Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/6OWJnABE00S9qIxm_0mEJ6qbNBU.roa
File:                     6OWJnABE00S9qIxm_0mEJ6qbNBU.roa (raw, json)
Hash identifier:          +ce7CYqEG+Qem+ebinWtu/gr3VpefUFnlc9MWl6wu+0=
Subject key identifier:   E8:E5:89:9C:00:44:D3:44:BD:A8:8C:66:FF:49:84:27:AA:9B:34:15
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0F0D
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/6OWJnABE00S9qIxm_0mEJ6qbNBU.roa
Signing time:             Fri 22 Aug 2025 08:50:05 +0000
ROA not before:           Fri 22 Aug 2025 08:50:05 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18424
IP address blocks:        121.50.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3853 (0xf0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Aug 22 08:50:05 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E8E5899C0044D344BDA88C66FF498427AA9B3415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:92:9b:c4:da:89:20:0a:69:71:e6:73:95:
                    03:53:de:c7:44:3c:3d:38:8b:a8:4e:58:15:d3:7b:
                    75:ee:c0:dd:ed:54:b8:9c:5e:22:be:f9:00:c6:cb:
                    a2:f5:c3:c8:6d:70:32:2f:b4:69:9d:b2:ea:13:09:
                    67:65:6e:92:7f:9d:41:2d:3e:64:5c:55:82:95:a5:
                    ee:78:c0:61:ef:b1:5e:f6:2b:3b:99:bb:fd:fe:1c:
                    e4:f2:6b:c5:1f:d1:cc:1a:51:4e:b5:c2:15:67:09:
                    f1:da:fd:b2:5a:02:a5:8e:17:3b:e0:d0:60:41:78:
                    13:55:9b:0e:9a:fa:e1:9c:d7:5a:69:20:ad:0e:4e:
                    2c:1b:cf:11:bd:c8:47:71:bd:95:cd:b3:ff:af:29:
                    3a:c0:52:67:2f:37:32:29:5f:46:ee:37:62:1f:42:
                    ce:90:b3:20:f5:81:eb:41:4b:d2:bb:c6:95:23:4e:
                    2b:cd:e2:c6:0e:59:f8:17:b5:bb:1d:e2:75:f4:84:
                    62:df:ef:01:10:fe:55:d6:0d:d9:e8:d1:2d:79:8d:
                    99:da:d2:5f:7c:58:6a:4a:c5:a6:3f:44:4a:29:0f:
                    51:83:df:99:60:39:3f:92:07:9e:30:6e:50:27:b6:
                    7c:00:8c:60:b5:07:14:64:cc:ce:15:8c:b8:2b:bd:
                    c8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E5:89:9C:00:44:D3:44:BD:A8:8C:66:FF:49:84:27:AA:9B:34:15
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/6OWJnABE00S9qIxm_0mEJ6qbNBU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:77:a0:72:27:47:f1:25:89:6e:85:ff:c7:59:1c:8c:8d:94:
         ff:e5:e1:c7:e3:af:43:f5:ac:4c:70:66:46:a6:03:78:04:0b:
         6e:ca:d8:25:db:10:39:5b:df:11:a9:8f:1b:45:fd:75:59:e5:
         ea:9c:bd:96:37:ee:fc:83:48:10:62:07:d2:a3:a2:97:69:0e:
         ed:4d:f1:49:68:56:19:6a:23:14:80:c7:3f:a7:35:46:2e:21:
         51:3a:aa:54:c5:b0:f9:f6:a1:8c:1e:87:e4:dc:b6:6d:af:0d:
         3c:bb:7b:e6:cc:3d:23:d6:a1:4b:d4:26:09:9b:f6:38:bd:37:
         9d:b8:cd:f5:15:ac:2e:b5:19:bb:65:8e:4b:a2:ca:2c:0e:4a:
         79:66:94:04:f3:b0:27:c9:7c:05:6e:42:31:13:fb:f9:e1:f7:
         b9:11:46:06:02:7c:fb:50:86:42:ef:be:fb:f5:f6:ad:8d:fd:
         3a:51:6f:15:d2:b7:73:50:61:7d:24:fa:ea:80:ca:45:11:40:
         62:4b:da:4a:ed:a6:1a:c2:2b:5e:9b:be:0d:81:2e:1d:28:a3:
         2c:64:12:dc:f7:51:c7:49:d9:b7:1d:e9:df:aa:b3:44:7e:d9:
         ce:a1:fc:4e:f6:e8:aa:11:c4:1b:95:c4:20:5b:d5:6e:86:04:
         af:ee:af:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:43:11 2025 by rpki-client