Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/W6RJXfP1E9Ch09w7g0-NxD5wYMM.roa
File:                     W6RJXfP1E9Ch09w7g0-NxD5wYMM.roa (raw, json)
Hash identifier:          grOi09L0ObBUSuyDskSQvV+0LfLAnGL65Sx8UXUAqew=
Subject key identifier:   5B:A4:49:5D:F3:F5:13:D0:A1:D3:DC:3B:83:4F:8D:C4:3E:70:60:C3
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       0850
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/W6RJXfP1E9Ch09w7g0-NxD5wYMM.roa
Signing time:             Fri 22 Aug 2025 08:44:22 +0000
ROA not before:           Fri 22 Aug 2025 08:44:22 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17415
IP address blocks:        2406:3540::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2128 (0x850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Aug 22 08:44:22 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5BA4495DF3F513D0A1D3DC3B834F8DC43E7060C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2f:2f:dd:87:1e:64:30:6a:04:74:59:96:4a:
                    01:8e:44:54:66:f4:2a:3e:ac:eb:86:95:af:70:8c:
                    48:de:be:42:95:b6:2a:99:a8:f0:e7:33:94:14:2e:
                    f7:ba:50:18:cb:a7:55:cc:b3:41:41:35:84:d3:cc:
                    93:c6:a1:90:db:a4:02:6d:63:8d:62:4d:4b:a2:aa:
                    91:f4:41:12:cd:17:dc:17:3f:cb:82:43:23:e6:6a:
                    23:42:55:a4:b5:22:65:e8:26:c2:1e:a1:cf:9b:48:
                    5d:e0:88:ca:2b:47:72:7a:61:84:5a:f9:ac:4b:bf:
                    35:23:bf:59:34:23:e3:cc:07:db:38:d7:eb:06:64:
                    25:16:8d:ad:6f:22:f4:3c:84:6e:7f:63:b1:97:20:
                    5c:40:fb:5f:d6:02:df:46:55:7f:73:68:8b:c7:97:
                    73:96:0f:6b:bc:a7:01:38:34:ca:ba:7a:ca:73:d8:
                    70:9c:5a:5c:99:3c:0a:cb:1a:03:6c:0d:69:17:b0:
                    dc:48:b7:18:2e:b2:ed:75:02:20:99:ed:87:8e:d4:
                    ef:77:76:d9:a4:31:97:f8:75:09:31:54:64:dd:bb:
                    31:ba:ec:b5:16:c8:ff:3a:48:4a:57:0a:b3:85:ad:
                    52:5f:15:a1:75:d0:30:e8:5b:e0:04:51:dc:99:46:
                    93:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A4:49:5D:F3:F5:13:D0:A1:D3:DC:3B:83:4F:8D:C4:3E:70:60:C3
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/W6RJXfP1E9Ch09w7g0-NxD5wYMM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:97:70:9b:27:93:5d:8b:2f:a8:8d:2a:b7:8a:07:9f:1c:60:
         a3:fc:2a:6a:ad:c6:ec:e0:ca:dc:92:e9:65:b4:8c:f6:14:c4:
         92:5c:c5:0a:53:b7:3c:ff:42:a4:b1:df:72:3c:2b:83:76:ca:
         ac:c2:d8:de:d2:41:d1:5b:9d:25:e6:6a:56:86:2a:0a:a9:b0:
         1c:bd:05:34:b9:50:69:ce:22:01:cf:1a:eb:93:4e:3f:66:c4:
         6e:cf:26:9b:2c:e1:a8:78:c4:26:5e:a4:54:6a:9c:4d:fe:98:
         61:a8:45:7c:83:3c:ef:ac:8e:8a:8c:b1:01:b5:86:89:de:e0:
         67:0a:c7:60:ac:34:59:29:14:d4:01:71:f9:9f:aa:a4:b9:59:
         12:a8:30:d2:c2:8f:82:db:a4:e0:15:cc:c9:d5:c6:8e:c8:58:
         01:2a:08:01:6a:89:5e:30:18:23:dd:d7:37:7d:ac:de:24:e4:
         d1:0c:57:73:17:97:cc:77:0c:4b:50:f9:e0:70:72:ef:cc:41:
         16:3a:25:03:03:12:47:7c:32:e6:bb:38:81:6f:3b:e7:11:15:
         40:5e:36:5b:de:cc:12:4e:00:62:15:da:fc:7d:fb:3d:06:e8:
         fc:c5:a0:3a:0f:dd:ec:3e:4d:60:1d:e9:da:f4:4b:4a:e2:17:
         32:48:8b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:43:55 2025 by rpki-client