Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/5PDDbmBtKhmtD1aJqPfOy9NX8Q8.roa
File:                     5PDDbmBtKhmtD1aJqPfOy9NX8Q8.roa (raw, json)
Hash identifier:          QWpkISySho7ZrSpdREj9aIkpyyFUC9wvbyKBQEMn7p8=
Subject key identifier:   E4:F0:C3:6E:60:6D:2A:19:AD:0F:56:89:A8:F7:CE:CB:D3:57:F1:0F
Certificate issuer:       /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial:       0E4B
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/5PDDbmBtKhmtD1aJqPfOy9NX8Q8.roa
Signing time:             Fri 22 Aug 2025 08:52:40 +0000
ROA not before:           Fri 22 Aug 2025 08:52:40 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18049
IP address blocks:        27.100.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 17:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3659 (0xe4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
        Validity
            Not Before: Aug 22 08:52:40 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E4F0C36E606D2A19AD0F5689A8F7CECBD357F10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:a9:e1:60:dd:18:83:7b:87:a6:a4:19:e1:
                    82:9b:35:82:07:7f:67:34:1e:76:8c:3d:33:d7:54:
                    fe:59:9c:22:22:99:23:8c:02:27:d4:aa:a5:02:73:
                    71:d1:24:2e:2b:27:e3:56:8c:e6:d1:33:01:ec:08:
                    54:82:10:bc:0f:b2:75:31:2c:a2:9c:0c:11:da:fb:
                    30:b8:53:5a:dd:30:83:44:55:7d:70:70:81:4e:48:
                    3c:2f:34:91:1a:94:a0:49:98:af:f8:d2:f4:cb:5e:
                    10:dd:52:9b:38:d1:e3:ef:62:a9:c8:b4:81:65:cd:
                    84:10:6d:a5:a9:46:38:57:8f:b7:04:8b:2a:19:96:
                    eb:db:9b:ca:09:f2:b2:76:8f:32:23:ad:ec:21:ef:
                    b7:4d:5b:74:41:35:ab:70:21:c4:95:1d:8b:79:6e:
                    92:5d:be:21:25:29:99:9b:ff:a4:52:be:d5:3e:c9:
                    32:d6:b6:5c:94:ee:d2:c7:5a:f4:d5:28:aa:42:80:
                    0a:49:bc:f9:a7:7f:fd:53:9d:59:50:a6:df:e7:e3:
                    45:ec:9c:e2:8d:a5:f8:d8:a0:42:64:71:41:9a:d1:
                    07:a9:7e:3a:b8:f4:4a:c6:26:da:5f:0f:74:f0:48:
                    6a:3d:6e:3b:a7:05:de:5a:ab:87:b6:ab:c9:85:94:
                    fe:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F0:C3:6E:60:6D:2A:19:AD:0F:56:89:A8:F7:CE:CB:D3:57:F1:0F
            X509v3 Authority Key Identifier:
                keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/5PDDbmBtKhmtD1aJqPfOy9NX8Q8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.100.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         05:53:fa:ea:22:af:7c:a1:28:5c:3a:c6:0a:e7:31:fc:12:d6:
         b8:e8:86:3e:6d:e3:13:75:1a:b9:87:05:fc:cb:b1:c4:72:b7:
         7f:6e:4e:f2:22:45:52:a2:af:b7:4f:d1:17:e1:c9:ab:0a:42:
         ba:c0:47:88:82:ee:38:5f:b0:24:f8:f1:c4:76:0d:f5:52:b2:
         d8:73:59:16:03:c8:7f:fd:e1:87:6a:13:2d:40:e8:04:69:40:
         f1:f8:f8:0a:dd:0c:4f:2f:da:63:9e:0d:ba:0e:09:a9:5a:52:
         5d:69:4b:e2:d6:67:02:5f:fc:44:2f:2d:17:76:7d:f1:92:5a:
         14:9a:56:d4:b1:80:aa:26:2d:31:6f:72:dd:f0:43:3e:79:12:
         1a:d7:96:42:b6:01:c5:3a:85:26:f6:c8:12:a6:d7:98:49:77:
         1f:de:c1:bb:1f:18:3c:ee:71:ca:db:05:2a:6e:a4:39:ce:d9:
         29:b8:82:de:ee:1d:e7:eb:28:c7:c6:c2:0f:2c:86:88:a0:5e:
         e3:11:91:18:ee:2c:e5:29:51:a6:0a:14:9a:7b:01:36:0d:98:
         01:6e:f1:4a:34:27:4a:dc:ee:8b:bf:c0:aa:e4:09:a4:e8:30:
         59:dd:6a:33:09:cb:ec:37:f9:6b:4a:da:db:43:68:45:2a:f6:
         7b:5d:36:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:50:07 2025 by rpki-client