Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/uQILy3yIxp93gY_WUBHKWUvJq7w.roa
File:                     uQILy3yIxp93gY_WUBHKWUvJq7w.roa (raw, json)
Hash identifier:          0lx9K6pmoqcFtJm9RBDQ+aTvQrLNOSi4PhWh3eJcxjM=
Subject key identifier:   B9:02:0B:CB:7C:88:C6:9F:77:81:8F:D6:50:11:CA:59:4B:C9:AB:BC
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       150D
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/uQILy3yIxp93gY_WUBHKWUvJq7w.roa
Signing time:             Fri 22 Aug 2025 08:55:05 +0000
ROA not before:           Fri 22 Aug 2025 08:55:05 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131628
IP address blocks:        175.99.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5389 (0x150d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Aug 22 08:55:05 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B9020BCB7C88C69F77818FD65011CA594BC9ABBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8f:ed:ba:9f:1e:c9:bd:3a:de:cc:c5:0a:9c:
                    b7:53:33:58:89:67:2b:5a:d0:84:32:ca:aa:a7:a1:
                    fb:4c:cb:f7:7a:77:c4:f8:a9:da:a0:31:d8:55:9c:
                    89:33:c8:54:17:3c:96:fe:3a:f7:7b:67:b9:85:15:
                    72:36:74:cf:ed:73:12:9d:88:a9:72:3c:0b:a2:06:
                    ba:ce:31:84:19:08:11:4f:22:46:33:b5:84:8e:10:
                    6d:a8:22:c9:2e:5e:fb:2a:81:1b:76:7d:3c:97:5a:
                    97:15:28:f2:05:7f:8c:b2:f1:e3:63:e0:f3:9f:16:
                    32:51:9c:b4:39:f2:66:08:1a:71:61:b2:6e:c4:71:
                    4b:02:d6:e7:ac:ae:c6:39:51:51:87:06:13:ef:46:
                    62:40:16:f6:78:db:4f:91:2d:28:bd:cf:b6:e7:af:
                    b4:bf:21:d3:2e:b0:af:c7:97:c2:53:45:e7:ab:c4:
                    35:98:92:d4:e5:a2:ab:ee:c0:f2:c7:09:2d:04:84:
                    ae:76:fe:46:b6:2c:bb:16:bd:80:78:e5:71:94:c8:
                    2e:84:51:cb:ef:ee:5c:4d:18:ac:d5:26:99:75:d5:
                    0c:fe:7f:dc:ea:bc:b3:57:e2:93:c3:3f:e0:75:0d:
                    63:61:1e:cf:ca:58:82:d0:75:93:70:29:09:ee:b2:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:02:0B:CB:7C:88:C6:9F:77:81:8F:D6:50:11:CA:59:4B:C9:AB:BC
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/uQILy3yIxp93gY_WUBHKWUvJq7w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.99.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:52:eb:22:d4:ac:b0:4a:d5:bb:6f:87:23:bf:c6:8f:3c:41:
         e1:ef:c1:44:9a:77:c9:ad:53:e7:e5:a6:ce:64:37:5e:e9:09:
         21:58:a8:7a:90:49:10:b7:ca:1b:13:5c:5b:c7:89:05:9e:75:
         10:18:0f:ca:16:6c:2d:81:1a:54:0d:6a:f1:a7:06:4f:c3:83:
         09:17:4a:1f:81:8c:b7:5d:e4:73:fc:e6:9d:54:b8:eb:db:b2:
         96:01:cb:6e:0f:c8:00:78:b3:67:4d:1d:3a:9a:61:51:02:c5:
         18:fb:bc:75:a1:cc:e7:db:62:1d:bf:ed:f4:e7:eb:44:cb:55:
         9b:c9:12:43:51:ed:d9:78:80:8b:99:e2:a9:22:98:8d:36:0c:
         99:17:34:4d:90:0d:11:01:3b:8b:87:76:a7:d0:33:57:5e:da:
         65:02:d4:19:e6:b5:7e:31:e8:e4:9c:15:73:9f:d9:cb:01:aa:
         e6:62:c4:82:22:b0:d3:b0:62:e7:22:e7:04:01:63:5b:30:f3:
         d2:0d:c8:d0:a6:ac:46:70:e5:7d:a8:2a:cf:ea:e3:da:11:c9:
         89:50:2d:44:0f:aa:0a:88:5f:36:6d:37:f5:fa:ac:5c:25:f3:
         b5:1a:29:f3:02:d9:53:46:15:d6:79:e7:2f:bb:3e:aa:e8:f5:
         db:8d:cc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:49:54 2025 by rpki-client