Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HYPERNET/0/323430323a366432303a3a2f33322d3332203d3e20313532363137.roa
File:                     323430323a366432303a3a2f33322d3332203d3e20313532363137.roa (raw, json)
Hash identifier:          jX3WMUCdK2gDp6s4LCukCAr/MID9F15d89byV2/zfQc=
Subject key identifier:   E8:B6:5C:93:10:1F:10:03:5E:37:04:4D:EE:A4:BD:BC:BC:A5:E9:35
Certificate issuer:       /CN=EE93B9852935C457CEE0956FA207824D0C87C22B
Certificate serial:       64C479A93414DFA33057B8A5D993796E11773330
Authority key identifier: EE:93:B9:85:29:35:C4:57:CE:E0:95:6F:A2:07:82:4D:0C:87:C2:2B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE93B9852935C457CEE0956FA207824D0C87C22B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HYPERNET/0/323430323a366432303a3a2f33322d3332203d3e20313532363137.roa
Signing time:             Wed 19 Aug 2026 06:24:01 +0000
ROA not before:           Wed 19 Aug 2026 06:19:01 +0000
ROA not after:            Wed 18 Aug 2027 06:24:01 +0000
asID:                     152617
IP address blocks:        2402:6d20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HYPERNET/0/EE93B9852935C457CEE0956FA207824D0C87C22B.crl
                          rsync://rpkica.twnic.tw/rpki/HYPERNET/0/EE93B9852935C457CEE0956FA207824D0C87C22B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE93B9852935C457CEE0956FA207824D0C87C22B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 09:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c4:79:a9:34:14:df:a3:30:57:b8:a5:d9:93:79:6e:11:77:33:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE93B9852935C457CEE0956FA207824D0C87C22B
        Validity
            Not Before: Aug 19 06:19:01 2026 GMT
            Not After : Aug 18 06:24:01 2027 GMT
        Subject: CN=E8B65C93101F10035E37044DEEA4BDBCBCA5E935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a6:9a:58:dc:09:d2:df:09:ab:a3:30:20:c8:
                    90:82:61:0c:dc:3d:8e:4e:a2:54:6b:e0:b7:db:92:
                    fd:3d:c2:6b:cb:53:08:99:d8:23:5a:8f:4c:b1:cd:
                    db:53:74:e6:04:ed:0a:3c:8c:7f:b4:b6:09:f1:6f:
                    c3:bf:3d:db:d3:ab:5f:6b:1b:ca:ff:7c:ab:59:21:
                    8b:d8:85:ce:ce:b2:79:e7:be:51:ae:10:db:d6:b5:
                    7e:3d:c9:ff:a1:fa:81:d2:f4:03:c5:d8:d2:f0:2a:
                    27:a7:7c:cb:a6:22:8d:82:ef:ef:6a:4e:20:b0:78:
                    8a:71:03:79:fe:16:af:ef:b3:8d:89:55:de:c5:3d:
                    45:ce:d2:66:a4:56:04:f9:e7:3f:92:10:d7:dc:3c:
                    8a:65:35:c8:fd:05:e6:b1:04:ab:bf:e3:45:cf:4b:
                    1f:1c:85:32:f9:d7:45:36:91:c1:e8:da:78:78:26:
                    d0:8d:dc:f8:00:54:3d:ea:c1:c9:08:aa:1c:15:2d:
                    8d:0c:69:26:ea:83:e2:f2:20:5d:f7:f7:12:7a:de:
                    07:e8:57:7a:69:25:95:4c:fe:c7:5c:17:3d:e8:d1:
                    f2:bb:57:20:72:87:a6:28:52:28:54:e7:67:d2:b1:
                    ab:1d:20:2e:07:26:8d:00:d4:63:3d:c0:ce:ec:db:
                    be:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B6:5C:93:10:1F:10:03:5E:37:04:4D:EE:A4:BD:BC:BC:A5:E9:35
            X509v3 Authority Key Identifier:
                keyid:EE:93:B9:85:29:35:C4:57:CE:E0:95:6F:A2:07:82:4D:0C:87:C2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HYPERNET/0/EE93B9852935C457CEE0956FA207824D0C87C22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE93B9852935C457CEE0956FA207824D0C87C22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HYPERNET/0/323430323a366432303a3a2f33322d3332203d3e20313532363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:fb:e7:41:13:c9:24:fa:1c:6c:e3:15:e8:8c:4f:a5:f9:15:
         e0:d7:dc:12:b1:3b:af:41:d5:e1:7f:5d:4b:2f:b4:ab:62:6e:
         9c:53:03:9b:28:03:e0:c7:46:6a:66:74:80:b0:40:1e:22:f4:
         b0:d4:46:d2:61:9c:ef:59:ec:d5:13:98:3c:87:c3:9d:25:02:
         d5:72:65:d2:05:88:2e:2c:de:00:38:b6:7a:f3:cb:d9:f3:21:
         52:28:0a:58:2e:92:fa:d7:9d:b2:1d:49:4f:db:2d:14:29:c1:
         d9:13:22:02:4a:a8:ab:e3:f3:35:a3:9e:5e:99:93:98:5e:63:
         3b:13:c1:22:76:1b:1f:09:b1:e1:d8:51:42:a4:37:4c:52:18:
         b6:54:f1:2a:66:86:36:11:6f:01:3f:05:83:08:f2:7e:6a:ed:
         22:86:f8:01:5e:81:a8:31:12:62:b1:69:0b:31:52:00:5a:4c:
         f5:66:59:1a:d9:22:23:73:e0:00:da:b9:2c:f8:51:d6:10:28:
         a4:a9:12:41:9a:0e:53:8d:82:39:34:bc:06:06:9e:b6:b7:11:
         36:12:9e:70:5a:96:14:f7:36:18:3e:a2:75:4d:22:90:f4:82:
         c2:aa:b1:b4:74:c7:40:2c:c7:84:84:cc:cf:a9:c1:ca:d3:2e:
         0a:7d:50:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:02:15 2026 by rpki-client