Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ZNeFLIL6Afty6s-h6ZG39YLffUA.roa
File:                     ZNeFLIL6Afty6s-h6ZG39YLffUA.roa (raw, json)
Hash identifier:          NAk8pdnxMu06ofGrHQakY74zjy1sg5IYHMBGTEnkc5E=
Subject key identifier:   64:D7:85:2C:82:FA:01:FB:72:EA:CF:A1:E9:91:B7:F5:82:DF:7D:40
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0F19
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ZNeFLIL6Afty6s-h6ZG39YLffUA.roa
Signing time:             Fri 22 Aug 2025 08:50:08 +0000
ROA not before:           Fri 22 Aug 2025 08:50:08 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24168
IP address blocks:        121.50.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3865 (0xf19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Aug 22 08:50:08 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=64D7852C82FA01FB72EACFA1E991B7F582DF7D40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:b2:ce:36:66:94:80:82:b2:e9:26:09:37:
                    52:d3:fb:73:a9:12:23:00:18:86:0d:9b:3b:d2:42:
                    a7:27:e6:44:a9:49:bc:38:c8:a3:9e:66:84:e2:46:
                    31:a6:23:94:e8:e3:f1:61:d8:33:b6:c0:29:16:2d:
                    ae:82:59:f0:ad:fd:16:17:4d:fc:57:70:42:8f:43:
                    4c:f9:d8:bd:9c:ed:15:5d:b9:d1:1c:b4:65:b8:eb:
                    88:c4:7b:66:25:b4:6b:ad:aa:7e:ce:e5:4b:fa:f3:
                    d1:de:b8:46:e8:4d:5c:51:ea:23:b3:95:47:2f:31:
                    fa:48:10:0e:d0:0f:3b:a5:3c:27:ff:44:f2:8a:8e:
                    3c:a9:73:49:9b:16:d4:76:a9:14:ed:23:0e:e0:9f:
                    44:9b:5a:d7:b5:15:01:40:9c:e5:33:6c:a1:53:ef:
                    4f:32:ef:8f:34:43:64:7d:97:c5:de:10:06:f9:79:
                    19:df:46:f3:3b:cf:ee:24:1b:5a:c3:b1:07:03:02:
                    42:8f:57:82:e6:94:9a:bd:3e:bc:a0:be:a1:2e:db:
                    4e:a8:ad:bf:de:82:38:b9:4f:c3:6c:d1:42:20:5c:
                    79:f7:b1:15:81:4c:b3:a2:c3:b3:70:f4:91:be:0a:
                    b8:22:eb:6f:62:ae:27:9c:00:9a:ff:63:ba:70:38:
                    b7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D7:85:2C:82:FA:01:FB:72:EA:CF:A1:E9:91:B7:F5:82:DF:7D:40
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ZNeFLIL6Afty6s-h6ZG39YLffUA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:e2:67:35:a0:87:1e:15:1b:95:f0:f5:35:fa:7c:06:a6:e5:
         2f:06:de:4f:96:47:0d:ec:e0:7d:ba:a5:96:23:d1:1a:80:9b:
         d0:ed:a9:9d:9a:2e:2e:47:5d:02:e8:48:7b:40:67:5d:8f:d2:
         38:8c:27:b4:ec:2e:df:d2:1d:97:cc:73:81:6a:24:98:b3:73:
         58:dd:4c:17:b9:d0:dc:62:c1:bc:cc:85:90:11:b2:98:d8:4b:
         ea:1a:40:0c:c1:03:21:97:89:45:2b:1b:e8:9a:eb:df:6c:7b:
         9b:32:76:f3:df:db:9c:19:f8:83:ab:94:d7:18:aa:d1:b2:9f:
         e5:dc:83:f5:36:35:83:40:c8:38:e2:c3:8e:1e:ea:14:a5:2b:
         81:46:30:74:25:cd:5e:66:35:74:10:e1:40:0e:ad:ae:f3:83:
         05:07:b3:5c:a5:f2:19:98:5b:1c:31:2a:ca:45:08:0a:aa:7c:
         89:ca:8f:6a:59:82:e0:d4:dc:d1:35:83:a4:6e:e9:e1:b9:ea:
         e3:4f:52:aa:83:e0:6a:f4:84:e7:bf:4d:95:e0:99:f5:d7:ae:
         5d:1c:87:5e:5d:bd:dc:b1:d5:47:8c:a1:84:8f:c2:c4:84:ea:
         cf:36:fc:19:bb:0f:e4:c3:7f:66:2f:41:7a:47:b5:c6:98:9b:
         cf:63:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:41:57 2025 by rpki-client