Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/BaiTcOlsZWp0ns8hOqq5_vN0Qao.roa
File:                     BaiTcOlsZWp0ns8hOqq5_vN0Qao.roa (raw, json)
Hash identifier:          E5xUo5HuncigoixJwblkt6cL1M5xjQ4xlcVMhZNgIqw=
Subject key identifier:   05:A8:93:70:E9:6C:65:6A:74:9E:CF:21:3A:AA:B9:FE:F3:74:41:AA
Certificate issuer:       /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Certificate serial:       0DBA
Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/BaiTcOlsZWp0ns8hOqq5_vN0Qao.roa
Signing time:             Fri 22 Aug 2025 08:56:06 +0000
ROA not before:           Fri 22 Aug 2025 08:56:06 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18411
IP address blocks:        61.56.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3514 (0xdba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
        Validity
            Not Before: Aug 22 08:56:06 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=05A89370E96C656A749ECF213AAAB9FEF37441AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:52:ce:77:89:6a:4e:97:12:93:c6:4a:b1:
                    ce:c8:2a:c8:21:5a:f4:b0:98:5a:c7:19:e2:b3:58:
                    ea:ae:f4:0b:51:07:6e:56:ab:b4:92:36:26:62:9d:
                    d8:d1:67:6b:cb:7d:0a:d0:a1:a7:88:58:b2:fa:1e:
                    ca:8d:6e:d8:b9:32:76:c8:de:86:94:2e:71:4b:18:
                    80:14:d4:78:a2:ca:de:cc:c5:52:51:a8:40:bf:92:
                    75:af:4f:31:f8:38:98:8a:c4:02:be:2f:4c:7a:62:
                    28:c4:db:a6:c1:97:c6:a7:ad:b7:17:64:97:3b:29:
                    b7:6f:96:65:4d:55:c0:72:35:6a:c3:c1:59:f3:eb:
                    55:59:d2:e4:07:f5:75:d3:bd:a6:a5:63:95:0b:56:
                    04:85:1d:dc:d6:da:14:a0:a6:68:76:b5:d4:19:96:
                    a6:34:d5:0c:88:d0:d8:b1:c2:cd:c3:72:77:53:81:
                    08:5d:c2:ec:f3:67:20:74:f4:f3:14:31:ec:33:24:
                    20:c0:7e:61:61:a7:a2:69:9c:25:55:45:ca:8a:95:
                    2d:a3:f1:5e:90:09:38:91:ff:be:e4:54:ba:86:18:
                    2a:9e:68:04:ee:fc:88:5c:24:c8:48:bf:c6:52:f2:
                    c9:cd:b2:5e:0d:ee:b9:83:4d:ee:1a:64:4d:4a:eb:
                    be:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A8:93:70:E9:6C:65:6A:74:9E:CF:21:3A:AA:B9:FE:F3:74:41:AA
            X509v3 Authority Key Identifier:
                keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/BaiTcOlsZWp0ns8hOqq5_vN0Qao.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:ad:10:cc:6f:9e:b8:25:6e:a7:65:8a:bc:9d:11:fd:6d:c7:
         68:b5:35:b5:83:65:86:81:05:1a:a6:44:5f:9b:74:9d:51:b1:
         47:eb:24:bf:13:6f:b7:f6:19:c0:e4:74:dd:9a:97:90:00:d7:
         3a:39:88:75:91:1c:34:ac:ba:d5:e8:d3:37:1a:f5:5d:4c:13:
         27:a1:1f:3d:49:ee:88:55:c1:d8:89:fd:59:90:8b:29:83:67:
         56:7c:fd:ba:00:96:01:16:37:88:1a:8c:82:e0:57:ce:37:1d:
         7b:78:93:c1:e9:06:1b:16:51:b6:6f:4f:f9:f8:de:16:09:f4:
         5b:94:b9:b0:b5:6e:b3:59:3b:a6:9f:9c:58:c2:3c:15:b5:10:
         ef:4b:c0:b2:48:50:26:80:15:df:71:6b:9c:1b:0e:ca:74:46:
         ca:99:cc:b0:d0:42:fa:a2:92:e6:70:9e:be:26:0d:0d:8d:4f:
         48:a4:95:7e:68:38:98:ce:3c:3e:b6:c3:28:c3:89:db:e7:9c:
         d6:c0:f2:cb:d5:a3:24:70:ff:e8:f0:29:4b:fc:87:05:25:9f:
         56:a4:32:6e:ed:c1:c9:c7:51:d0:6f:06:3e:c5:96:87:7a:71:
         33:2e:19:36:e2:bf:f7:72:9e:18:ae:00:1c:4e:55:15:9a:2f:
         6e:1c:a7:43
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDbowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRD
NkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIyRTAeFw0yNTA4MjIw
ODU2MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA1QTg5MzcwRTk2QzY1
NkE3NDlFQ0YyMTNBQUFCOUZFRjM3NDQxQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwZlLOd4lqTpcSk8ZKsc7IKsghWvSwmFrHGeKzWOqu9AtRB25W
q7SSNiZindjRZ2vLfQrQoaeIWLL6HsqNbti5MnbI3oaULnFLGIAU1Hiiyt7MxVJR
qEC/knWvTzH4OJiKxAK+L0x6YijE26bBl8anrbcXZJc7KbdvlmVNVcByNWrDwVnz
61VZ0uQH9XXTvaalY5ULVgSFHdzW2hSgpmh2tdQZlqY01QyI0Nixws3DcndTgQhd
wuzzZyB09PMUMewzJCDAfmFhp6JpnCVVRcqKlS2j8V6QCTiR/77kVLqGGCqeaATu
/IhcJMhIv8ZS8snNsl4N7rmDTe4aZE1K677hAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUBaiTcOlsZWp0ns8hOqq5/vN0QaowHwYDVR0jBBgwFoAUlMbd/dS6pQQA86EZ
pYM84AIb2y4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMv
bE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9sTWJkX2RTNnBRUUE4NkVacFlNODRBSWIyeTQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FRFROUy9CYWlUY09sc1pXcDBuczhoT3Fx
NV92TjBRYW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPTga
MA0GCSqGSIb3DQEBCwUAA4IBAQCurRDMb564JW6nZYq8nRH9bcdotTW1g2WGgQUa
pkRfm3SdUbFH6yS/E2+39hnA5HTdmpeQANc6OYh1kRw0rLrV6NM3GvVdTBMnoR89
Se6IVcHYif1ZkIspg2dWfP26AJYBFjeIGoyC4FfONx17eJPB6QYbFlG2b0/5+N4W
CfRblLmwtW6zWTumn5xYwjwVtRDvS8CySFAmgBXfcWucGw7KdEbKmcyw0EL6opLm
cJ6+Jg0NjU9IpJV+aDiYzjw+tsMow4nb55zWwPLL1aMkcP/o8ClL/IcFJZ9WpDJu
7cHJx1HQbwY+xZaHenEzLhk24r/3cp4YrgAcTlUVmi9uHKdD
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:19:41 2025 by rpki-client