Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/wIyQlwEgFUCdOzwbu5mIPgsVv4Y.roa
File:                     wIyQlwEgFUCdOzwbu5mIPgsVv4Y.roa (raw, json)
Hash identifier:          36N1FeAVuZE8eI+ldZfqvGhEClJE27XR+yAWiFk5XZA=
Subject key identifier:   C0:8C:90:97:01:20:15:40:9D:3B:3C:1B:BB:99:88:3E:0B:15:BF:86
Certificate issuer:       /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Certificate serial:       013A
Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/wIyQlwEgFUCdOzwbu5mIPgsVv4Y.roa
Signing time:             Thu 26 Feb 2026 08:24:03 +0000
ROA not before:           Thu 26 Feb 2026 08:24:03 +0000
ROA not after:            Wed 30 Dec 2026 15:30:20 +0000
asID:                     18040
IP address blocks:        2402:43e0:100::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 12:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
        Validity
            Not Before: Feb 26 08:24:03 2026 GMT
            Not After : Dec 30 15:30:20 2026 GMT
        Subject: CN=C08C9097012015409D3B3C1BBB99883E0B15BF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bf:f8:b2:80:00:06:82:d2:e2:1f:ba:14:20:
                    ac:53:8f:a9:31:a3:4f:58:6e:29:57:15:d2:0e:35:
                    1a:44:db:5c:0d:21:a5:18:7d:70:e2:9d:61:1d:64:
                    a7:f4:b5:d6:2f:ec:8f:69:ce:25:76:92:74:84:c1:
                    eb:a6:e9:49:fb:30:5c:2a:c6:24:27:ba:ed:10:1b:
                    c9:bc:aa:90:0d:e7:55:39:c5:16:e9:1b:64:8e:5f:
                    2c:a3:63:1c:4a:f7:08:9b:9a:67:5a:2e:37:24:74:
                    b5:18:dd:52:80:2f:7d:fa:5b:e2:11:5f:e3:22:58:
                    77:7d:be:81:9b:90:15:a3:9b:61:71:27:0f:40:b3:
                    60:e3:6e:6b:37:14:5d:e4:b1:6c:03:b7:24:de:74:
                    a0:06:17:e8:a7:a5:18:70:35:53:3b:b5:3a:3e:a5:
                    c7:20:7b:52:8a:a4:76:30:f5:b0:2a:58:92:5e:57:
                    a6:20:bf:e8:4a:b1:59:1c:d1:d8:0e:24:14:cf:a3:
                    a6:d7:bb:5d:cd:94:01:5c:28:bf:35:8f:33:4c:87:
                    ab:28:06:38:40:04:a7:c8:82:37:d2:3f:83:e1:d7:
                    cc:a5:3f:e6:a9:34:c0:5c:10:3d:91:c7:c3:f4:52:
                    d5:27:9e:af:02:a4:ab:41:23:4e:43:8d:fe:57:4f:
                    5b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8C:90:97:01:20:15:40:9D:3B:3C:1B:BB:99:88:3E:0B:15:BF:86
            X509v3 Authority Key Identifier:
                keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/wIyQlwEgFUCdOzwbu5mIPgsVv4Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:43e0:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:e5:fc:0a:c1:9b:81:53:92:04:af:fd:c9:74:6e:13:b9:55:
         78:c2:3c:13:05:17:2d:00:9d:19:5b:cb:5c:c7:8e:86:15:34:
         67:e6:5e:b8:1d:15:f3:d0:9c:28:a2:a8:85:e3:e5:fe:5f:f0:
         8c:fe:54:e3:50:8d:b0:9c:ae:17:24:92:9b:85:e7:92:6d:d3:
         8f:14:45:03:64:fb:85:3b:a7:58:71:e9:bc:53:6c:a6:2a:51:
         ff:e0:37:f8:03:46:98:23:18:d6:35:2f:7f:a8:2e:ce:d5:9c:
         bb:ea:e4:4c:75:11:48:e9:ac:d1:65:42:df:8a:33:6b:81:7a:
         d5:96:5a:da:f5:6a:43:91:94:e7:10:00:28:b2:f7:e2:f3:60:
         43:69:7c:33:27:47:5d:d9:5d:85:82:4f:8d:34:22:6b:d2:6b:
         30:09:4a:3e:27:ab:c9:5d:29:f3:95:41:7d:b2:b4:9e:23:7a:
         c7:11:aa:15:42:b5:2b:1c:0c:a0:4e:77:9c:78:69:c0:f4:83:
         b8:d6:46:2a:9f:8c:46:e0:b7:c3:9a:85:63:21:9e:41:62:e9:
         27:e5:46:8b:bf:b0:3a:12:d1:8b:55:1b:42:8c:45:e5:12:92:
         32:66:e7:46:53:20:bf:83:c9:db:9d:8f:7b:e5:6b:70:ce:88:
         5d:1f:06:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:28 2026 by rpki-client