Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/_Euj15aa6O997nGOhN8V_HFrRqI.roa
File:                     _Euj15aa6O997nGOhN8V_HFrRqI.roa (raw, json)
Hash identifier:          W5LsuvDW5136J/dAwKTv+GnT9zqFfGxgTZSgFChTWnM=
Subject key identifier:   FC:4B:A3:D7:96:9A:E8:EF:7D:EE:71:8E:84:DF:15:FC:71:6B:46:A2
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       0DC3
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/_Euj15aa6O997nGOhN8V_HFrRqI.roa
Signing time:             Fri 22 Aug 2025 08:56:41 +0000
ROA not before:           Fri 22 Aug 2025 08:56:41 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4780
IP address blocks:        61.58.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3523 (0xdc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Aug 22 08:56:41 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=FC4BA3D7969AE8EF7DEE718E84DF15FC716B46A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:de:23:87:6e:27:05:39:b1:e7:e9:d1:ff:21:
                    a4:21:eb:4f:bf:74:36:61:f3:d6:48:2f:ad:88:be:
                    0d:7d:36:ef:88:53:d9:b8:c5:b7:6a:67:53:5d:1b:
                    70:1e:3e:ea:ee:05:79:bc:f7:b0:72:89:e2:12:12:
                    cd:14:d3:31:55:2e:40:74:a4:8a:41:95:4c:d1:09:
                    18:cb:1d:50:2d:d5:f4:78:61:43:fa:d4:72:a1:ee:
                    51:50:9f:a4:d1:01:aa:d8:55:6a:b3:30:fe:c8:25:
                    05:40:09:a1:5d:4a:ef:25:a4:15:b3:6a:6e:ab:f3:
                    bb:43:45:67:54:2d:b9:ff:e9:fd:48:3d:40:50:5a:
                    8c:48:ea:9f:9e:6b:5d:78:dc:93:99:34:fb:7c:f0:
                    26:be:ff:16:1a:ee:07:23:c5:0c:53:d8:89:ff:ac:
                    ca:ed:86:32:23:10:3f:5a:bf:20:a3:82:43:71:c8:
                    fb:cd:79:39:75:37:48:8c:f0:6d:9c:8f:4d:0c:8d:
                    7f:f7:38:cd:ed:c9:cf:c2:b4:1e:41:73:6b:e3:95:
                    04:be:97:04:0c:de:ed:de:26:46:e7:89:15:06:17:
                    e5:eb:a1:01:ed:b3:1f:a8:fc:23:50:d8:c6:7b:2f:
                    b5:12:9d:26:d7:85:a6:32:c9:ea:20:a5:c3:b3:ec:
                    30:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4B:A3:D7:96:9A:E8:EF:7D:EE:71:8E:84:DF:15:FC:71:6B:46:A2
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/_Euj15aa6O997nGOhN8V_HFrRqI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c0:6c:2c:8e:34:6d:91:b2:06:a4:48:06:e5:58:67:43:4a:eb:
         91:2c:6c:ae:a0:0e:39:99:5c:4c:8c:5c:ae:d7:04:92:1a:43:
         ac:37:60:44:f9:78:7a:93:3f:3d:73:9a:e0:08:9b:11:bd:ab:
         50:a2:6f:20:4a:18:a7:9d:c0:65:ec:2f:a6:39:66:f2:1a:37:
         43:8d:03:c1:99:4b:4d:7e:ba:5e:9b:9c:66:b8:71:0f:72:93:
         db:c8:b0:f7:a4:fa:07:fc:07:58:f1:29:55:a7:44:2b:18:6c:
         e2:2f:d1:08:67:fc:f2:3b:d3:7a:8d:05:10:f3:6c:5b:b5:1d:
         97:46:69:9f:d5:25:5b:29:9a:3a:78:f9:13:61:40:81:db:50:
         0c:78:bd:14:6e:dc:73:dd:c2:3e:90:80:27:70:b3:b1:ad:88:
         32:d6:74:39:11:74:0a:75:f8:22:1d:82:a3:1c:b5:f1:83:af:
         7e:2a:d8:d8:dd:12:96:bb:c8:6a:ef:75:08:b7:c6:00:d1:05:
         62:55:dc:da:30:ca:6b:fe:f1:54:74:00:d0:8f:4b:ae:5b:23:
         95:64:5d:22:65:12:63:ff:c4:ff:7a:e0:63:21:c6:a3:3b:31:
         76:c1:b4:10:85:b7:09:ff:ac:12:d1:54:e1:63:40:b7:bd:41:
         e4:2c:3e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:34:04 2025 by rpki-client