Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/6IwRDQzie96iExY73oiuEzF4j04.roa
File:                     6IwRDQzie96iExY73oiuEzF4j04.roa (raw, json)
Hash identifier:          P5nTvPt1qEHdZuQuEfViRE/3XnWprLpspar1lwmKiSQ=
Subject key identifier:   E8:8C:11:0D:0C:E2:7B:DE:A2:13:16:3B:DE:88:AE:13:31:78:8F:4E
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       0855
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/6IwRDQzie96iExY73oiuEzF4j04.roa
Signing time:             Fri 22 Aug 2025 08:44:23 +0000
ROA not before:           Fri 22 Aug 2025 08:44:23 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17415
IP address blocks:        2406:3540:fff0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133 (0x855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Aug 22 08:44:23 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E88C110D0CE27BDEA213163BDE88AE1331788F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:e3:7e:b7:ec:16:a6:7b:e0:f5:f9:71:d7:
                    a5:1f:f8:6d:47:b4:94:16:e0:56:55:c2:6b:f2:e5:
                    9c:61:fd:89:55:c4:c3:27:2e:9e:dc:14:50:f5:5a:
                    e1:6d:51:f4:83:03:db:c2:9a:d4:93:e6:3f:1f:51:
                    84:7d:1b:4b:fa:47:70:4d:cf:4c:f5:36:4c:c6:d9:
                    02:61:0b:df:ad:32:56:1c:39:7d:74:c6:be:d2:95:
                    2b:25:ea:a1:e0:54:91:2a:5a:98:6c:0e:66:c9:2f:
                    f6:0a:8f:44:2f:b4:68:b0:c2:e1:2e:e7:af:3f:51:
                    85:36:8d:28:4c:0c:fa:4e:10:24:25:bb:c0:8e:bf:
                    95:9d:f0:11:f4:c9:9c:d3:3f:db:21:9e:41:b6:c2:
                    b0:84:54:eb:e2:b3:6d:71:02:51:46:0b:e4:7f:31:
                    a9:e3:05:d2:48:84:95:a8:8b:23:95:5a:c0:06:8e:
                    23:47:40:7d:dc:c0:f8:ba:9b:64:1b:12:07:82:d0:
                    48:96:83:38:71:b4:d8:57:19:1f:c9:85:04:4a:7b:
                    83:f7:89:d8:9e:31:e5:32:e8:63:70:82:ad:0b:f6:
                    43:7a:96:dc:b1:18:ed:31:35:0b:8f:c2:33:77:6f:
                    16:a7:72:15:d6:5f:d2:b1:51:10:31:8b:f1:4f:68:
                    50:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8C:11:0D:0C:E2:7B:DE:A2:13:16:3B:DE:88:AE:13:31:78:8F:4E
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/6IwRDQzie96iExY73oiuEzF4j04.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540:fff0::/46

    Signature Algorithm: sha256WithRSAEncryption
         a4:a2:63:ee:af:1b:bb:4f:e7:31:65:27:db:12:48:a5:d3:08:
         b3:c5:be:ed:b2:c5:b7:3b:30:92:fe:f5:79:84:54:76:f4:5b:
         04:98:e0:d5:66:c9:02:1b:7a:13:5a:4c:bd:c1:1f:a9:40:bf:
         05:ec:e8:a7:cb:1a:ae:ec:4d:f3:dc:4e:35:d1:38:0a:80:cb:
         c5:a8:81:ca:af:13:3c:d0:da:e3:61:b5:71:a6:49:06:cb:43:
         46:f1:86:4d:2f:bf:77:8f:ad:37:8c:50:40:16:b9:de:67:c2:
         3b:c2:c7:eb:73:c2:e9:88:73:8f:fc:74:78:e0:56:3b:29:55:
         ae:63:3f:69:f2:cf:36:dd:22:cc:23:11:da:96:2c:f1:3c:0f:
         95:5e:a1:e7:89:50:7f:01:8e:eb:bb:b2:87:8a:2a:28:ee:8b:
         22:52:b5:29:a1:37:5c:2b:c9:ad:87:44:96:28:90:29:5d:b4:
         fd:62:45:23:b8:83:49:d2:35:6f:c3:9c:21:1b:24:5e:8f:de:
         71:41:a8:ab:35:11:17:f8:0f:ae:16:02:56:6c:20:1a:f0:fd:
         33:99:38:32:f9:3e:b2:9b:29:eb:0f:ae:5e:02:03:e7:58:e2:
         d4:7a:2f:ba:ff:16:cb:51:98:52:1a:d8:f7:77:d5:d8:68:be:
         93:9f:f5:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:45:10 2025 by rpki-client