Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/bznF63Ijm1ZcOD1SDiZ_ShvanfM.roa
File:                     bznF63Ijm1ZcOD1SDiZ_ShvanfM.roa (raw, json)
Hash identifier:          KlYSRDhJNj2T8gpwhJMpKufMXcaRJI0msmsqEfRxmrU=
Subject key identifier:   6F:39:C5:EB:72:23:9B:56:5C:38:3D:52:0E:26:7F:4A:1B:DA:9D:F3
Certificate issuer:       /CN=2C20881A0EFD0664A591AF3095D29935EF9BC361
Certificate serial:       0465
Authority key identifier: 2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/bznF63Ijm1ZcOD1SDiZ_ShvanfM.roa
Signing time:             Fri 22 Aug 2025 08:50:34 +0000
ROA not before:           Fri 22 Aug 2025 08:50:34 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     152613
IP address blocks:        2401:bf60:4ff6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1125 (0x465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C20881A0EFD0664A591AF3095D29935EF9BC361
        Validity
            Not Before: Aug 22 08:50:34 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=6F39C5EB72239B565C383D520E267F4A1BDA9DF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:88:31:e5:9f:8e:48:a8:87:25:57:57:c9:80:
                    26:99:bf:87:43:ba:f4:26:95:65:45:89:41:29:0d:
                    38:29:88:40:0f:c2:97:6d:5a:17:f8:48:a9:8b:5d:
                    d9:7b:90:47:61:14:d8:6a:59:97:54:14:58:17:25:
                    c8:e8:84:5c:44:91:52:51:68:43:48:32:24:b3:40:
                    d7:e9:f2:6a:2b:e3:5c:36:cd:dc:4f:fb:c6:95:3e:
                    b7:47:ee:c6:d1:0a:cd:e1:25:34:ca:0a:3c:d2:55:
                    b3:06:6c:7e:46:7b:24:75:16:37:e6:26:5d:1f:14:
                    15:7a:66:aa:e3:ec:a0:93:d4:c7:db:5d:d9:85:d3:
                    b3:32:03:a4:be:69:9c:fe:0d:17:af:01:cb:40:c2:
                    cc:f4:0d:8a:16:77:65:a2:c9:01:e1:3b:02:9a:e4:
                    da:c8:b4:f9:99:51:7f:cd:cc:24:e3:d6:d3:ab:d9:
                    59:fe:22:6b:4d:b8:14:06:aa:97:1d:a1:fa:b5:08:
                    73:11:f6:7c:66:c1:e3:a7:ca:5b:e5:c9:28:96:bd:
                    db:61:7a:d1:cb:4f:ad:ea:ac:9a:79:c0:02:4b:90:
                    7b:c7:14:0b:e9:f3:fd:14:58:e0:e5:6d:94:bb:28:
                    6f:75:96:ee:f0:59:8e:bd:72:aa:ef:8b:dd:64:f3:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:39:C5:EB:72:23:9B:56:5C:38:3D:52:0E:26:7F:4A:1B:DA:9D:F3
            X509v3 Authority Key Identifier:
                keyid:2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/bznF63Ijm1ZcOD1SDiZ_ShvanfM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:bf60:4ff6::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:e1:73:49:13:76:53:95:15:03:f3:ce:70:7c:c2:4b:3c:83:
         8c:ca:f6:04:dc:82:fd:e4:26:87:76:78:5a:1e:b3:de:2e:e1:
         8c:cd:02:a6:cb:5b:61:91:e5:d1:fe:82:36:73:ad:3a:c4:10:
         04:97:94:7c:de:a4:77:f5:c3:7e:69:a8:27:7f:0f:20:6b:8e:
         2f:34:b4:e9:7a:17:2a:61:4c:4c:9e:23:40:96:ff:3a:9b:9c:
         5e:6e:41:59:a0:30:e3:b9:d8:18:ba:59:e0:8b:9d:b6:ff:8d:
         bb:c9:dc:03:49:76:6d:32:09:e1:c2:5c:a2:31:48:33:4a:02:
         97:82:77:da:c4:38:86:88:9a:fe:13:3c:5e:40:15:e5:fb:8a:
         3b:30:72:cc:99:35:81:34:c7:e4:ce:ed:97:ca:45:d2:21:f8:
         5a:10:7d:ba:7e:c7:85:1d:10:0f:69:3f:21:48:62:24:40:83:
         68:ab:41:34:a1:70:93:95:cf:31:fc:26:fe:3f:58:e9:24:ff:
         65:ca:2e:4d:50:01:53:73:3c:c6:0c:2b:b1:b8:fd:99:eb:8a:
         cd:43:e5:af:e7:a2:06:91:12:ab:57:93:46:91:fa:b0:3d:58:
         d1:9c:f9:0d:97:bc:9f:1d:7e:17:87:58:46:b6:f0:be:bb:5b:
         02:c3:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:43:53 2025 by rpki-client