Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/N1mWTwIVplOV5dZtokSZv5n6Nyc.roa
File:                     N1mWTwIVplOV5dZtokSZv5n6Nyc.roa (raw, json)
Hash identifier:          LaNnMuKL7NiAI2/x7+/H2ylpPIZIi56v09b405lchOo=
Subject key identifier:   37:59:96:4F:02:15:A6:53:95:E5:D6:6D:A2:44:99:BF:99:FA:37:27
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       1ABF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/N1mWTwIVplOV5dZtokSZv5n6Nyc.roa
Signing time:             Wed 27 Aug 2025 09:19:30 +0000
ROA not before:           Wed 27 Aug 2025 09:19:30 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     36408
IP address blocks:        61.61.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 13:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6847 (0x1abf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Aug 27 09:19:30 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=3759964F0215A65395E5D66DA24499BF99FA3727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:64:52:c8:bf:1e:c9:d5:e5:08:79:e6:c2:
                    22:e1:1f:3e:fe:fb:ca:a4:cb:53:dd:b2:9f:3c:c2:
                    04:ae:e9:97:1a:fc:f2:a3:df:4d:b2:f9:16:3c:4e:
                    a2:2c:78:63:a9:ac:73:c1:05:de:51:23:9b:40:eb:
                    1a:bc:68:61:37:8f:1a:42:eb:ba:6f:37:32:83:7c:
                    41:08:52:d3:92:2e:62:e2:d3:8a:9d:78:81:60:4a:
                    fd:a9:23:86:2b:45:f8:ad:fe:88:15:2f:f3:c8:11:
                    d1:64:9c:79:86:af:67:13:12:8f:84:5b:d2:f0:e0:
                    a8:0a:2e:57:12:21:80:da:3e:96:3e:03:3e:d6:77:
                    53:62:2e:11:65:42:72:3a:c8:2d:29:40:43:2b:b4:
                    ba:81:f8:ec:f9:b3:7d:38:c6:1d:13:1d:ca:e9:3f:
                    0b:17:ca:18:0f:51:f6:82:1c:57:9e:ea:28:4b:41:
                    4f:ac:df:a8:ee:78:c1:ca:54:18:08:be:3b:33:e1:
                    a5:da:bb:d1:8b:e9:30:d9:d0:26:49:be:95:b6:3c:
                    fb:dc:cb:84:d5:66:3c:46:da:9e:f0:ef:4a:e8:1b:
                    b3:63:76:a1:98:0a:e7:50:ac:35:0d:4c:f2:e5:8b:
                    28:d1:c2:89:ce:1e:21:1e:ae:7a:f8:b4:29:92:d8:
                    9c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:59:96:4F:02:15:A6:53:95:E5:D6:6D:A2:44:99:BF:99:FA:37:27
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/N1mWTwIVplOV5dZtokSZv5n6Nyc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:ff:b4:90:81:4f:e2:4d:50:c5:3a:5f:3c:59:08:97:16:21:
         4a:4e:30:5a:7a:c8:1c:7a:46:53:dc:4c:8c:bf:ee:20:a2:6d:
         77:6d:9c:2b:ca:8f:2e:63:18:95:8a:35:6f:c0:a3:de:fe:69:
         16:72:b6:74:7e:c2:a2:cd:83:54:c1:0d:80:7d:9e:35:db:b7:
         f3:dd:02:b8:41:1b:bc:8f:d9:6f:84:47:13:9e:85:10:cd:5c:
         d7:3c:d0:e0:d4:1f:a1:20:50:05:7b:b1:1b:35:cd:06:97:d0:
         1f:a3:d8:71:c0:2e:92:14:3b:8d:48:9e:1e:13:81:91:26:f8:
         87:bc:eb:ef:73:ed:35:8f:8b:95:23:6c:20:2b:db:ce:0c:04:
         9e:6c:4a:0b:b9:63:20:fa:8d:b3:13:a9:74:9a:ca:9e:ea:f8:
         f1:30:3d:b3:3e:12:af:48:3f:3f:fc:4e:81:5a:04:7c:61:68:
         b3:1d:78:14:ba:23:1b:86:66:8a:24:d6:38:8d:a9:9e:be:88:
         92:66:b1:e3:45:ae:94:c4:f7:be:47:c0:d8:8d:5b:7d:d2:a7:
         41:6b:f4:ab:72:07:d9:3e:16:b7:9e:7a:8e:01:b7:7e:b3:2a:
         40:58:db:b4:81:eb:4b:0e:af:fa:ed:71:2f:11:23:1f:1a:7c:
         82:18:0d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:09 2025 by rpki-client