Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INFORICH/VdQ0q0GYOlhhaLw9Bl8YkuOEDuM.roa
File:                     VdQ0q0GYOlhhaLw9Bl8YkuOEDuM.roa (raw, json)
Hash identifier:          fJ96JalUcoxtuSw/iMLEwnOjkr/nhRz2chioAH/FFe0=
Subject key identifier:   55:D4:34:AB:41:98:3A:58:61:68:BC:3D:06:5F:18:92:E3:84:0E:E3
Certificate issuer:       /CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Certificate serial:       0582
Authority key identifier: 91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/VdQ0q0GYOlhhaLw9Bl8YkuOEDuM.roa
Signing time:             Mon 10 Feb 2025 13:46:38 +0000
ROA not before:           Mon 10 Feb 2025 13:46:38 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131674
IP address blocks:        2406:3a40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 22:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1410 (0x582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
        Validity
            Not Before: Feb 10 13:46:38 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=55D434AB41983A586168BC3D065F1892E3840EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:9c:74:35:b7:19:dd:e4:2f:4f:69:97:1f:
                    ab:bf:06:59:b2:77:16:8b:b1:07:de:be:e1:59:9d:
                    4f:91:16:79:27:7c:6a:95:fb:69:1b:35:21:70:0b:
                    67:74:d6:f2:f1:6a:9f:33:d1:91:52:84:ce:62:2f:
                    86:4e:47:9b:96:3c:01:8d:38:6d:24:3e:2d:71:a3:
                    30:26:ea:1b:a7:aa:e8:1e:8b:ca:f5:fe:cc:49:5a:
                    36:bd:52:43:6e:5c:42:71:ed:54:80:14:5e:c0:60:
                    bb:b6:d5:96:be:0c:25:b3:39:75:18:45:9d:2f:30:
                    eb:56:bf:52:97:5c:c8:58:f5:ff:ca:03:4f:2f:8f:
                    76:e4:22:53:b4:92:3a:08:e6:5e:7c:d1:2e:c8:aa:
                    90:5e:c2:fa:9f:5d:9b:60:39:21:d1:f2:45:e8:fb:
                    13:66:59:f6:41:d3:a9:22:12:c3:d8:49:33:39:e3:
                    18:09:18:a4:c4:19:9d:e0:bc:8f:d1:2f:c3:91:7f:
                    06:b7:05:f8:3a:72:da:36:a7:7b:0e:fa:35:1d:1f:
                    3d:3b:62:36:9e:c8:8d:e8:48:f7:91:69:20:da:9f:
                    f9:70:d2:3d:6a:64:41:43:41:4a:8b:14:6d:2f:15:
                    e3:9e:3a:4f:39:e1:f6:63:5c:86:45:36:54:cc:df:
                    34:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D4:34:AB:41:98:3A:58:61:68:BC:3D:06:5F:18:92:E3:84:0E:E3
            X509v3 Authority Key Identifier:
                keyid:91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/VdQ0q0GYOlhhaLw9Bl8YkuOEDuM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:67:8f:1d:f4:61:8a:31:ac:d4:93:28:ba:83:9c:22:3c:3a:
         ea:a2:b0:42:bf:5f:7f:27:6e:38:45:b7:b0:8f:a3:07:8d:34:
         d6:4f:47:54:e0:01:1f:c0:dc:e1:69:df:12:bd:60:ca:da:34:
         c7:a6:d6:3c:d7:7f:78:98:cd:3e:39:bf:71:e9:94:25:3f:b9:
         47:ee:57:e4:19:3b:fd:d3:89:4e:8d:55:30:ef:79:00:81:37:
         6c:f0:61:ee:83:e7:b6:ed:77:e3:37:e3:69:3d:67:c0:d2:ef:
         d6:8d:4c:ab:47:89:b4:9c:bf:3f:8b:c8:23:62:ff:e1:e5:1d:
         4a:b4:fb:6a:09:68:e8:fd:94:8c:8e:0a:13:27:5f:7e:3e:92:
         47:cd:af:1a:36:df:50:7e:87:68:4f:0c:30:8c:49:07:a3:f7:
         a9:a4:ee:d5:b5:72:48:d8:b5:26:82:c0:cc:a3:98:4b:59:fa:
         18:65:e9:4b:e0:2d:c2:d4:92:3f:57:09:a8:01:da:09:7b:ac:
         4b:c0:69:61:fc:8f:80:ea:f0:ae:e8:31:9e:44:3d:12:c9:9b:
         da:8a:5b:8e:c1:05:cd:e5:9e:cf:2b:0b:8c:4b:5d:ec:59:e2:
         f5:53:2f:53:ff:b8:f9:20:6a:fb:fd:24:63:0c:cd:f1:28:e5:
         bc:69:48:7e
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTE5
N0U5NzlBRkJCMUJFQzJFRkMyNjQ3MjA3NTYwNTYxQkU5MDBCNjAeFw0yNTAyMTAx
MzQ2MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU1RDQzNEFCNDE5ODNB
NTg2MTY4QkMzRDA2NUYxODkyRTM4NDBFRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHspx0NbcZ3eQvT2mXH6u/BlmydxaLsQfevuFZnU+RFnknfGqV
+2kbNSFwC2d01vLxap8z0ZFShM5iL4ZOR5uWPAGNOG0kPi1xozAm6hunqugei8r1
/sxJWja9UkNuXEJx7VSAFF7AYLu21Za+DCWzOXUYRZ0vMOtWv1KXXMhY9f/KA08v
j3bkIlO0kjoI5l580S7IqpBewvqfXZtgOSHR8kXo+xNmWfZB06kiEsPYSTM54xgJ
GKTEGZ3gvI/RL8ORfwa3Bfg6cto2p3sO+jUdHz07YjaeyI3oSPeRaSDan/lw0j1q
ZEFDQUqLFG0vFeOeOk854fZjXIZFNlTM3zQhAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUVdQ0q0GYOlhhaLw9Bl8YkuOEDuMwHwYDVR0jBBgwFoAUkZfpea+7G+wu/CZH
IHVgVhvpALYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU5GT1JJ
Q0gva1pmcGVhLTdHLXd1X0NaSElIVmdWaHZwQUxZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9rWmZwZWEtN0ctd3VfQ1pISUhWZ1ZodnBBTFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JTkZPUklDSC9WZFEwcTBHWU9saGhh
THc5Qmw4WWt1T0VEdU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAJAY6QDANBgkqhkiG9w0BAQsFAAOCAQEAoGePHfRhijGs1JMouoOcIjw66qKw
Qr9ffyduOEW3sI+jB4001k9HVOABH8Dc4WnfEr1gyto0x6bWPNd/eJjNPjm/cemU
JT+5R+5X5Bk7/dOJTo1VMO95AIE3bPBh7oPntu134zfjaT1nwNLv1o1Mq0eJtJy/
P4vII2L/4eUdSrT7aglo6P2UjI4KEydffj6SR82vGjbfUH6HaE8MMIxJB6P3qaTu
1bVySNi1JoLAzKOYS1n6GGXpS+AtwtSSP1cJqAHaCXusS8BpYfyPgOrwrugxnkQ9
Esmb2opbjsEFzeWezysLjEtd7Fni9VMvU/+4+SBq+/0kYwzN8SjlvGlIfg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:13:16 2025 by rpki-client