Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/9ZhjQAm7I3nxE0OZaDsYO9wxWXk.roa
File:                     9ZhjQAm7I3nxE0OZaDsYO9wxWXk.roa (raw, json)
Hash identifier:          +BkoiqRk9FKD5jliPi2viBVVjNTgRkFsANprVj/FnTs=
Subject key identifier:   F5:98:63:40:09:BB:23:79:F1:13:43:99:68:3B:18:3B:DC:31:59:79
Certificate issuer:       /CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
Certificate serial:       02A0
Authority key identifier: AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/9ZhjQAm7I3nxE0OZaDsYO9wxWXk.roa
Signing time:             Tue 10 Feb 2026 15:54:44 +0000
ROA not before:           Tue 10 Feb 2026 15:54:44 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     150766
IP address blocks:        2401:5da0:53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 12:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
        Validity
            Not Before: Feb 10 15:54:44 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F598634009BB2379F1134399683B183BDC315979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:46:f1:94:4c:35:36:a3:99:e5:54:03:1c:
                    56:9c:81:88:95:a5:f5:ac:2a:93:ad:83:5b:08:a0:
                    d6:6f:32:1a:d2:da:1e:4d:ce:12:ed:de:81:56:a8:
                    86:f9:09:99:1b:37:4a:98:4f:67:6d:b4:47:4d:0e:
                    11:c3:90:b1:09:31:82:f9:1b:5f:eb:16:24:8d:4b:
                    47:8c:55:a8:e6:ba:31:9c:aa:92:d4:33:54:6d:60:
                    db:6f:23:0b:82:c1:61:dd:45:b2:29:ac:33:d8:19:
                    c9:ac:f8:d5:ee:86:16:4a:cb:33:62:3c:64:53:31:
                    96:c4:ff:f8:01:26:94:67:e7:82:03:8e:31:de:f6:
                    40:14:51:d3:d0:1d:ce:6c:1a:a4:75:ed:7b:7e:a9:
                    c8:e5:ae:51:67:3d:ff:94:7d:cb:d9:30:40:60:9a:
                    f7:8d:d7:eb:e0:c2:37:6b:ec:b2:f9:75:eb:ac:ce:
                    18:04:45:83:49:11:1b:a0:3d:1b:68:87:ad:96:ec:
                    1f:4e:5d:e5:6e:fa:9d:e8:7a:f0:0c:96:f4:86:02:
                    c9:08:6f:54:77:51:41:35:4e:50:09:c0:e1:30:73:
                    7c:22:00:f8:c8:3a:8c:dc:e0:3d:8f:2f:34:67:e2:
                    d5:62:02:dc:d7:6e:2a:c6:29:b3:69:dc:b6:1f:28:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:98:63:40:09:BB:23:79:F1:13:43:99:68:3B:18:3B:DC:31:59:79
            X509v3 Authority Key Identifier:
                keyid:AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/9ZhjQAm7I3nxE0OZaDsYO9wxWXk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5da0:53::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:fd:31:2c:9c:f1:59:65:4d:93:14:e9:de:c8:5f:19:d1:e3:
         d5:17:3a:09:e9:15:19:ab:79:e8:ff:68:c6:7a:a1:5e:e8:10:
         8d:5a:d2:b3:16:33:fe:e9:49:27:fe:76:60:6a:2a:e1:44:99:
         af:5b:dd:fe:3a:e4:e3:42:5e:9e:7c:ce:d3:46:44:cb:ca:6c:
         bd:db:dc:6b:94:15:2a:26:f0:84:5d:58:b7:40:8a:81:41:5e:
         ed:5c:8b:d3:12:ab:43:b5:74:80:46:de:3d:cf:5e:43:5c:53:
         e3:5d:57:14:e7:ad:4e:a1:f1:8e:0f:a1:98:d8:0c:8d:d4:a0:
         2d:ca:25:42:eb:94:12:42:7c:b3:46:b9:4d:9f:c2:11:12:94:
         f0:d4:6b:4b:d9:bb:72:20:39:d1:6a:45:14:6d:8a:58:63:7c:
         e7:5f:a2:be:8b:17:85:15:0b:28:ea:c5:0b:c4:71:26:0f:fc:
         1c:e0:49:49:37:88:10:5c:de:90:e1:25:b9:cc:46:dc:c4:64:
         9c:1a:19:f7:ab:18:a3:b5:f1:28:cb:c0:ad:09:c1:e4:34:2c:
         16:02:d0:9f:e4:47:81:2b:6c:3b:2e:98:f0:84:d7:a9:4e:40:
         18:5d:2f:ef:51:af:58:1e:ea:d8:3b:42:29:ba:fd:eb:ed:5b:
         70:9c:87:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:54:59 2026 by rpki-client