Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/wWJ19M0gNeaM30biB4EkRxVK1xI.roa
File:                     wWJ19M0gNeaM30biB4EkRxVK1xI.roa (raw, json)
Hash identifier:          SJKw3CLqJLCQEUhiDMF8IO3nbCVp9svWjDQ5X8T80DM=
Subject key identifier:   C1:62:75:F4:CD:20:35:E6:8C:DF:46:E2:07:81:24:47:15:4A:D7:12
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       147F
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/wWJ19M0gNeaM30biB4EkRxVK1xI.roa
Signing time:             Fri 22 Aug 2025 09:00:29 +0000
ROA not before:           Fri 22 Aug 2025 09:00:29 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131627
IP address blocks:        219.91.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 17:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5247 (0x147f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Aug 22 09:00:29 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C16275F4CD2035E68CDF46E207812447154AD712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:ae:b6:e3:7b:93:28:a0:00:9c:e0:fc:de:
                    44:91:73:86:52:bb:9e:ed:b8:d8:5f:c1:be:28:64:
                    a0:4c:85:da:e5:a4:b6:18:d3:2f:11:4a:e3:c2:e2:
                    37:87:78:f4:fc:b2:21:97:49:a9:c3:43:8f:47:eb:
                    a6:93:86:f1:2d:48:b8:72:6a:bf:7b:97:f7:a0:74:
                    33:44:68:16:59:85:55:0d:e3:3a:7d:bd:e8:5a:f6:
                    f4:fa:a3:0f:5d:6e:c7:75:a3:8c:59:9d:48:ad:5d:
                    94:2a:e4:ff:96:9d:67:dc:db:f4:d7:73:49:8b:73:
                    54:99:b6:3c:a6:15:88:07:4b:0b:51:58:91:b3:e5:
                    b0:b9:11:cb:ad:ce:c1:90:90:30:c0:47:24:2d:25:
                    e7:04:4f:34:57:27:64:57:56:38:66:79:86:45:d9:
                    0e:fb:8c:d2:bd:b4:84:5b:9d:15:fc:8f:00:ff:3e:
                    93:12:06:48:a5:97:d4:0d:d8:85:75:4f:be:cf:91:
                    70:e3:cf:d7:f6:7c:94:49:4a:c1:49:d4:18:c3:12:
                    2d:04:4f:12:7f:15:f0:01:6a:c2:be:f7:9e:b5:48:
                    71:a1:3b:3b:cd:c0:3f:b2:9a:eb:83:6e:68:e4:19:
                    7c:48:4d:74:cf:fd:e9:e6:83:e3:e9:f1:54:93:c7:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:62:75:F4:CD:20:35:E6:8C:DF:46:E2:07:81:24:47:15:4A:D7:12
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/wWJ19M0gNeaM30biB4EkRxVK1xI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.91.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         95:d4:c3:be:9e:33:a7:13:2e:04:be:1e:af:74:b4:6b:5f:86:
         cf:bb:b2:7e:f2:64:b2:ee:81:fb:71:d1:5e:51:9d:79:32:97:
         41:d4:58:83:85:90:7a:a4:93:3d:fd:5b:9b:2a:f5:3f:2b:01:
         58:cc:0d:4c:5b:e5:08:f2:43:91:1f:a1:8e:dc:84:9c:a9:31:
         0a:3f:b4:55:e3:fc:35:b3:0d:37:71:a2:1a:8c:01:dd:2a:7b:
         f9:5c:5e:b9:98:b2:f6:ea:5f:e4:96:f0:50:22:ce:49:74:0c:
         c1:a8:3a:4a:17:46:0a:2c:d1:44:85:70:52:9a:46:46:dd:8b:
         16:2f:50:ef:56:b4:df:3f:45:28:0f:36:08:c1:7b:c1:9d:f9:
         c2:28:fd:20:5e:8b:ef:51:c1:a5:31:40:ee:01:c9:5e:aa:5c:
         de:f9:d9:15:47:af:7b:d3:9c:0d:ba:75:99:ac:31:fa:22:82:
         0f:24:db:9e:9e:ba:2d:40:75:56:0d:1e:d8:2f:3b:11:d8:2b:
         f7:d6:d2:d8:91:f8:4b:13:41:ae:53:b0:08:bb:9a:d0:e8:05:
         87:46:db:f4:d4:42:27:f8:70:f3:6b:98:25:76:36:c2:63:29:
         5c:6c:b4:0f:7a:71:5a:e6:a1:fa:a4:b7:c2:48:18:3e:c9:6b:
         f8:8a:bd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 14:19:30 2025 by rpki-client