Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/VjhRezSeqBBqQGzgYepRBKTgJ8g.roa
File:                     VjhRezSeqBBqQGzgYepRBKTgJ8g.roa (raw, json)
Hash identifier:          xTcg25FGMfDf87g+6MOSUaEwPUvyyHsSHHklPR0xJFQ=
Subject key identifier:   56:38:51:7B:34:9E:A8:10:6A:40:6C:E0:61:EA:51:04:A4:E0:27:C8
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       06D0
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/VjhRezSeqBBqQGzgYepRBKTgJ8g.roa
Signing time:             Fri 22 Aug 2025 08:48:57 +0000
ROA not before:           Fri 22 Aug 2025 08:48:57 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38136
IP address blocks:        2406:8dc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1744 (0x6d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Aug 22 08:48:57 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5638517B349EA8106A406CE061EA5104A4E027C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d1:28:9d:80:35:e9:46:5a:2e:47:40:db:fb:
                    ab:37:1f:6c:8b:24:be:91:c2:fe:27:1c:30:a9:0a:
                    b6:3e:ac:38:ed:de:a6:34:00:c1:aa:ba:36:76:47:
                    3f:d4:2f:2e:d5:70:b5:54:97:f4:ca:47:e0:c1:0b:
                    e5:ae:3d:a5:c5:9c:9c:e0:ab:91:e4:b8:27:19:08:
                    f9:7e:41:48:76:5c:06:66:b7:66:ed:de:f1:33:85:
                    a0:86:80:ea:4f:71:bf:f7:f4:92:4f:21:b4:ac:84:
                    3f:23:64:73:12:01:8b:2b:b6:65:9a:1e:81:b3:76:
                    6a:4f:c5:8c:78:d0:e5:1b:d0:dd:10:d8:3d:9d:3f:
                    6a:0b:a1:10:07:91:1f:53:e0:7b:1d:da:df:ff:6a:
                    51:45:d8:f6:fb:f2:3b:8b:21:d7:3b:ef:d2:7a:5a:
                    c4:bc:da:91:1d:95:d8:b6:b5:be:29:2b:14:30:30:
                    8f:f6:81:00:c9:55:8b:93:5e:d8:e5:5c:ea:e0:1d:
                    7a:47:c6:b9:1c:00:5f:07:2a:20:61:e9:53:1b:0a:
                    02:c2:fb:0a:03:80:3a:b2:03:ac:1a:3e:a2:26:55:
                    76:4e:e9:f0:7f:57:bd:47:a6:27:30:b3:7f:b9:96:
                    ef:7c:ed:1d:cd:95:b2:6a:84:88:41:d8:f9:0b:71:
                    e1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:38:51:7B:34:9E:A8:10:6A:40:6C:E0:61:EA:51:04:A4:E0:27:C8
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/VjhRezSeqBBqQGzgYepRBKTgJ8g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:64:e8:34:01:0d:13:30:02:be:7a:f9:1f:10:bb:4c:a4:1e:
         ad:21:de:64:7c:c7:7c:f0:ba:46:40:47:7b:f2:97:e4:1c:8d:
         3e:f9:6a:b6:3f:86:06:01:30:be:fa:ba:21:e7:d4:10:27:26:
         54:6c:f6:77:62:ed:7b:bd:e6:3d:83:ce:a5:e3:66:fb:c9:e5:
         38:5a:38:27:c8:d5:f3:c7:70:cf:ff:86:b3:00:af:b5:cc:50:
         8c:72:c5:ae:37:26:77:f3:a1:94:b7:68:1b:98:8b:32:9c:cc:
         ea:10:dc:9a:52:8e:37:38:b9:04:1d:9a:55:89:e9:09:3e:94:
         2c:a9:cc:48:9b:60:66:60:dc:c0:05:73:51:1d:0f:ea:e6:ca:
         b6:ea:ae:a8:2b:b3:0c:5f:49:38:84:5a:69:f9:c7:c8:4f:02:
         cb:39:46:49:b9:fa:4f:1e:3b:d1:11:4f:ce:e5:2d:52:90:04:
         19:e9:c0:5d:b6:1e:8b:4c:ec:c0:5d:5d:18:7a:3c:e9:f3:38:
         e1:69:57:11:b3:ee:06:a4:36:c3:99:49:35:7c:44:5c:a1:c8:
         8b:a4:8d:56:23:d3:80:c1:fe:45:be:53:a9:78:dc:e3:74:da:
         26:fa:ce:12:de:75:a3:f8:30:34:e8:d6:5a:ea:0e:71:ea:dc:
         e3:88:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:42:03 2025 by rpki-client