Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/7tDyTKQzID_POMPcnv3B3T2rHXk.roa
File:                     7tDyTKQzID_POMPcnv3B3T2rHXk.roa (raw, json)
Hash identifier:          vAnFjFDixiDXK/dyqI5Pljug9ameF3wzyJR6K7ircy8=
Subject key identifier:   EE:D0:F2:4C:A4:33:20:3F:CF:38:C3:DC:9E:FD:C1:DD:3D:AB:1D:79
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0F1B
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/7tDyTKQzID_POMPcnv3B3T2rHXk.roa
Signing time:             Fri 22 Aug 2025 08:50:08 +0000
ROA not before:           Fri 22 Aug 2025 08:50:08 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18424
IP address blocks:        2405:8700:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3867 (0xf1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Aug 22 08:50:08 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EED0F24CA433203FCF38C3DC9EFDC1DD3DAB1D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a1:09:29:da:df:c6:aa:13:5e:51:2d:d8:42:
                    85:c3:bf:15:68:2a:1c:e7:fc:58:3a:15:cc:18:e1:
                    b4:fb:0d:90:cf:58:f1:89:9c:be:5a:c6:2e:a8:d7:
                    82:5c:4f:50:65:7f:af:e5:66:13:5c:aa:47:4b:0a:
                    4b:41:c5:e7:b7:23:53:f4:b8:e5:be:8c:2c:ec:b1:
                    18:ce:12:da:9b:31:c0:5c:72:d2:3e:51:dc:0d:51:
                    73:b5:91:82:3b:bb:04:47:f2:8b:1d:a1:9f:18:5e:
                    92:87:af:d2:f4:93:1e:1f:93:1a:4d:90:ed:e7:62:
                    7d:94:19:d4:74:c4:29:86:46:77:c6:51:72:bb:5b:
                    e6:74:31:66:1f:b3:45:70:44:66:66:0b:87:f7:5a:
                    c9:5f:a0:9c:db:b0:7a:4f:c1:95:77:93:6b:91:57:
                    e2:20:dd:ea:5f:6d:cd:eb:e7:ea:66:56:43:4f:46:
                    5a:de:d7:bf:af:bd:e3:ab:85:28:db:e5:c5:e0:b6:
                    c3:df:c3:e4:81:f2:ea:11:a5:21:ad:37:de:ce:1a:
                    fb:64:08:a2:ca:37:2f:89:f3:8b:1d:f5:ec:8e:a0:
                    d9:2e:33:c4:45:74:d3:46:f5:f4:3b:36:ed:24:93:
                    11:a3:46:ac:cd:ac:d4:93:e2:28:e5:be:4a:99:8f:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D0:F2:4C:A4:33:20:3F:CF:38:C3:DC:9E:FD:C1:DD:3D:AB:1D:79
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/7tDyTKQzID_POMPcnv3B3T2rHXk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8700:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:ed:c7:eb:5e:ea:0c:03:6a:d5:b9:74:ac:5a:4a:fe:36:98:
         16:31:da:a1:8c:49:3d:c3:82:9a:98:25:6c:ba:14:94:b7:73:
         84:ca:0b:ae:cd:91:56:f8:24:2f:5e:0b:23:00:ed:e5:f7:8e:
         57:34:3c:b1:92:49:c3:31:b6:8b:9f:85:70:86:29:a1:5a:4d:
         6e:91:c3:97:7b:84:0f:ac:0f:5b:b2:f8:b0:91:73:95:ab:4a:
         d4:65:72:1f:e1:64:f0:b8:bb:4a:e7:cc:c7:48:fe:3e:b5:ef:
         e4:3d:28:c2:21:7d:7d:19:25:18:f9:21:41:0f:0d:87:48:8c:
         41:ea:06:6c:99:5e:71:f4:89:77:e2:c9:f1:e1:30:93:84:c7:
         bb:73:7e:8e:07:86:59:27:3c:9d:72:2a:14:cc:f2:6b:95:13:
         91:b5:e1:d3:04:64:95:e9:6e:e1:6d:c9:a0:c7:d7:9d:25:5b:
         af:f3:3d:d2:e9:d0:61:21:31:3e:0c:5d:28:d3:e8:13:06:df:
         53:56:2f:be:19:87:a6:a6:08:a3:7d:96:4a:59:62:c1:91:c6:
         0d:fa:e9:c0:d2:ad:d7:50:29:0e:e6:e0:36:ad:71:d4:fb:ff:
         ce:93:44:ff:9d:7e:a3:aa:c3:e7:e3:98:20:f9:98:d5:d2:9c:
         58:bd:fb:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:44:43 2025 by rpki-client