Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sCv0IluPSD3yzh5lwF7-ioRUBtE.roa
File:                     sCv0IluPSD3yzh5lwF7-ioRUBtE.roa (raw, json)
Hash identifier:          7bImmA59//gD8Zh/Hj5Fa6XZ/CS6zamqfY8fhtAUjs8=
Subject key identifier:   B0:2B:F4:22:5B:8F:48:3D:F2:CE:1E:65:C0:5E:FE:8A:84:54:06:D1
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       106D
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sCv0IluPSD3yzh5lwF7-ioRUBtE.roa
Signing time:             Fri 22 Aug 2025 08:54:15 +0000
ROA not before:           Fri 22 Aug 2025 08:54:15 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4780
IP address blocks:        192.72.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4205 (0x106d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Aug 22 08:54:15 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B02BF4225B8F483DF2CE1E65C05EFE8A845406D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:99:05:81:c2:22:c5:54:bb:8a:86:d8:2e:bf:
                    56:5c:4f:38:71:f9:84:e9:2d:8f:15:b0:35:51:34:
                    4f:a9:6b:0a:09:4d:d1:4e:ff:b4:43:ea:90:a4:d5:
                    94:78:5e:99:ee:c6:f2:0d:b5:52:0b:bf:57:c2:49:
                    f1:ff:ab:a1:f6:0e:96:1c:4e:2b:ff:91:84:88:10:
                    50:3b:85:2e:f7:9e:46:b4:c9:18:68:fa:53:6d:af:
                    59:65:2a:aa:93:e8:6e:d3:10:27:9b:83:a4:07:62:
                    6a:bb:f4:cd:8a:56:e9:0b:c7:35:d0:04:1c:68:2a:
                    d8:a3:b7:18:2a:a4:2a:a2:66:32:0c:36:f0:c7:a6:
                    b1:8b:ca:90:76:f4:10:a9:71:85:70:4c:2b:22:00:
                    1f:9a:98:c6:79:83:11:00:60:cc:53:e1:d2:8e:1b:
                    6f:e8:75:eb:ac:38:0c:c8:fb:ec:a9:e7:5e:4c:ca:
                    3f:47:94:d1:40:19:1d:4f:c0:4e:03:4e:8b:ae:f0:
                    4d:c4:43:9b:36:9e:14:1e:f5:1a:9d:36:54:16:cb:
                    16:89:5b:4c:86:01:c4:62:ef:04:6c:8b:75:72:40:
                    a7:86:22:03:7e:97:35:c4:b0:19:dc:6f:ac:63:3d:
                    c9:32:d5:a7:07:2e:eb:b6:2f:cf:8e:05:bd:7b:19:
                    8f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2B:F4:22:5B:8F:48:3D:F2:CE:1E:65:C0:5E:FE:8A:84:54:06:D1
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sCv0IluPSD3yzh5lwF7-ioRUBtE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1f:9c:5c:98:c9:cb:69:a6:5e:52:9e:d4:cc:30:b0:3c:6d:f9:
         9a:83:4e:72:08:2b:b3:d7:a6:53:69:33:0b:26:7a:4e:41:5c:
         d8:4e:31:b9:cd:7b:f1:fe:43:2a:d7:1a:02:b5:78:be:ca:06:
         ad:8c:af:35:d1:22:4d:47:18:93:7d:9c:7f:b6:27:b2:94:14:
         18:4c:d5:8c:fe:a6:e8:71:ae:19:87:45:d1:76:7c:d8:66:f2:
         e1:ea:1e:0a:3b:d9:e3:9e:af:cc:59:56:48:ae:1c:00:a9:0d:
         49:ea:98:05:2d:86:ce:0c:a1:55:c8:7e:8c:d9:2f:6c:93:d7:
         f3:90:f4:75:aa:3b:5c:6c:42:c6:91:5f:af:16:10:ed:76:97:
         b0:7e:98:47:91:d2:55:18:47:4a:e5:66:19:c0:1f:4c:26:f4:
         dd:dc:05:17:de:7e:c1:ff:bd:0f:3f:d1:6a:52:96:52:b3:0b:
         92:c4:10:4d:31:6d:dd:5f:13:78:98:eb:80:69:5e:7d:73:ac:
         fa:df:96:08:e0:87:1d:32:13:ae:f8:3e:8b:de:71:2d:bc:c2:
         06:03:0e:ca:11:22:84:91:8e:67:44:63:16:4d:9f:ba:7c:a6:
         20:b9:eb:d1:cc:f4:1a:68:15:f4:43:8c:d5:57:38:c6:fe:13:
         b8:a9:ae:ae
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB
NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNTA4MjIw
ODU0MTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIwMkJGNDIyNUI4RjQ4
M0RGMkNFMUU2NUMwNUVGRThBODQ1NDA2RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqmQWBwiLFVLuKhtguv1ZcTzhx+YTpLY8VsDVRNE+pawoJTdFO
/7RD6pCk1ZR4XpnuxvINtVILv1fCSfH/q6H2DpYcTiv/kYSIEFA7hS73nka0yRho
+lNtr1llKqqT6G7TECebg6QHYmq79M2KVukLxzXQBBxoKtijtxgqpCqiZjIMNvDH
prGLypB29BCpcYVwTCsiAB+amMZ5gxEAYMxT4dKOG2/odeusOAzI++yp515Myj9H
lNFAGR1PwE4DTouu8E3EQ5s2nhQe9RqdNlQWyxaJW0yGAcRi7wRsi3VyQKeGIgN+
lzXEsBncb6xjPcky1acHLuu2L8+OBb17GY/bAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUsCv0IluPSD3yzh5lwF7+ioRUBtEwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC
1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90
S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvc0N2MElsdVBTRDN5emg1bHdGNy1p
b1JVQnRFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcBIwDAN
BgkqhkiG9w0BAQsFAAOCAQEAH5xcmMnLaaZeUp7UzDCwPG35moNOcggrs9emU2kz
CyZ6TkFc2E4xuc178f5DKtcaArV4vsoGrYyvNdEiTUcYk32cf7YnspQUGEzVjP6m
6HGuGYdF0XZ82Gby4eoeCjvZ456vzFlWSK4cAKkNSeqYBS2GzgyhVch+jNkvbJPX
85D0dao7XGxCxpFfrxYQ7XaXsH6YR5HSVRhHSuVmGcAfTCb03dwFF95+wf+9Dz/R
alKWUrMLksQQTTFt3V8TeJjrgGlefXOs+t+WCOCHHTITrvg+i95xLbzCBgMOyhEi
hJGOZ0RjFk2funymILnr0cz0GmgV9EOM1Vc4xv4TuKmurg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:41:47 2025 by rpki-client