Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/eFtB4InZ83o1u3_Cjn87s2Fid-M.roa
File:                     eFtB4InZ83o1u3_Cjn87s2Fid-M.roa (raw, json)
Hash identifier:          T0LJHn3tfPfkr1OLUaupNnfGiB0M6b6VlWKOCE5Yo+s=
Subject key identifier:   78:5B:41:E0:89:D9:F3:7A:35:BB:7F:C2:8E:7F:3B:B3:61:62:77:E3
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       14EA
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/eFtB4InZ83o1u3_Cjn87s2Fid-M.roa
Signing time:             Fri 22 Aug 2025 08:54:55 +0000
ROA not before:           Fri 22 Aug 2025 08:54:55 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        203.77.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5354 (0x14ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Aug 22 08:54:55 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=785B41E089D9F37A35BB7FC28E7F3BB3616277E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:56:a8:6e:9c:69:6d:f9:50:14:b1:db:76:
                    c1:03:73:9e:fa:4d:bb:66:4a:1e:16:69:d1:b9:d3:
                    cc:5e:56:ea:dd:54:32:8e:5e:1b:64:c1:69:7e:86:
                    f3:2b:f1:41:93:74:fb:21:d4:e7:f2:5e:7d:2a:a7:
                    f3:9c:dd:1c:3d:ca:53:73:7c:70:65:18:1e:71:ab:
                    55:c0:67:cf:be:c0:0e:a9:a7:8d:0f:c2:48:59:33:
                    8a:64:9c:82:95:4a:10:1e:2d:d5:3e:a1:02:09:42:
                    e3:a3:6a:81:4c:e0:f2:6e:50:98:03:a2:54:36:d7:
                    cb:f4:05:75:f3:d7:22:83:e8:bd:57:d4:2c:ca:32:
                    d9:f4:83:bd:b4:92:f4:f8:a6:b1:41:79:a9:f0:5c:
                    fe:46:88:9c:ae:6e:cc:54:27:52:6b:64:74:29:00:
                    7f:13:3c:96:38:3e:4b:dd:c6:88:95:28:a4:6e:93:
                    79:c6:4f:cd:21:20:6c:3a:da:39:57:f5:f2:e4:7b:
                    49:66:53:b7:60:b9:c3:c2:6f:a8:53:9f:fc:52:b1:
                    eb:50:63:01:9e:6e:a7:7b:a2:ad:49:e8:aa:1f:96:
                    c2:e2:35:62:e0:dd:b4:ba:cf:9b:ae:b2:c4:33:dd:
                    db:6d:2a:fa:8c:d8:ed:8a:5c:37:3f:09:93:2c:a2:
                    cc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5B:41:E0:89:D9:F3:7A:35:BB:7F:C2:8E:7F:3B:B3:61:62:77:E3
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/eFtB4InZ83o1u3_Cjn87s2Fid-M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:6e:bb:a0:cc:ed:a2:41:70:a5:40:2a:18:b8:0e:a2:2b:
         47:f4:a8:f9:27:e8:b3:55:37:37:b9:e4:43:80:b5:a3:80:d8:
         2f:78:92:af:f3:df:18:bc:ae:a0:7b:fa:96:f9:2c:0d:a5:32:
         7a:a1:98:ab:57:76:c4:dd:fd:74:76:37:8d:2f:8b:24:18:33:
         a5:14:46:01:58:f9:08:3f:0f:6c:37:5b:66:b1:fa:54:35:cf:
         e4:f9:e2:cd:96:b2:a6:70:e5:18:02:06:9d:dd:dd:7d:cc:af:
         12:b9:1d:4f:fd:eb:fb:fa:b0:ae:c2:4c:6f:ed:c0:f7:e1:f7:
         71:6f:06:13:d6:a4:49:6f:a4:0f:af:a3:5b:98:01:0c:f4:42:
         62:93:c3:36:93:23:f9:88:d2:16:7c:ae:8d:02:ca:0c:f1:b3:
         4e:0e:d1:16:4a:24:b8:14:f6:03:81:2c:4f:09:1f:53:5d:1a:
         e3:54:a4:4b:e7:01:b2:d4:a2:60:78:f4:d0:a9:17:62:4e:3c:
         b2:94:cb:db:9e:7f:60:08:c2:cd:77:66:25:fa:e6:72:a1:e6:
         ea:10:24:aa:a1:f6:0f:02:cb:9e:93:8e:28:f6:b5:54:92:46:
         ba:c7:87:b2:b2:02:c3:24:35:dc:45:fe:1f:b6:e9:09:83:4c:
         62:15:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:49:29 2025 by rpki-client