:18:71:64:e5:2f:ac:d2:c1:dc:d6:1b:e7:e6:eb:
                    f4:32:9f:8e:20:47:4e:2c:16:d2:6a:2a:f0:a9:74:
                    2d:77:dc:7e:d1:b8:27:c7:8b:6e:92:e5:2f:37:90:
                    66:b1:2c:a4:99:15:af:fb:ec:c0:c5:91:cd:21:58:
                    36:fe:3d:9e:4d:1b:0e:5d:af:4d:95:db:8d:be:38:
                    d6:8f:cc:ef:f8:ca:98:f0:2c:67:6f:bf:b8:ea:88:
                    a9:a7:30:53:12:0e:19:23:18:8c:2d:9a:94:1e:47:
                    a5:97:46:e8:51:a5:5c:41:68:73:0c:66:3d:aa:85:
                    97:4f:a7:d4:fe:b9:96:f3:57:3a:52:dd:27:1b:f2:
                    b3:d8:90:a2:2e:f1:c5:3d:d2:1a:60:77:0e:fb:e7:
                    d0:10:64:a5:8f:88:7f:61:9a:b5:a1:83:8a:89:00:
                    b2:36:62:59:65:04:88:72:f4:c2:cd:79:fa:52:d8:
                    c9:bf:b4:c5:61:b3:6f:66:35:5e:47:75:3e:d6:01:
                    61:09:7f:4a:a0:3a:02:7d:05:23:a3:91:bd:9a:f6:
                    70:a3:68:46:58:1f:0b:4c:0f:02:c3:74:eb:12:6c:
                    da:d8:9f:65:75:1c:01:be:2d:3c:8d:fd:c3:df:7e:
                    35:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:92:6E:01:95:43:09:78:0E:C6:AC:12:6B:40:1C:D6:EF:E1:67:59
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/323430353a383730303a393930303a3a2f34382d3438203d3e203138343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8700:9900::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:84:6d:4a:42:81:e6:70:06:8e:89:45:7a:9e:de:84:34:6e:
         f1:ea:81:93:ad:8b:15:60:ec:07:dc:ac:60:06:cc:84:b4:04:
         98:b8:8d:51:97:bb:2e:86:15:ff:0c:c4:8a:9a:32:e0:fd:11:
         b4:dc:4b:43:ce:12:3d:7c:52:19:2a:8a:78:d6:5f:25:1a:9a:
         d7:59:c5:e5:20:c3:59:2d:3e:77:de:6d:87:64:ed:29:b0:d9:
         83:6a:ee:a1:60:2f:b6:4a:de:ab:90:55:0a:c8:74:13:fc:7a:
         c9:ec:99:f1:ef:87:3f:09:d9:df:4b:65:14:b2:22:24:e3:f3:
         30:e3:b3:4f:72:81:38:aa:f9:db:0c:00:4d:29:47:14:ad:f2:
         d0:a7:79:a5:bb:d3:96:23:ee:bd:f5:56:09:57:40:fd:e3:75:
         f8:d1:51:46:cb:b9:6c:65:04:b9:76:2a:af:a9:9b:8f:98:95:
         39:e5:1c:db:59:24:13:b4:85:3d:16:b5:ab:df:36:04:06:38:
         b3:ea:e5:97:b1:31:f3:c7:e4:03:73:fb:a8:3b:59:69:0d:b2:
         6b:95:e5:90:b1:77:cb:93:e1:98:ca:73:fe:81:5b:bb:31:d4:
         b1:3c:bf:36:e3:2f:08:31:6c:30:63:5a:f3:3b:77:49:1e:cd:
         72:f2:c0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:57:54 2026 by rpki-client