Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zwgEu_7W7FKXxd17sWg7vesVayk.roa
File:                     zwgEu_7W7FKXxd17sWg7vesVayk.roa (raw, json)
Hash identifier:          0NzhgUmGIAvJNLP0u49GaBjU3QxT2/GtO8g8Yw90gIM=
Subject key identifier:   CF:08:04:BB:FE:D6:EC:52:97:C5:DD:7B:B1:68:3B:BD:EB:15:6B:29
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       14E4
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zwgEu_7W7FKXxd17sWg7vesVayk.roa
Signing time:             Fri 22 Aug 2025 08:54:54 +0000
ROA not before:           Fri 22 Aug 2025 08:54:54 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4662
IP address blocks:        203.65.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5348 (0x14e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Aug 22 08:54:54 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=CF0804BBFED6EC5297C5DD7BB1683BBDEB156B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:d8:a3:4a:6c:a7:87:0f:49:71:43:f7:2f:
                    f2:8b:0b:06:51:ed:ee:72:a9:7b:82:e9:24:13:20:
                    db:c7:1c:70:69:ff:c0:e1:12:50:cf:2d:9d:a0:65:
                    d8:db:f6:c4:5a:f8:6a:27:e0:d4:c7:29:89:0f:82:
                    9a:0d:c7:83:46:be:b4:a2:fd:c3:25:7d:38:1a:6f:
                    44:5e:ed:6c:6a:f5:b4:93:61:5b:78:d9:97:20:85:
                    33:a6:86:75:5d:52:7d:d2:8e:1f:d0:07:42:90:cc:
                    ee:51:59:f7:e2:2f:51:99:de:65:ab:9a:d5:b6:f0:
                    ff:1a:9b:5b:4e:dd:45:48:78:68:87:c1:3d:73:d1:
                    6d:db:f6:7d:53:fa:83:e9:ac:1e:46:36:cb:92:72:
                    1a:a1:7e:7d:f6:27:40:1c:5f:a4:04:a7:18:27:1d:
                    f9:2a:8d:e8:76:5b:0c:4a:ef:e8:c8:d0:e3:20:e2:
                    c4:3f:ed:ff:b8:9b:25:8c:fe:4a:79:02:d7:c5:9d:
                    32:ea:e7:0c:37:e4:10:6b:58:a5:ae:b5:6b:a9:23:
                    29:a4:50:17:01:2f:e0:2e:c0:5d:54:86:59:e5:d7:
                    1c:0f:c5:e2:61:4e:87:33:72:a0:7a:50:1f:56:f2:
                    4e:f9:89:db:f5:ac:28:f2:d1:25:87:d5:51:d9:a8:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:08:04:BB:FE:D6:EC:52:97:C5:DD:7B:B1:68:3B:BD:EB:15:6B:29
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zwgEu_7W7FKXxd17sWg7vesVayk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.65.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6c:41:a2:e4:0a:71:e9:2b:e1:1f:10:e1:fb:07:0f:3b:65:fb:
         40:cc:96:47:89:ef:79:19:1a:c3:f2:ff:f0:a1:5b:38:ca:24:
         14:96:17:f7:93:9f:e2:72:03:db:f4:44:76:de:d6:b4:7a:18:
         5c:41:fc:ef:e0:8a:31:b8:d3:66:ea:61:31:dc:97:fc:e4:77:
         45:69:86:0b:84:7a:18:c4:32:aa:61:3d:fe:cb:ea:fe:1c:70:
         a0:da:ad:99:45:49:4c:14:ff:46:86:65:ae:8a:18:44:e4:e4:
         e8:28:88:65:5f:ee:9d:c3:e8:6e:29:aa:69:db:ea:85:0e:4e:
         7d:d7:08:95:e6:ec:71:17:14:e8:24:58:48:5f:35:ab:e6:80:
         ba:29:83:f5:43:7b:6d:35:cb:2c:90:d6:00:41:58:d1:0e:2d:
         41:13:f8:c0:0e:96:3e:4e:a3:df:37:32:c1:38:9d:fb:0a:f2:
         5e:1d:21:02:f3:1a:5b:48:02:bf:2c:12:b7:fe:e3:47:14:1b:
         3e:67:3f:af:40:8d:dc:c7:6d:d6:19:49:c0:3b:38:13:ef:0e:
         c6:b8:b3:88:8c:cf:54:29:de:60:5f:c4:70:bc:5e:a6:b0:59:
         b3:16:43:67:da:c9:5a:6e:ba:28:ca:bb:73:14:97:8d:be:46:
         ad:94:ec:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:50:41 2025 by rpki-client