Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ME3ebyKY_RtMNkYeebhP6_UC5LY.roa
File:                     ME3ebyKY_RtMNkYeebhP6_UC5LY.roa (raw, json)
Hash identifier:          xDM2KBa4rXMqUv0CrSNY4hKc+zB78DFoU1BrhRQeU4s=
Subject key identifier:   30:4D:DE:6F:22:98:FD:1B:4C:36:46:1E:79:B8:4F:EB:F5:02:E4:B6
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       1509
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ME3ebyKY_RtMNkYeebhP6_UC5LY.roa
Signing time:             Fri 22 Aug 2025 08:55:03 +0000
ROA not before:           Fri 22 Aug 2025 08:55:03 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18049
IP address blocks:        60.198.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5385 (0x1509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Aug 22 08:55:03 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=304DDE6F2298FD1B4C36461E79B84FEBF502E4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:43:22:77:99:ce:c5:8d:ef:c4:24:cb:2c:01:
                    a7:9b:4b:7a:be:86:4c:d6:7a:e5:a6:15:bf:bc:7e:
                    5e:fa:e5:e7:ba:9b:05:7a:1c:ba:40:1b:17:5b:57:
                    c9:a1:5a:b0:03:d0:f0:94:02:14:99:ba:0e:26:f5:
                    66:51:88:91:e9:a7:46:7a:32:8a:9c:ca:87:81:51:
                    a2:62:20:b9:ba:7e:4d:5f:31:23:85:d0:b6:35:ba:
                    c6:83:fd:c5:72:17:1a:f4:29:8b:55:c1:9e:de:16:
                    7a:b5:e0:ba:ac:db:30:1c:16:c6:da:0b:b3:e2:02:
                    fd:0d:c1:5e:59:4d:b7:3b:8f:14:a3:01:c8:67:7b:
                    cb:90:cb:d9:9d:e7:48:2e:59:74:d5:9e:eb:95:90:
                    53:3e:63:18:c5:e2:a8:ae:7f:88:38:64:76:b1:0f:
                    52:cf:35:5c:ef:8d:81:bd:89:12:9b:e7:41:ad:ca:
                    51:dc:39:31:b5:eb:f1:55:cf:42:fd:08:20:61:6e:
                    08:3f:36:ff:21:46:48:02:60:0c:dd:2d:be:94:a4:
                    10:8a:ee:7f:a5:ca:b1:33:67:7b:69:5c:5b:5f:1e:
                    b2:7a:33:1f:cc:44:df:4c:35:18:70:1c:7a:5f:5f:
                    e9:b9:3f:d0:1e:30:10:02:aa:76:f9:60:c1:e3:d4:
                    21:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4D:DE:6F:22:98:FD:1B:4C:36:46:1E:79:B8:4F:EB:F5:02:E4:B6
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ME3ebyKY_RtMNkYeebhP6_UC5LY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.198.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         38:ae:1c:f2:7c:8c:16:74:58:df:96:6a:82:00:79:0d:14:99:
         1a:e7:65:19:1c:e0:4c:30:66:85:91:5d:2b:08:5d:24:1e:d9:
         8a:e4:da:41:ca:15:48:12:68:f6:c7:cd:18:e3:d9:c4:46:e6:
         58:54:1a:ad:d5:40:b5:a5:6d:43:72:fe:e3:da:3f:07:04:80:
         a9:d5:a4:09:77:c3:02:08:c8:17:b4:49:ad:17:51:f5:08:12:
         9b:e5:db:5b:61:2c:6a:b0:5a:0c:d3:7f:d8:b6:c6:3c:60:70:
         e3:2b:88:8d:39:17:42:55:e0:a8:b7:97:35:6b:43:f3:f4:7b:
         d0:78:27:d1:71:5a:f2:53:dd:ec:2a:cc:0c:cb:b2:13:b8:b0:
         61:75:5b:61:91:5a:a0:d8:9d:10:c6:c6:b3:13:74:23:74:22:
         72:57:42:2e:e8:b1:fa:38:49:77:8f:2d:b3:5c:bd:83:9f:00:
         7e:c3:ca:77:ea:62:78:09:93:c5:93:18:59:f2:17:2b:c8:54:
         40:16:2a:ff:fe:08:c6:a9:39:cc:26:36:69:06:65:97:f0:90:
         cd:96:c1:1f:ae:f1:75:a4:2e:18:ff:53:ff:62:b2:75:bd:16:
         1a:ad:b6:a4:20:1a:72:a2:35:f5:08:a3:f8:b3:86:7e:ec:55:
         b1:d4:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:49:01 2025 by rpki-client