Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TISNET/6Mw16X5N8l479oxSTakND5W0N0c.roa
File:                     6Mw16X5N8l479oxSTakND5W0N0c.roa (raw, json)
Hash identifier:          mMOUqjKwRKmLCm+1D/MU6uGjV2TDYwukf33TedwJ2HY=
Subject key identifier:   E8:CC:35:E9:7E:4D:F2:5E:3B:F6:8C:52:4D:A9:0D:0F:95:B4:37:47
Certificate issuer:       /CN=06AE1480CEFC5CE08029297F4D49CBCABD6CE2F2
Certificate serial:       026F
Authority key identifier: 06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/6Mw16X5N8l479oxSTakND5W0N0c.roa
Signing time:             Fri 22 Aug 2025 08:57:50 +0000
ROA not before:           Fri 22 Aug 2025 08:57:50 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     7535
IP address blocks:        139.223.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06AE1480CEFC5CE08029297F4D49CBCABD6CE2F2
        Validity
            Not Before: Aug 22 08:57:50 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E8CC35E97E4DF25E3BF68C524DA90D0F95B43747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ae:dc:b7:54:f0:ce:c0:e1:6f:84:0e:4e:b0:
                    ae:4c:56:db:e8:f5:5b:04:aa:23:54:0b:88:98:0d:
                    bf:11:42:e2:6f:bf:9c:4b:f9:0d:a2:b0:a0:52:0b:
                    c0:59:b8:0c:60:20:f7:3c:54:2c:5c:cc:9d:c9:80:
                    33:7a:06:39:8b:0e:e2:95:11:81:89:2f:01:8a:d9:
                    82:5c:74:97:1e:2a:99:00:76:32:99:87:eb:ab:1b:
                    16:1c:f3:a2:f7:95:28:d9:c0:de:8a:74:0e:25:00:
                    7a:1f:ed:bf:1d:c8:7c:23:ed:d0:36:67:03:72:27:
                    2f:b2:d7:13:70:5e:3c:02:f2:97:5d:b6:ba:d7:67:
                    03:e5:35:4c:89:9c:0b:cf:8f:25:43:0d:66:4e:83:
                    aa:8e:a1:99:42:50:88:92:c7:11:0e:a5:c2:82:97:
                    08:3c:c5:13:40:95:fc:93:48:4b:21:42:a9:41:fe:
                    26:a5:e7:94:63:76:7e:d0:1e:8c:5a:9e:58:84:95:
                    ac:95:79:86:53:33:7d:86:a3:ad:ef:10:9b:bb:d0:
                    ad:a3:a7:66:1c:61:1b:4e:20:4d:9a:52:96:ef:7a:
                    a8:0b:29:36:5c:e3:04:62:19:e5:7b:54:ac:d1:2c:
                    a4:af:e3:89:a5:16:8f:53:89:3e:6e:63:54:f9:6a:
                    fd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CC:35:E9:7E:4D:F2:5E:3B:F6:8C:52:4D:A9:0D:0F:95:B4:37:47
            X509v3 Authority Key Identifier:
                keyid:06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/6Mw16X5N8l479oxSTakND5W0N0c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.223.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:03:0b:d5:6a:0b:17:7a:f1:b4:cd:ab:82:b7:14:94:17:70:
         43:20:02:e3:23:88:b9:17:dd:e9:bb:7c:52:3b:3e:b6:e7:8f:
         d8:10:1f:5e:be:f5:21:06:04:14:fb:05:4e:b8:a6:0a:77:6d:
         b3:8e:aa:5b:b3:62:7e:24:fe:97:b7:49:0a:69:ee:6c:4a:67:
         bb:60:8b:81:62:9d:35:06:65:3d:6b:c8:3e:b1:c9:1c:c3:f7:
         9e:02:5a:19:12:7b:a3:40:5c:96:57:9f:e9:a8:02:53:da:59:
         74:04:e0:47:56:d9:64:90:60:dd:12:b2:3f:b0:b5:61:40:04:
         a1:4e:f6:5b:e2:cd:9c:4b:f7:15:35:fe:4a:c7:d4:aa:61:59:
         f2:38:62:46:98:8b:4a:8d:a1:8c:86:e1:f8:2a:0d:8b:ec:ca:
         9f:ce:32:c6:2a:89:06:9a:f7:68:19:c0:ba:09:a1:d5:3f:73:
         84:3a:6b:1d:a7:4b:63:3d:f4:75:e6:1b:17:2a:18:5e:19:4f:
         3f:ff:32:bd:7a:5d:43:9b:d1:ff:f0:3b:dd:34:88:af:00:61:
         fb:26:41:57:d4:3b:1c:66:13:25:13:92:a1:36:f7:b9:15:71:
         6e:fe:41:7e:08:e3:02:7c:e7:4d:7a:77:7d:44:84:c4:75:6b:
         c3:69:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:15:04 2025 by rpki-client