Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a6163653a3a2f34382d3634203d3e203138303430.roa
File:                     323430323a343365303a6163653a3a2f34382d3634203d3e203138303430.roa (raw, json)
Hash identifier:          Za7J1hKjGlPncRTIVGAw4R5lobM168tANOUejMUtTGA=
Subject key identifier:   F6:93:35:36:59:92:15:86:25:31:C7:56:DB:40:21:E3:78:72:E4:66
Certificate issuer:       /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial:       478C176A565B4AE3025BF4C09483B8CDA558D491
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a6163653a3a2f34382d3634203d3e203138303430.roa
Signing time:             Mon 17 Aug 2026 17:24:00 +0000
ROA not before:           Mon 17 Aug 2026 17:19:00 +0000
ROA not after:            Mon 16 Aug 2027 17:24:00 +0000
asID:                     18040
IP address blocks:        2402:43e0:ace::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
                          rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8c:17:6a:56:5b:4a:e3:02:5b:f4:c0:94:83:b8:cd:a5:58:d4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
        Validity
            Not Before: Aug 17 17:19:00 2026 GMT
            Not After : Aug 16 17:24:00 2027 GMT
        Subject: CN=F6933536599215862531C756DB4021E37872E466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a0:a2:1f:74:7c:5b:bf:e2:57:64:1b:cc:81:
                    e4:f1:b8:84:ca:69:f0:c0:7b:ab:13:6d:a5:c9:f4:
                    fd:b1:02:a1:bb:fd:d0:40:3f:39:58:60:79:79:e9:
                    5c:ec:30:0d:fc:c9:17:90:f0:7f:a7:00:75:26:4a:
                    bf:be:bb:65:56:f5:f7:9a:71:10:c1:af:f1:8e:64:
                    6a:f3:0d:a1:8e:10:5d:ea:75:08:df:29:0c:de:af:
                    40:85:52:98:eb:8b:06:ce:e0:46:4e:d1:11:f7:de:
                    24:82:f8:7b:5f:13:8a:88:df:5a:78:37:52:01:02:
                    37:a3:d0:e7:7a:a5:4a:c4:df:e9:ec:36:81:02:76:
                    43:4d:89:9e:7a:f2:b8:45:f7:04:eb:33:78:a2:44:
                    1b:bc:6d:33:90:a7:24:e0:bd:c0:91:1b:2b:80:69:
                    bb:bf:b2:11:29:70:4d:f9:c7:a0:32:b8:88:75:05:
                    bc:3b:41:9b:9b:94:e8:0b:c4:b9:dd:f0:86:f2:0d:
                    a0:b2:c6:df:21:a3:45:0c:f9:fd:08:b3:d1:7c:c4:
                    19:60:4e:bf:90:ce:90:7f:e8:c0:df:3a:15:ec:40:
                    74:ec:37:de:0a:37:08:80:af:07:dd:96:0d:75:9a:
                    93:b1:ff:1b:11:9b:ac:12:4c:f6:41:96:95:ad:21:
                    3b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:93:35:36:59:92:15:86:25:31:C7:56:DB:40:21:E3:78:72:E4:66
            X509v3 Authority Key Identifier:
                keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a6163653a3a2f34382d3634203d3e203138303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:43e0:ace::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:c5:40:f7:80:7d:30:0e:16:b7:6e:1c:7f:4b:55:71:31:5a:
         42:4f:e8:c3:bf:7c:b4:cb:05:94:a4:9b:86:37:63:ee:39:bf:
         19:ad:01:09:13:f6:74:00:89:9a:00:a5:45:f6:66:ab:9e:47:
         4c:66:f1:e8:c1:8a:0d:a5:98:bf:ae:67:91:a7:07:70:8c:28:
         19:62:49:bd:a8:26:8a:13:d1:b8:9e:3a:aa:b0:62:d0:0e:25:
         13:fc:07:ff:15:8c:95:6c:1f:d0:de:69:2b:36:03:e2:ec:7d:
         71:e6:13:00:c3:37:e2:0b:8f:47:ed:49:71:b3:92:a7:00:ab:
         be:00:f3:a4:2d:71:a6:ac:ea:55:89:c1:8d:80:f4:78:40:2a:
         ee:97:44:50:bf:7b:b4:1a:ef:ad:9e:76:ee:21:d0:29:c7:02:
         2b:a5:26:07:c1:3b:e8:ea:d9:1e:fb:86:9c:6c:70:51:84:21:
         be:0d:43:65:11:1f:7e:63:8c:4a:2c:00:8a:68:43:92:e5:6d:
         5d:f4:e4:f5:27:3c:7c:6f:05:a1:95:43:07:50:bf:a2:c7:28:
         83:b2:22:57:db:72:19:54:65:59:36:0a:8a:42:10:e8:9f:d0:
         da:79:42:48:73:5b:7c:a2:7b:3a:55:39:3f:56:eb:9c:92:4b:
         97:94:af:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:17 2026 by rpki-client