Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WOLFNET/0/323430373a613063303a3a2f33322d3438203d3e20323038313438.roa
File:                     323430373a613063303a3a2f33322d3438203d3e20323038313438.roa (raw, json)
Hash identifier:          Szy4lygNkgRpRyy3KdRXZqnw/brjzR8qzkTeHjwMPVY=
Subject key identifier:   B9:F9:34:17:A9:E3:71:A8:EA:CC:D3:9A:9F:1C:E7:35:C2:B7:C5:D7
Certificate issuer:       /CN=334FCE79EA1C224FEDE0A15962C5536E18D15714
Certificate serial:       58FA24556D0326FF4FD58ABCC65D870E97033F53
Authority key identifier: 33:4F:CE:79:EA:1C:22:4F:ED:E0:A1:59:62:C5:53:6E:18:D1:57:14
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/334FCE79EA1C224FEDE0A15962C5536E18D15714.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WOLFNET/0/323430373a613063303a3a2f33322d3438203d3e20323038313438.roa
Signing time:             Mon 11 May 2026 17:19:57 +0000
ROA not before:           Mon 11 May 2026 17:14:57 +0000
ROA not after:            Mon 10 May 2027 17:19:57 +0000
asID:                     208148
IP address blocks:        2407:a0c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WOLFNET/0/334FCE79EA1C224FEDE0A15962C5536E18D15714.crl
                          rsync://rpkica.twnic.tw/rpki/WOLFNET/0/334FCE79EA1C224FEDE0A15962C5536E18D15714.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/334FCE79EA1C224FEDE0A15962C5536E18D15714.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fa:24:55:6d:03:26:ff:4f:d5:8a:bc:c6:5d:87:0e:97:03:3f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334FCE79EA1C224FEDE0A15962C5536E18D15714
        Validity
            Not Before: May 11 17:14:57 2026 GMT
            Not After : May 10 17:19:57 2027 GMT
        Subject: CN=B9F93417A9E371A8EACCD39A9F1CE735C2B7C5D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:06:2f:ee:81:44:a7:32:f0:58:89:c7:bd:04:
                    a7:d3:f2:a3:89:7d:73:19:a0:cb:c6:51:fb:6d:bd:
                    80:4b:74:23:68:6c:77:70:c1:7a:c0:19:72:74:c9:
                    fe:88:1b:61:4b:89:a6:ac:36:c4:1b:5b:10:ae:01:
                    43:3d:dc:c4:01:4a:54:96:fd:c1:4d:03:75:e5:07:
                    2d:9a:d8:17:92:2b:f1:eb:38:90:12:a6:1c:55:ce:
                    46:ee:dd:94:4d:60:c9:79:4d:ae:4b:1c:7a:a1:33:
                    3b:c6:7b:e1:a7:1d:80:59:d9:13:c7:e2:aa:d6:c1:
                    cf:b8:b0:d1:86:26:a6:92:69:73:28:e1:17:7f:ec:
                    be:0b:ad:9c:de:af:9d:b5:ea:bb:4a:bd:20:48:5a:
                    c1:97:01:c7:6a:76:07:10:22:f9:8e:77:66:6e:41:
                    48:08:c3:de:94:f9:d2:7b:c4:71:3b:5e:9f:a5:6c:
                    6a:ba:50:8a:2a:54:4a:4e:cc:bc:31:ac:05:38:b7:
                    68:5d:64:57:ba:51:d7:6e:8f:e0:82:b0:50:0e:59:
                    ed:67:e6:6c:0a:36:dd:98:f8:cf:1e:31:41:07:a6:
                    f0:b6:a9:03:f2:13:32:ac:6e:69:75:c9:62:19:d9:
                    32:5e:12:ae:5a:98:68:f2:35:a1:6b:11:40:78:84:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F9:34:17:A9:E3:71:A8:EA:CC:D3:9A:9F:1C:E7:35:C2:B7:C5:D7
            X509v3 Authority Key Identifier:
                keyid:33:4F:CE:79:EA:1C:22:4F:ED:E0:A1:59:62:C5:53:6E:18:D1:57:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WOLFNET/0/334FCE79EA1C224FEDE0A15962C5536E18D15714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/334FCE79EA1C224FEDE0A15962C5536E18D15714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WOLFNET/0/323430373a613063303a3a2f33322d3438203d3e20323038313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:c9:70:fa:82:e1:84:7d:78:dc:3d:06:db:04:38:72:10:14:
         41:aa:d5:d9:7e:ea:a0:78:4e:f8:6e:38:ca:57:86:8b:d2:ac:
         c6:e3:b5:bc:94:63:12:d6:b1:2c:ed:63:64:a5:39:0b:5e:ce:
         c4:69:e1:6c:90:8f:a7:4b:cc:51:7b:50:97:64:50:f0:be:de:
         53:1d:92:4e:7f:b8:4f:3c:52:d9:13:c3:86:15:8f:f4:60:a1:
         49:02:7d:fd:00:a3:9a:f4:24:45:be:20:e2:13:46:e5:7d:4b:
         2f:07:62:18:24:5b:8a:67:9f:bf:fd:73:3c:7e:6d:f4:a0:73:
         74:6d:1a:8f:de:51:2e:b2:06:6c:06:f1:46:0d:e1:34:f0:b2:
         32:4c:14:d1:33:fc:e8:e1:11:b0:db:df:f1:c8:cc:dd:53:90:
         99:de:eb:86:5c:93:92:de:5e:0f:23:bc:5a:10:3d:73:ee:61:
         7d:b5:3e:9b:18:b9:d4:e8:dd:93:b5:65:73:fe:a0:84:37:c9:
         e7:34:11:0e:24:66:8b:58:0c:cf:b7:a2:28:92:d2:b2:77:fc:
         7e:16:2a:a6:a7:48:e3:4f:5e:cd:f9:79:57:03:f5:b5:2d:05:
         0f:0d:e6:27:44:d7:90:de:e7:1a:5b:8d:46:ce:95:4a:87:42:
         63:3f:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:14 2026 by rpki-client