Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Jz69t-f9hrhiOleXS5tH45dFwkU.roa
File:                     Jz69t-f9hrhiOleXS5tH45dFwkU.roa (raw, json)
Hash identifier:          oJt62XvLE01YktDVwpFdFSZSzT1xvJuV4iwD5kKcGY8=
Subject key identifier:   27:3E:BD:B7:E7:FD:86:B8:62:3A:57:97:4B:9B:47:E3:97:45:C2:45
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       18CA
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Jz69t-f9hrhiOleXS5tH45dFwkU.roa
Signing time:             Fri 22 Aug 2025 09:02:27 +0000
ROA not before:           Fri 22 Aug 2025 09:02:27 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9505
IP address blocks:        175.111.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6346 (0x18ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Aug 22 09:02:27 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=273EBDB7E7FD86B8623A57974B9B47E39745C245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:64:66:6a:9e:41:a2:51:89:3b:a4:a2:df:
                    5b:3b:8c:9d:db:40:cd:72:48:05:b1:67:63:dc:69:
                    b5:56:c6:f7:39:2e:c6:f4:48:58:0b:70:35:81:55:
                    61:bf:f6:fa:48:9b:7e:62:8c:99:b7:32:a9:ac:35:
                    6d:78:4c:1f:a5:7c:ad:d1:a7:63:93:55:26:b3:4e:
                    46:2c:d9:83:78:c3:63:18:02:c1:f5:39:ec:12:ca:
                    01:85:c1:02:67:82:1e:fc:de:08:08:31:4f:e0:da:
                    b1:bf:4e:a0:36:b5:76:cc:06:dd:80:19:dc:ce:a7:
                    4a:c1:54:32:77:93:eb:6f:fc:19:bc:2e:22:e3:79:
                    61:95:8b:f8:85:15:e8:dc:b2:0c:2a:b5:16:6b:e7:
                    e5:6c:72:f7:f7:dd:65:55:e5:f8:66:1b:2a:da:e7:
                    96:c1:6f:6f:0c:af:f0:93:45:7f:8f:44:7e:d5:a6:
                    31:e5:e5:c7:f6:59:95:45:6a:31:f0:34:a1:41:77:
                    1a:df:13:1b:6e:fd:be:3e:2b:35:62:54:25:89:3b:
                    14:a3:10:c1:14:2f:e1:26:16:4c:f4:17:51:80:f2:
                    56:e4:15:f7:b5:8e:c3:18:a0:42:95:90:76:77:4c:
                    63:af:cc:9e:51:3e:77:ec:96:9d:5e:01:90:60:6f:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3E:BD:B7:E7:FD:86:B8:62:3A:57:97:4B:9B:47:E3:97:45:C2:45
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Jz69t-f9hrhiOleXS5tH45dFwkU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:51:14:13:3d:c4:57:04:20:44:69:92:e1:22:fd:23:5d:6d:
         e3:61:22:4a:49:d8:7a:ca:23:30:fe:7a:0b:1d:94:15:17:c6:
         4a:8e:ac:75:78:78:a7:45:c8:6d:9b:f3:03:ea:6c:72:61:18:
         e2:6b:90:b4:1b:b8:31:4e:2e:d1:9d:22:41:8d:70:53:e9:f3:
         13:1b:e6:37:45:f6:30:6d:67:7f:94:13:76:1e:c2:1f:5a:2c:
         ff:95:41:7e:74:83:ea:1d:af:04:ba:53:ac:51:d7:61:9e:02:
         5f:8d:0b:f1:13:f8:16:c5:85:91:4b:af:f1:88:06:1f:0e:e8:
         81:64:58:54:49:ba:20:fc:03:8b:3d:7b:69:69:72:53:25:69:
         e1:e2:12:a4:fe:64:58:8d:00:5a:78:bf:03:55:b4:2f:35:d4:
         db:b5:89:d0:65:51:9e:45:0f:be:02:df:17:04:35:98:3e:59:
         aa:38:3c:a5:4a:b2:9a:25:cb:ae:7c:6c:35:07:56:cc:c5:0c:
         30:c7:80:63:b3:09:f6:f7:47:a9:92:9b:eb:6f:3a:c4:5b:2a:
         ac:33:17:2e:0e:5e:39:54:ec:8a:b6:98:70:7a:82:19:31:2c:
         0e:77:e4:f4:a6:78:52:85:ed:56:67:b9:db:d8:f7:35:68:3f:
         e4:2b:ce:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:39:25 2025 by rpki-client