Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGNALPRO/0/323430323a373465303a3a2f33322d3438203d3e20313534393032.roa
File:                     323430323a373465303a3a2f33322d3438203d3e20313534393032.roa (raw, json)
Hash identifier:          o9l5uQGT7gvz2sBaG5Y7v6HTAuxR8OfjRnSvVaossIU=
Subject key identifier:   77:70:FB:BE:F8:41:19:91:B7:29:FD:51:05:FE:CE:C5:FB:51:4D:D6
Certificate issuer:       /CN=4115181D72CC034A7B256A0C7F9D7DA86F222523
Certificate serial:       1A5872FD2A81D0E4D00669350768CECD82C2420C
Authority key identifier: 41:15:18:1D:72:CC:03:4A:7B:25:6A:0C:7F:9D:7D:A8:6F:22:25:23
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4115181D72CC034A7B256A0C7F9D7DA86F222523.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIGNALPRO/0/323430323a373465303a3a2f33322d3438203d3e20313534393032.roa
Signing time:             Mon 14 Sep 2026 06:44:01 +0000
ROA not before:           Mon 14 Sep 2026 06:39:01 +0000
ROA not after:            Mon 13 Sep 2027 06:44:01 +0000
asID:                     154902
IP address blocks:        2402:74e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIGNALPRO/0/4115181D72CC034A7B256A0C7F9D7DA86F222523.crl
                          rsync://rpkica.twnic.tw/rpki/SIGNALPRO/0/4115181D72CC034A7B256A0C7F9D7DA86F222523.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4115181D72CC034A7B256A0C7F9D7DA86F222523.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 11:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:58:72:fd:2a:81:d0:e4:d0:06:69:35:07:68:ce:cd:82:c2:42:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4115181D72CC034A7B256A0C7F9D7DA86F222523
        Validity
            Not Before: Sep 14 06:39:01 2026 GMT
            Not After : Sep 13 06:44:01 2027 GMT
        Subject: CN=7770FBBEF8411991B729FD5105FECEC5FB514DD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:10:64:7f:6e:e4:c3:8a:90:54:1e:d1:19:75:
                    24:93:1f:73:83:b6:ce:50:9c:4c:4c:99:e7:f9:20:
                    18:e4:76:8a:e7:4e:f5:bb:24:fc:da:4e:f8:a6:2d:
                    cb:ec:77:d9:c6:e1:38:cc:fb:73:c9:2a:bc:49:ae:
                    86:0f:7f:9b:4a:af:81:38:8d:9f:e4:28:4e:87:99:
                    52:c4:42:b5:29:4d:68:4b:13:2d:5c:cb:a9:14:15:
                    ec:58:88:4e:14:db:69:96:49:3a:f6:2e:1f:a2:1f:
                    83:8b:13:04:83:07:7b:b9:51:a5:2d:b0:3b:9e:9c:
                    38:85:eb:9d:18:bc:1a:a9:c6:b1:f7:f8:64:27:11:
                    fb:68:ee:e6:53:03:72:59:37:da:ec:54:85:2f:60:
                    76:3b:6f:fb:5f:62:c0:9b:9c:95:35:12:f3:0d:0e:
                    cd:52:78:6e:44:71:29:50:b5:a2:74:10:98:48:f2:
                    d8:ca:0c:bf:18:3b:88:66:aa:e8:f2:1c:84:64:8b:
                    7d:64:54:56:71:40:fb:38:89:dd:d7:dd:c1:bf:c8:
                    04:60:ef:1c:5e:8c:98:78:3e:a2:aa:33:bc:6b:93:
                    2f:31:b4:38:20:aa:77:47:f8:b3:bc:4f:63:6d:fd:
                    22:ff:d4:43:cc:31:9f:5e:dd:3b:74:cf:7d:79:a4:
                    1b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:70:FB:BE:F8:41:19:91:B7:29:FD:51:05:FE:CE:C5:FB:51:4D:D6
            X509v3 Authority Key Identifier:
                keyid:41:15:18:1D:72:CC:03:4A:7B:25:6A:0C:7F:9D:7D:A8:6F:22:25:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIGNALPRO/0/4115181D72CC034A7B256A0C7F9D7DA86F222523.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4115181D72CC034A7B256A0C7F9D7DA86F222523.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGNALPRO/0/323430323a373465303a3a2f33322d3438203d3e20313534393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:74e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:23:ac:53:72:28:9e:d7:a7:4c:47:55:ea:4e:af:9e:70:de:
         4b:0d:c2:ae:e6:18:5a:8e:d8:f2:e8:82:a2:75:21:9c:c0:c0:
         02:a1:af:fb:77:68:94:a8:bf:f7:d0:13:f9:bb:35:60:92:38:
         73:e4:e1:e8:3c:6c:29:c2:a5:08:b8:7d:b0:af:c5:cb:83:5d:
         87:ad:dd:c1:ed:07:eb:c2:44:1c:2d:f9:15:65:f7:36:4e:90:
         61:8f:24:f9:5a:a0:0d:36:a8:56:bf:6b:cd:cc:d9:83:c4:54:
         16:40:23:2f:0b:53:11:a3:c1:7f:52:4b:13:56:36:b5:4d:67:
         8d:84:7a:c2:21:7c:76:2e:e9:d4:eb:08:54:1f:c1:80:90:ae:
         18:d0:0f:68:e2:b7:41:7b:b7:32:61:19:16:fe:fe:95:ee:c0:
         65:ca:b0:bb:8b:74:35:1b:aa:d0:df:f4:0b:39:8e:c7:fe:6d:
         60:c0:a3:69:73:d4:71:aa:e7:b7:06:d8:cd:95:53:b2:a9:7f:
         6a:bf:b2:8c:63:03:47:13:3b:57:45:59:2d:65:98:19:aa:97:
         e0:0e:e1:27:fc:dc:3f:8d:d3:e3:1c:01:f6:ad:fb:38:e2:4c:
         ba:21:8d:48:07:07:c5:7d:33:5e:82:2c:0a:d1:ca:af:9a:1c:
         29:f9:bf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:16:31 2026 by rpki-client