Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/W_WC4r-sIIhgkM59M2CggTKIhL8.roa
File:                     W_WC4r-sIIhgkM59M2CggTKIhL8.roa (raw, json)
Hash identifier:          yS27CKziOX3jHMf34DyTtdMotw9msfH4g4XW2pisfXA=
Subject key identifier:   5B:F5:82:E2:BF:AC:20:88:60:90:CE:7D:33:60:A0:81:32:88:84:BF
Certificate issuer:       /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Certificate serial:       0DD5
Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/W_WC4r-sIIhgkM59M2CggTKIhL8.roa
Signing time:             Fri 22 Aug 2025 08:55:11 +0000
ROA not before:           Fri 22 Aug 2025 08:55:11 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4783
IP address blocks:        210.67.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 17:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3541 (0xdd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
        Validity
            Not Before: Aug 22 08:55:11 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5BF582E2BFAC20886090CE7D3360A081328884BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ef:e2:69:c3:85:8f:ff:ac:67:9d:c7:73:c8:
                    e8:5f:e8:b8:6b:74:48:03:b0:21:a8:8f:29:32:b2:
                    af:38:f0:90:37:ee:8b:34:6b:e7:33:f2:bb:67:ae:
                    37:30:7c:65:6f:b9:27:0f:1f:26:5d:28:17:45:f9:
                    ba:e7:34:58:d4:31:f7:ac:9b:41:ae:3c:54:ce:70:
                    fe:18:b4:47:dd:ea:73:91:11:c5:b8:96:f4:8c:bd:
                    b3:39:59:b5:eb:0a:51:05:b9:cc:21:69:81:24:6a:
                    b2:51:41:02:4c:fe:c6:60:96:9f:ce:7a:e5:a3:55:
                    c3:e8:12:06:1f:3a:3d:21:67:5f:1d:26:5f:69:d5:
                    10:85:5f:6b:07:9d:a0:2b:8d:e5:aa:ee:33:6e:67:
                    94:e5:75:4b:28:62:b9:6b:fa:26:1a:cc:3c:41:4b:
                    7b:72:9f:63:38:95:a0:74:5c:a0:51:8e:74:b3:b1:
                    74:64:a4:ba:ba:df:59:e8:d2:ac:22:f4:7f:21:cd:
                    60:e0:79:d1:ad:cc:a8:7a:72:15:82:7c:6e:88:dc:
                    e9:dc:11:75:53:92:f7:7d:aa:24:60:a3:45:50:f5:
                    47:08:6b:72:d4:17:19:cd:fc:0a:65:12:d4:50:4c:
                    05:1d:a6:d1:52:dc:d1:3a:f3:3c:86:d5:e7:7d:f2:
                    6c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F5:82:E2:BF:AC:20:88:60:90:CE:7D:33:60:A0:81:32:88:84:BF
            X509v3 Authority Key Identifier:
                keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/W_WC4r-sIIhgkM59M2CggTKIhL8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.67.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:b1:c3:44:5f:74:55:1d:e3:fd:fb:3f:77:0d:6c:5a:7b:a7:
         32:5a:c2:4b:d5:27:00:b9:c6:2e:63:7e:e4:a0:34:11:96:aa:
         02:e9:91:4c:93:55:28:df:fc:dc:fc:50:76:f7:12:97:04:e4:
         87:bd:e4:a4:6e:a5:52:28:54:39:49:09:d6:18:b9:d6:81:b0:
         c4:07:9e:a7:48:be:f0:3d:fc:84:c6:13:20:4d:3e:50:7c:c1:
         2f:a7:9c:62:04:5a:1a:27:c4:88:4f:43:ad:20:53:d1:f7:6e:
         4c:2d:c0:dc:e9:02:50:72:cb:d6:33:15:28:77:3f:ca:6a:e2:
         91:ce:7f:8a:ab:19:b0:6b:1a:b0:89:4d:16:c7:bd:3c:ed:c1:
         76:21:60:d6:a7:26:32:8e:57:c8:9e:ea:11:40:ba:ee:f9:d5:
         43:c2:21:d2:f9:e7:32:60:df:3e:7d:91:d1:2f:72:58:84:bd:
         cd:4e:db:0b:e3:1b:5b:66:33:b4:df:fb:d6:77:06:07:3a:cb:
         1b:16:eb:dd:10:45:78:d2:69:a0:3a:6b:80:0d:77:82:0e:b9:
         77:42:c8:cb:79:af:67:cc:d8:8f:d7:f4:24:eb:c6:bf:0a:26:
         f7:0e:c3:2e:75:52:c7:a3:94:10:7a:88:24:52:f7:33:15:d1:
         2b:9c:77:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:36:52 2025 by rpki-client