Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/_jEL8MoVuYabIR3ShykHTNulx7Q.roa
File:                     _jEL8MoVuYabIR3ShykHTNulx7Q.roa (raw, json)
Hash identifier:          px9FdjqX7FG9jjrnB7QySzwfhJxr13p0V8rnx2xTzWI=
Subject key identifier:   FE:31:0B:F0:CA:15:B9:86:9B:21:1D:D2:87:29:07:4C:DB:A5:C7:B4
Certificate issuer:       /CN=2C20881A0EFD0664A591AF3095D29935EF9BC361
Certificate serial:       0463
Authority key identifier: 2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/_jEL8MoVuYabIR3ShykHTNulx7Q.roa
Signing time:             Fri 22 Aug 2025 08:50:34 +0000
ROA not before:           Fri 22 Aug 2025 08:50:34 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     152613
IP address blocks:        2401:bf60:4fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1123 (0x463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C20881A0EFD0664A591AF3095D29935EF9BC361
        Validity
            Not Before: Aug 22 08:50:34 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=FE310BF0CA15B9869B211DD28729074CDBA5C7B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:40:ba:ed:53:4d:b4:b0:b8:8a:88:d8:3c:
                    2d:b1:d7:ca:c2:2a:e5:83:7f:3b:fc:27:50:56:07:
                    4a:63:6d:38:06:41:a4:d6:52:86:e8:23:06:ff:35:
                    17:a9:28:63:25:7f:84:f3:4f:88:00:8b:b0:43:bb:
                    54:f9:45:ae:ed:c2:55:1a:b9:a3:65:b8:a5:b8:4d:
                    5e:fe:63:10:e1:c3:bc:0a:7f:0c:44:8a:17:82:0a:
                    51:80:09:64:e0:16:cb:1d:b2:b5:9a:2e:5c:6a:01:
                    f2:5b:83:d1:93:73:aa:60:1d:7d:9b:5f:06:95:ff:
                    f8:cf:a4:45:ed:e9:ab:e3:cc:05:89:45:2e:a1:7b:
                    58:ee:99:97:23:f7:76:ad:ce:4b:60:b3:97:2f:c8:
                    94:fc:c7:f5:db:f2:2e:63:ca:f6:53:85:a6:af:1c:
                    55:ce:d9:27:ac:0e:e4:76:58:b8:65:65:4e:68:81:
                    a7:2a:d3:59:d6:62:36:2d:3e:62:7c:b0:04:f2:25:
                    f7:46:b2:e1:d0:74:37:11:99:4c:30:2f:9b:11:0e:
                    2d:af:2f:1b:6f:ce:0d:38:21:4d:a6:5d:aa:b1:2f:
                    69:f2:62:a0:81:e1:65:e5:bd:e3:61:d9:80:34:cf:
                    8a:cb:8b:df:bc:a8:2f:68:bf:39:81:53:24:ac:b6:
                    48:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:31:0B:F0:CA:15:B9:86:9B:21:1D:D2:87:29:07:4C:DB:A5:C7:B4
            X509v3 Authority Key Identifier:
                keyid:2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/_jEL8MoVuYabIR3ShykHTNulx7Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:bf60:4fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:07:89:a7:f9:51:e8:bc:a6:d4:fb:38:a3:a0:b2:8d:27:35:
         12:73:4b:56:ed:15:77:2b:73:74:2a:4c:c8:2a:97:37:68:da:
         b2:b1:30:aa:55:2d:08:66:ef:5a:40:a4:7b:ce:55:e3:cf:22:
         09:71:0a:29:91:77:d8:73:6a:a1:c5:78:d3:2d:57:fc:a0:70:
         67:f2:b7:40:78:81:8d:bb:52:43:b1:c6:c1:f4:22:04:6d:9c:
         c2:4a:d9:15:14:fb:8e:08:f2:0d:33:e2:aa:43:a9:e5:92:17:
         97:ce:05:77:46:be:12:48:15:fd:d6:5e:cd:9f:10:6b:fb:b4:
         df:1f:45:93:5c:4d:2a:e6:20:71:f7:17:1a:30:be:ec:e3:b5:
         94:d4:de:4d:25:ff:52:08:a1:ff:67:2b:8d:30:ba:8f:0c:4a:
         9d:25:94:5e:14:e1:1c:52:ec:77:29:aa:3b:9c:e0:e6:f7:29:
         43:a4:99:3a:3a:29:1f:02:18:1f:a6:3e:28:43:27:10:78:6a:
         06:35:b9:09:ca:d4:af:5f:30:36:7f:32:6d:3b:b2:11:21:d2:
         25:8a:9e:d1:c9:6d:6a:11:ab:e8:91:dd:23:ab:c6:95:91:54:
         80:e7:12:6d:9c:af:cb:55:59:66:39:e2:a9:71:90:88:3c:17:
         bb:ac:44:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:39:44 2025 by rpki-client