Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a623639313a3a2f34382d3634203d3e20313532363132.roa
File:                     323430323a343365303a623639313a3a2f34382d3634203d3e20313532363132.roa (raw, json)
Hash identifier:          /ZMYMcRfS4rihkl6K+danfG6J1+aix3g9hU8GRVSTWM=
Subject key identifier:   EA:D8:FF:C5:8F:29:3A:06:9E:50:79:92:2D:0F:69:1B:1C:ED:C0:6A
Certificate issuer:       /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial:       20AFF88277A388345F1A7B441A8EB97B484B1CA5
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a623639313a3a2f34382d3634203d3e20313532363132.roa
Signing time:             Tue 01 Sep 2026 16:44:02 +0000
ROA not before:           Tue 01 Sep 2026 16:39:02 +0000
ROA not after:            Tue 31 Aug 2027 16:44:02 +0000
asID:                     152612
IP address blocks:        2402:43e0:b691::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
                          rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:af:f8:82:77:a3:88:34:5f:1a:7b:44:1a:8e:b9:7b:48:4b:1c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
        Validity
            Not Before: Sep  1 16:39:02 2026 GMT
            Not After : Aug 31 16:44:02 2027 GMT
        Subject: CN=EAD8FFC58F293A069E5079922D0F691B1CEDC06A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:58:97:3b:64:7a:aa:b6:1d:48:35:3a:d4:
                    ac:c3:43:86:e8:24:e6:9b:8c:7f:00:26:09:0b:e9:
                    6b:14:4f:a8:22:ad:e1:59:e8:9d:aa:c9:a8:07:db:
                    3d:86:7c:cc:9f:e5:a8:8e:2a:4d:4a:43:08:2e:fa:
                    2a:a5:8c:2e:d5:19:11:53:d1:d6:ef:1c:12:dc:97:
                    0d:bb:a6:27:9f:42:33:cc:76:14:68:0a:fc:ef:ea:
                    c7:1e:94:f0:63:04:e0:15:49:23:c0:de:dd:03:54:
                    40:59:e6:85:7b:02:0d:33:e8:53:13:a7:8c:3c:78:
                    70:f1:8e:17:b1:93:4c:b5:40:ee:a8:65:0e:34:03:
                    35:dc:be:dc:a8:5d:2e:5b:86:34:d5:78:ab:19:79:
                    42:af:0e:65:5d:a2:23:3e:d6:02:ad:54:fb:31:97:
                    a8:ee:4d:bc:98:ee:70:43:2f:9f:14:66:fc:2d:46:
                    1d:cf:a1:3f:93:44:ea:d5:22:f8:54:a6:4e:ee:9e:
                    04:e3:c0:ab:6a:7e:4a:57:72:ee:3c:35:26:c7:23:
                    36:d0:3b:7c:d0:1a:c8:c9:26:a7:50:7d:97:27:5f:
                    d3:59:50:05:8c:9e:c8:ee:fc:01:13:1d:64:d6:e6:
                    ec:80:2d:7c:61:a7:3e:7b:b1:66:4b:3b:95:c0:03:
                    e6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D8:FF:C5:8F:29:3A:06:9E:50:79:92:2D:0F:69:1B:1C:ED:C0:6A
            X509v3 Authority Key Identifier:
                keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a623639313a3a2f34382d3634203d3e20313532363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:43e0:b691::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:ce:75:d9:5d:7f:eb:ca:c5:1f:2f:e1:c5:d4:3b:50:53:4a:
         58:3d:be:00:85:68:71:25:d4:3a:0d:a3:11:61:8d:ac:a7:9a:
         2f:00:8d:fe:5c:08:03:13:6b:4d:82:ab:e9:6b:8f:83:11:ea:
         ab:09:b3:28:b0:84:73:ba:64:72:09:a8:c5:67:91:48:23:c8:
         24:e8:3d:2e:9a:92:f6:05:67:b3:a7:0c:8d:f0:df:f0:35:91:
         e8:27:58:2d:bc:78:f8:70:84:6c:5b:b7:56:a7:b9:bc:aa:04:
         0c:29:20:25:3c:86:30:cc:4f:e8:fa:99:26:78:bb:cc:e4:01:
         d5:77:bd:e8:e1:2f:b4:20:cc:0b:2d:20:e6:cc:eb:d9:52:c0:
         cd:38:ff:78:8a:d7:32:f2:5e:fe:08:7f:92:b6:d3:47:30:d8:
         92:de:c0:fb:06:d8:28:4d:8d:b3:ee:c6:83:10:9e:ad:ce:64:
         ca:a0:54:a9:63:40:9b:85:32:1a:f6:5c:4e:e8:49:8b:64:25:
         7a:43:c2:74:c0:b1:64:50:d6:58:af:62:8c:bc:9c:5c:87:8d:
         8b:b7:4a:a5:32:b5:02:a7:60:51:f7:86:95:df:93:ba:67:be:
         ce:b8:9e:4f:a4:14:4e:24:a5:13:25:bd:d2:96:e9:f1:17:5c:
         3e:81:be:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:59:34 2026 by rpki-client