Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/V5G1e2ZF_6a71ikGHtCbI1HI2qc.roa
File:                     V5G1e2ZF_6a71ikGHtCbI1HI2qc.roa (raw, json)
Hash identifier:          wT7Iff+cp2WAm2lhXkBmJsE16yuudWbwAy/o+l5b1Cg=
Subject key identifier:   57:91:B5:7B:66:45:FF:A6:BB:D6:29:06:1E:D0:9B:23:51:C8:DA:A7
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       0FEF
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/V5G1e2ZF_6a71ikGHtCbI1HI2qc.roa
Signing time:             Fri 22 Aug 2025 08:55:46 +0000
ROA not before:           Fri 22 Aug 2025 08:55:46 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        140.128.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4079 (0xfef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Aug 22 08:55:46 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5791B57B6645FFA6BBD629061ED09B2351C8DAA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:e7:a3:c5:68:66:17:fa:d0:8d:5d:52:70:
                    60:aa:04:22:c9:92:9b:cf:e0:49:04:b3:46:21:58:
                    61:b1:cf:20:10:56:7f:c0:96:cd:b7:e3:6f:bd:b0:
                    c7:79:92:df:97:80:e4:a2:de:bc:39:6a:f3:16:1c:
                    49:72:80:44:cb:da:d0:7d:35:e0:4e:30:ab:a0:9b:
                    b0:6a:35:70:a4:3e:23:44:1e:d9:29:e9:f4:22:1d:
                    30:68:df:d2:21:ea:09:29:e5:78:7e:db:65:0b:64:
                    53:2d:fa:6a:2f:e3:c0:87:d6:54:ff:66:fc:6a:62:
                    28:3a:ed:23:88:e6:f2:e3:5c:90:83:49:ab:49:f7:
                    c4:0a:6f:71:f4:b9:38:c1:fe:27:7d:a7:39:1a:56:
                    fa:24:55:5d:c2:d8:40:5e:31:26:e9:91:3e:03:d4:
                    19:a4:96:f3:f0:8d:a3:d0:28:ca:2d:cf:df:80:38:
                    1d:85:39:f1:c2:1a:06:75:62:09:e4:0f:eb:28:dd:
                    36:9f:f5:c3:66:0c:30:8d:e5:c0:23:b5:7b:c3:f0:
                    71:76:21:30:87:e3:cf:31:ea:23:97:67:b3:b2:f7:
                    cd:29:30:59:39:61:ae:df:f9:00:d9:f3:99:9c:a8:
                    48:7c:a8:9d:ba:cd:75:40:4c:4c:9a:91:40:9e:75:
                    f4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:91:B5:7B:66:45:FF:A6:BB:D6:29:06:1E:D0:9B:23:51:C8:DA:A7
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/V5G1e2ZF_6a71ikGHtCbI1HI2qc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.128.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:1e:39:d4:93:06:f0:bb:d3:d8:84:de:f8:66:0e:a0:37:b4:
         69:4b:df:10:3b:39:33:7d:f8:d9:0a:7c:b9:ca:93:30:d5:94:
         04:db:90:be:02:ea:71:7e:ae:12:b9:31:ac:22:bb:02:34:16:
         53:0f:03:9a:8d:86:c2:6f:44:b5:ba:01:cf:ca:4f:ff:28:5e:
         57:8a:a1:7b:57:80:fc:4c:10:a4:04:11:94:a3:6c:2c:36:17:
         c0:ce:2b:b8:95:59:a7:48:e5:66:2a:3f:18:fc:05:63:3e:5e:
         15:26:72:7d:11:fb:0e:31:85:ce:6c:69:1f:e0:6e:ff:7d:4a:
         65:cd:25:8e:b4:e7:c6:74:94:4f:5b:c2:86:bd:bd:17:d1:b7:
         e0:6a:04:be:43:07:f1:43:ef:1a:54:55:7c:36:8d:8d:32:00:
         89:79:a5:08:b9:a5:bb:f6:62:9c:6a:20:96:95:52:80:05:53:
         09:e5:7d:7a:06:eb:b3:b8:26:0c:4d:55:16:fc:1d:aa:d3:b4:
         14:69:7f:bd:8b:57:3b:05:7a:66:fa:12:49:91:d6:43:74:cd:
         db:5f:60:0e:99:8c:1b:bb:55:2a:f0:b5:27:e1:09:82:61:e8:
         7a:e9:4f:08:4d:43:ec:a2:27:08:25:fd:dd:af:de:ec:18:7d:
         2c:a1:87:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:33 2025 by rpki-client