Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/L48mQR4EcpF49Svwwmw00S923FE.roa
File:                     L48mQR4EcpF49Svwwmw00S923FE.roa (raw, json)
Hash identifier:          NIWsl881yH/aytwudVOLIAtQ7im2Tupn5DNiGQBE954=
Subject key identifier:   2F:8F:26:41:1E:04:72:91:78:F5:2B:F0:C2:6C:34:D1:2F:76:DC:51
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       1A15
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/L48mQR4EcpF49Svwwmw00S923FE.roa
Signing time:             Fri 22 Aug 2025 08:53:42 +0000
ROA not before:           Fri 22 Aug 2025 08:53:42 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131586
IP address blocks:        106.106.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6677 (0x1a15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Aug 22 08:53:42 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=2F8F26411E04729178F52BF0C26C34D12F76DC51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a3:34:48:63:22:27:8d:de:50:4e:d6:2b:fd:
                    78:df:57:68:73:d2:b2:3f:95:87:81:58:63:c0:aa:
                    b8:2f:9a:c8:06:df:ed:3d:fe:1b:db:0e:c4:ef:57:
                    c8:b1:14:d6:d7:fe:d0:2f:b0:25:f1:19:b6:9e:e7:
                    a0:97:2e:1c:42:79:c5:84:f9:50:d4:a3:9a:ae:0b:
                    74:5e:8b:c9:05:76:fe:4f:44:90:ab:c5:b2:ba:5d:
                    f6:79:78:28:bf:da:ef:57:3a:b2:28:ec:12:74:78:
                    ca:2e:00:03:5a:3b:a1:0d:47:45:ae:4e:c2:09:e1:
                    3b:b9:a1:b7:6d:a5:f7:56:ff:8d:97:98:35:bc:c1:
                    2e:c8:22:3a:9f:fe:93:89:a6:6d:51:59:1a:86:43:
                    ba:c1:9e:f7:00:19:03:b7:6d:42:29:9e:9b:39:f4:
                    84:a9:95:50:f6:ce:f4:17:5e:ae:1d:ff:ae:bd:00:
                    53:98:15:ee:d9:d8:6f:6d:76:da:be:26:a7:41:92:
                    67:87:26:1f:2f:73:0e:aa:59:c5:2a:cb:42:17:a8:
                    32:b4:c5:4c:de:cf:92:d9:39:8e:4b:85:aa:38:c9:
                    8f:b5:f0:be:3d:c4:ec:aa:0c:b0:a5:41:93:04:43:
                    0b:a6:1b:54:8f:c7:10:1b:19:76:df:45:c2:10:6a:
                    cc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8F:26:41:1E:04:72:91:78:F5:2B:F0:C2:6C:34:D1:2F:76:DC:51
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/L48mQR4EcpF49Svwwmw00S923FE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bb:e2:6c:d2:a0:a8:71:e3:7a:23:80:5c:90:4c:79:02:48:36:
         6f:e4:2b:dd:1b:81:04:9a:b7:3a:5f:b2:1b:b9:f6:a9:b0:4c:
         d7:d9:bc:4f:91:6a:5b:64:87:aa:41:1b:3a:c5:e4:d1:17:c7:
         ea:41:6f:6c:66:98:9f:08:1a:73:60:42:f2:d5:ea:7d:70:bd:
         ff:bb:2e:ea:73:53:88:ef:c5:76:54:09:02:54:fc:51:d5:19:
         19:b1:96:c5:06:69:a1:3f:70:85:22:a8:b5:65:03:be:66:b7:
         a1:1a:7e:c0:3e:9f:a8:b0:a4:55:a0:16:ea:84:5d:6a:10:5d:
         23:70:5f:d0:3c:35:da:85:c5:44:55:74:b9:63:ae:58:9a:6b:
         8b:c6:94:28:df:ea:9b:cd:18:e2:ef:26:46:17:38:4d:dd:d6:
         56:4d:6c:72:8c:6c:56:90:91:10:78:87:d0:f8:0b:57:9f:ea:
         37:ae:fe:2a:dd:17:78:7f:a8:d4:0d:62:3d:2f:75:21:00:ef:
         9e:a9:7c:fe:3b:e6:63:16:5d:28:69:b5:14:32:ba:11:62:73:
         ae:f9:13:5f:99:02:1b:3a:0d:09:c9:79:1b:a5:d0:83:d0:d4:
         ad:fb:9f:a9:f5:d7:e2:7a:62:62:27:b3:6f:d4:5b:96:65:b1:
         c0:4c:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:53:15 2025 by rpki-client