Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/6UaYHajm2eAW9X5KkbOx2wvytIM.roa
File:                     6UaYHajm2eAW9X5KkbOx2wvytIM.roa (raw, json)
Hash identifier:          NMDfyBjzoeTnEzZJS9Qgo6qLZ5V25RXlEKaRlBs1ZNY=
Subject key identifier:   E9:46:98:1D:A8:E6:D9:E0:16:F5:7E:4A:91:B3:B1:DB:0B:F2:B4:83
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0F13
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/6UaYHajm2eAW9X5KkbOx2wvytIM.roa
Signing time:             Fri 22 Aug 2025 08:50:06 +0000
ROA not before:           Fri 22 Aug 2025 08:50:06 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24168
IP address blocks:        2405:8700:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3859 (0xf13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Aug 22 08:50:06 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E946981DA8E6D9E016F57E4A91B3B1DB0BF2B483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:b3:39:4b:74:93:d4:4f:1c:e5:58:0f:13:
                    e8:45:6a:de:c2:87:a8:27:08:99:39:db:65:c7:88:
                    8e:c9:1c:f2:f2:34:94:6a:18:76:1d:8c:30:e0:69:
                    4f:0a:ae:e1:a1:0d:98:a0:22:fc:d6:f8:01:64:61:
                    52:1b:41:57:d8:ff:8f:53:53:73:2c:51:0e:8f:dc:
                    fe:f9:b2:b2:ea:94:fc:5d:7c:7f:80:05:78:26:2f:
                    2b:5a:b5:af:2b:e9:82:b9:ba:85:59:e4:a9:c7:d6:
                    cd:8d:76:0d:a7:ef:6b:1d:ae:13:3f:ed:8a:3b:4e:
                    75:93:f2:17:31:92:aa:d1:09:05:b8:72:a5:f6:ca:
                    11:2e:2b:3b:20:0c:a2:ca:16:03:5e:b7:e1:07:00:
                    02:15:0e:71:83:6f:03:b0:df:81:ac:4f:73:ae:df:
                    f6:71:8a:26:b1:2e:69:b4:58:f5:16:0f:7c:3a:9d:
                    cb:33:f7:71:29:f8:aa:44:ab:c5:c8:0b:46:ed:9f:
                    ef:87:48:a7:d6:8f:0b:0b:f2:49:e8:f7:68:eb:d0:
                    3b:f5:2f:10:19:97:07:3b:e0:79:59:9d:73:a8:c8:
                    ef:6f:90:48:c1:45:ab:5b:20:38:f3:7a:81:ec:3e:
                    12:84:01:8d:e9:79:3f:cf:85:73:a9:ab:9c:9b:ba:
                    2a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:46:98:1D:A8:E6:D9:E0:16:F5:7E:4A:91:B3:B1:DB:0B:F2:B4:83
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/6UaYHajm2eAW9X5KkbOx2wvytIM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8700:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:2a:a4:30:63:8c:c5:1c:5e:47:d7:03:70:98:da:83:ac:df:
         15:9c:fb:2e:bb:fd:6e:c8:7a:9b:79:5d:2c:cb:b8:fe:58:12:
         b2:4c:8d:e2:be:64:d6:30:38:ad:3a:89:80:d7:68:e2:dd:7e:
         b0:40:b8:28:7e:a1:e1:11:fe:4a:1c:ec:f3:ff:58:1a:8d:de:
         8e:30:b1:b0:58:8b:cf:86:0c:d0:cd:99:84:ac:1b:65:24:5d:
         e2:3f:d9:c5:a4:68:3b:f7:86:2d:af:cc:6c:a6:87:a2:0d:14:
         5b:41:cf:3f:31:fe:bd:37:5d:0a:e7:e3:87:50:d7:49:46:f4:
         3c:82:13:9d:5e:fe:f2:17:01:e7:b5:44:05:cc:32:ae:ff:c8:
         00:80:97:80:4c:ef:73:c9:94:e1:94:21:9a:ac:5a:0f:56:cd:
         f7:88:d8:32:f3:99:68:d5:20:77:3c:9d:50:cb:f2:be:83:ec:
         b3:24:e0:49:8b:2d:3a:51:a7:68:db:4a:67:91:23:4c:66:6b:
         67:36:83:d7:bc:b0:1e:f5:37:e8:bb:f9:fd:cf:3b:cc:53:67:
         f1:4a:6d:15:4b:1f:05:14:f2:0d:c8:1a:cf:18:12:4d:25:d0:
         ef:31:bf:ba:f6:80:32:d6:61:91:b4:d5:c2:93:d7:88:98:d2:
         10:26:30:f7
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDxMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNTA4MjIw
ODUwMDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU5NDY5ODFEQThFNkQ5
RTAxNkY1N0U0QTkxQjNCMURCMEJGMkI0ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC73bM5S3ST1E8c5VgPE+hFat7Ch6gnCJk522XHiI7JHPLyNJRq
GHYdjDDgaU8KruGhDZigIvzW+AFkYVIbQVfY/49TU3MsUQ6P3P75srLqlPxdfH+A
BXgmLytata8r6YK5uoVZ5KnH1s2Ndg2n72sdrhM/7Yo7TnWT8hcxkqrRCQW4cqX2
yhEuKzsgDKLKFgNet+EHAAIVDnGDbwOw34GsT3Ou3/ZxiiaxLmm0WPUWD3w6ncsz
93Ep+KpEq8XIC0btn++HSKfWjwsL8kno92jr0Dv1LxAZlwc74HlZnXOoyO9vkEjB
RatbIDjzeoHsPhKEAY3peT/PhXOpq5ybuiopAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQU6UaYHajm2eAW9X5KkbOx2wvytIMwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOLzZVYVlIYWptMmVB
VzlYNUtrYk94Mnd2eXRJTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAkBYcAMAAwDQYJKoZIhvcNAQELBQADggEBAEQqpDBjjMUcXkfXA3CY2oOs
3xWc+y67/W7Iept5XSzLuP5YErJMjeK+ZNYwOK06iYDXaOLdfrBAuCh+oeER/koc
7PP/WBqN3o4wsbBYi8+GDNDNmYSsG2UkXeI/2cWkaDv3hi2vzGymh6INFFtBzz8x
/r03XQrn44dQ10lG9DyCE51e/vIXAee1RAXMMq7/yACAl4BM73PJlOGUIZqsWg9W
zfeI2DLzmWjVIHc8nVDL8r6D7LMk4EmLLTpRp2jbSmeRI0xma2c2g9e8sB71N+i7
+f3PO8xTZ/FKbRVLHwUU8g3IGs8YEk0l0O8xv7r2gDLWYZG01cKT14iY0hAmMPc=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:42:13 2025 by rpki-client