Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HYPERNET/0/34332e3234322e362e302f32332d3233203d3e20313532363137.roa
File:                     34332e3234322e362e302f32332d3233203d3e20313532363137.roa (raw, json)
Hash identifier:          7iHtCQR6e0nka6hQvBwN3Q/Z3+XGV5Yea6JYPBRsZlY=
Subject key identifier:   03:28:14:FB:4F:E0:5B:4C:34:A6:5C:7C:6C:1E:D5:3D:5E:D2:F7:34
Certificate issuer:       /CN=EE93B9852935C457CEE0956FA207824D0C87C22B
Certificate serial:       70ACF9654991D2461A952222DA49C2A210969C14
Authority key identifier: EE:93:B9:85:29:35:C4:57:CE:E0:95:6F:A2:07:82:4D:0C:87:C2:2B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE93B9852935C457CEE0956FA207824D0C87C22B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HYPERNET/0/34332e3234322e362e302f32332d3233203d3e20313532363137.roa
Signing time:             Wed 19 Aug 2026 06:24:00 +0000
ROA not before:           Wed 19 Aug 2026 06:19:00 +0000
ROA not after:            Wed 18 Aug 2027 06:24:00 +0000
asID:                     152617
IP address blocks:        43.242.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HYPERNET/0/EE93B9852935C457CEE0956FA207824D0C87C22B.crl
                          rsync://rpkica.twnic.tw/rpki/HYPERNET/0/EE93B9852935C457CEE0956FA207824D0C87C22B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE93B9852935C457CEE0956FA207824D0C87C22B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 22:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ac:f9:65:49:91:d2:46:1a:95:22:22:da:49:c2:a2:10:96:9c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE93B9852935C457CEE0956FA207824D0C87C22B
        Validity
            Not Before: Aug 19 06:19:00 2026 GMT
            Not After : Aug 18 06:24:00 2027 GMT
        Subject: CN=032814FB4FE05B4C34A65C7C6C1ED53D5ED2F734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7f:39:b6:96:c0:49:3c:dc:2d:f5:15:d8:6f:
                    d1:38:ee:ac:1f:16:56:af:8f:58:ae:1a:bf:1e:8c:
                    8d:e8:68:00:f9:78:48:12:21:80:6d:ac:b4:df:72:
                    a8:93:9d:bd:f8:14:3a:87:bf:e2:d2:82:2d:87:67:
                    f1:5a:b1:a1:16:8d:f8:14:94:42:9a:62:90:53:86:
                    b8:d0:40:95:1d:80:d1:13:5a:d7:3e:71:7c:90:36:
                    1d:40:71:98:7c:74:e8:a0:5b:41:7e:d7:d5:57:5b:
                    34:c9:be:c0:1b:e7:8a:6b:0f:da:21:1c:fb:6d:aa:
                    cc:a2:d4:20:14:18:1a:2f:23:71:bf:52:f1:20:24:
                    de:82:bd:07:7b:bc:0c:7a:1d:ec:9d:39:22:10:72:
                    3d:26:bb:01:39:fa:69:f2:c1:79:8f:15:bb:93:e7:
                    f6:a4:93:c8:11:d2:fe:7a:dd:de:62:d2:2d:eb:9d:
                    6f:cd:72:12:50:5d:34:4a:5d:b5:ad:cc:14:ca:d1:
                    22:a7:b6:29:ea:9f:be:27:44:03:4c:01:62:54:f0:
                    af:db:e3:8f:10:dd:26:cf:9e:10:61:ce:ae:de:90:
                    a3:91:4c:b5:ee:7d:56:d1:4b:70:46:98:a4:4f:40:
                    83:08:46:7b:0a:d3:67:44:de:9b:a1:a4:bf:70:1a:
                    a4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:28:14:FB:4F:E0:5B:4C:34:A6:5C:7C:6C:1E:D5:3D:5E:D2:F7:34
            X509v3 Authority Key Identifier:
                keyid:EE:93:B9:85:29:35:C4:57:CE:E0:95:6F:A2:07:82:4D:0C:87:C2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HYPERNET/0/EE93B9852935C457CEE0956FA207824D0C87C22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE93B9852935C457CEE0956FA207824D0C87C22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HYPERNET/0/34332e3234322e362e302f32332d3233203d3e20313532363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.242.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:53:7b:1b:33:39:25:cd:50:88:7a:d5:29:94:15:4f:c1:d8:
         1d:f5:f7:73:12:34:2d:b3:1e:f5:ae:4d:6d:ab:ee:a3:5d:9c:
         c6:5e:8c:0c:aa:59:30:ab:75:4e:08:7f:fc:c6:5e:7c:a8:0f:
         8e:89:df:97:dd:96:c8:d0:63:ca:4a:17:3f:03:35:0a:6d:4b:
         68:e4:67:95:3b:a4:e7:81:ea:0f:8e:b8:81:5d:e1:19:27:95:
         43:99:00:f8:dd:01:a9:ef:7d:19:d8:de:5d:ef:a8:03:26:70:
         b6:87:a1:4b:73:24:df:c6:ae:7e:95:e0:67:91:1c:a4:e7:4d:
         5d:db:19:6d:61:46:2f:a9:d7:6e:73:8f:e0:83:a0:26:6c:0d:
         b5:83:19:ec:8f:aa:97:ea:a5:f7:ca:69:68:c7:0c:7e:d9:f4:
         5b:82:d2:08:28:44:15:dd:52:e5:d5:b8:47:86:27:0a:69:19:
         9f:62:7c:97:e5:8a:33:0d:76:44:98:1f:27:4c:d0:9e:ed:67:
         04:f3:9d:a1:e5:84:2f:eb:37:f1:a3:5c:2f:21:e3:43:8c:d2:
         66:d6:d9:c5:65:71:2a:86:73:09:af:e0:f6:35:00:d5:01:a4:
         2e:43:4a:c6:54:a7:45:f4:ae:de:6c:99:da:c5:7f:b8:65:5a:
         8e:f4:31:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:27:10 2026 by rpki-client