Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/c84Ynh9DR4QjgWHQCcD3JnHO_8s.roa
File:                     c84Ynh9DR4QjgWHQCcD3JnHO_8s.roa (raw, json)
Hash identifier:          ac0VZploS/ch50uu+zR+hsk8EiWbeNJBis2RNPUO5ZM=
Subject key identifier:   73:CE:18:9E:1F:43:47:84:23:81:61:D0:09:C0:F7:26:71:CE:FF:CB
Certificate issuer:       /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial:       0D95
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/c84Ynh9DR4QjgWHQCcD3JnHO_8s.roa
Signing time:             Fri 22 Aug 2025 08:59:14 +0000
ROA not before:           Fri 22 Aug 2025 08:59:14 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131588
IP address blocks:        2400:e480::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 02:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3477 (0xd95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
        Validity
            Not Before: Aug 22 08:59:14 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=73CE189E1F434784238161D009C0F72671CEFFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:b8:e8:06:2a:4c:c8:a8:ec:ac:24:c3:8c:
                    4b:a1:ec:fa:2b:8d:b1:5a:7a:7e:78:29:34:41:f8:
                    96:5a:3d:90:70:94:f2:8d:62:ff:b8:2d:d9:11:fb:
                    5a:00:56:ad:32:9b:b5:75:12:dd:cf:5e:11:f4:75:
                    5d:a9:6e:32:9b:7d:5e:8b:c1:3a:ed:b1:62:47:8f:
                    d3:11:ea:c6:42:b4:db:16:c9:17:04:bd:a2:76:b9:
                    68:40:ab:b9:6b:51:60:3a:f9:1f:39:87:a9:2d:d4:
                    0f:cb:b9:10:6d:f6:58:3d:05:89:e8:5e:da:14:49:
                    de:ed:30:8e:1f:e4:74:d8:13:b6:33:47:33:b5:88:
                    ff:6a:63:8b:ba:d4:e4:ed:7d:be:6d:ce:57:cb:35:
                    3c:43:41:cb:69:a1:14:de:0c:43:e8:17:64:ba:91:
                    75:90:a3:da:61:84:ab:91:fc:42:4e:2c:65:97:ad:
                    53:b3:7d:04:bd:f1:b2:53:d1:66:91:5c:19:14:c5:
                    e3:48:06:79:b8:68:04:db:73:64:46:b7:cd:0b:08:
                    61:41:5c:aa:a4:eb:f7:62:8f:1b:96:3d:1f:ca:a9:
                    7f:bc:29:8c:6f:d9:21:82:9b:d5:87:82:e8:2c:83:
                    47:e1:16:7f:bd:a5:b1:22:cf:09:ed:1a:bc:1b:de:
                    d4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CE:18:9E:1F:43:47:84:23:81:61:D0:09:C0:F7:26:71:CE:FF:CB
            X509v3 Authority Key Identifier:
                keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/c84Ynh9DR4QjgWHQCcD3JnHO_8s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:e480::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:c0:13:0a:65:c1:96:19:b9:53:3b:06:bf:bf:bd:bf:f4:ff:
         51:cf:4f:21:48:74:64:8c:bf:03:3c:ea:72:39:13:0e:c1:9a:
         d4:cb:aa:aa:2a:3f:bb:f1:b1:9b:fa:9f:6a:76:87:19:99:a4:
         cf:09:e3:10:c5:0f:fe:5c:01:6b:01:ec:aa:1b:fa:c8:14:ad:
         94:15:43:32:48:db:33:6e:6a:40:68:9c:1d:ca:04:f1:ab:a9:
         08:63:83:6f:2f:98:00:f8:5a:82:63:03:a0:5f:40:72:e0:51:
         c6:95:77:f6:a7:4e:8d:17:99:c3:75:83:2a:63:89:29:ab:f1:
         ed:18:56:1b:08:6e:3b:43:fe:f2:cb:80:42:c2:2b:ee:ea:c8:
         ba:58:71:e8:dd:25:bb:89:04:b1:57:3d:5c:59:c9:61:a9:9a:
         3e:b4:33:4a:da:1f:8c:f2:43:b8:bb:97:0d:19:01:cb:16:77:
         9a:92:0e:22:76:90:d8:9f:16:02:d1:20:ff:e3:55:39:92:a4:
         43:10:94:6e:4a:6a:5f:32:d3:bd:95:7d:3b:0a:9a:90:fe:0d:
         b0:49:30:95:8f:d0:99:5b:7e:40:6c:df:39:da:63:c2:61:e7:
         a1:df:65:e2:75:7b:9f:df:d4:84:f3:43:1d:a1:ca:0d:54:48:
         23:70:7d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 01:47:45 2025 by rpki-client