Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-nKQa1f24_Qd0gGE73auDVJVYjs.roa
File:                     -nKQa1f24_Qd0gGE73auDVJVYjs.roa (raw, json)
Hash identifier:          xibNUTv9d4oNW1blpuDQcA7im9EBW/JXEJcrSS1Wg8Y=
Subject key identifier:   FA:72:90:6B:57:F6:E3:F4:1D:D2:01:84:EF:76:AE:0D:52:55:62:3B
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       17D5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-nKQa1f24_Qd0gGE73auDVJVYjs.roa
Signing time:             Mon 10 Feb 2025 14:07:18 +0000
ROA not before:           Mon 10 Feb 2025 14:07:18 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9919
IP address blocks:        218.210.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Apr 2025 02:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6101 (0x17d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb 10 14:07:18 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=FA72906B57F6E3F41DD20184EF76AE0D5255623B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:23:29:79:db:e3:0a:cf:02:e9:10:b3:c3:
                    74:91:1f:03:27:8d:ba:58:73:aa:33:69:20:70:ed:
                    20:65:cc:c9:ec:3b:b3:af:9e:48:6e:5d:fa:e2:2c:
                    e3:7f:1d:63:00:44:71:69:3d:ad:98:45:fc:0b:01:
                    89:c3:23:49:b5:ca:6a:49:c2:bb:fe:b8:e5:21:60:
                    41:fc:14:5c:7b:e1:4f:3b:4b:6c:26:97:cf:37:05:
                    d3:22:a2:ff:82:25:d7:ac:87:ba:31:1a:3c:08:90:
                    88:ee:e3:c7:bf:94:6e:5e:7e:97:7e:4e:66:b9:81:
                    01:85:ec:2b:41:72:8c:ce:5b:61:2d:07:80:0f:76:
                    b7:5a:62:2b:30:8f:57:9c:4d:5d:aa:28:a8:8f:04:
                    52:82:07:6a:ea:08:7f:1e:3d:e7:c6:db:e2:1a:71:
                    71:7e:fd:33:32:32:71:3b:56:cd:23:35:00:73:c9:
                    33:50:33:11:c5:53:3e:ce:87:50:72:8b:a2:1c:05:
                    50:a8:18:ca:4d:59:e8:28:7b:ad:8f:94:3e:cb:08:
                    55:ee:2d:f2:dd:a1:36:63:4e:40:e9:ff:70:8d:38:
                    36:6f:2e:ea:39:63:e3:19:21:91:44:38:3a:b0:95:
                    c4:ef:97:fd:35:a4:d2:fd:6c:ad:b2:f1:cf:22:32:
                    42:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:72:90:6B:57:F6:E3:F4:1D:D2:01:84:EF:76:AE:0D:52:55:62:3B
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-nKQa1f24_Qd0gGE73auDVJVYjs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.210.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:b5:35:ae:58:18:27:3e:0b:4e:e7:fa:81:14:57:14:91:e3:
         4e:cc:58:82:33:38:09:e5:ec:00:69:cf:24:c1:51:3c:a4:17:
         c2:3b:00:f4:a0:dc:06:07:38:0f:03:de:34:cf:ab:6e:6b:d5:
         2a:e4:e9:a3:5a:6b:d9:63:c0:b2:4f:03:55:6a:c3:54:98:12:
         53:26:c7:29:b3:5c:37:9d:7d:76:21:62:d9:07:4e:f3:ba:f6:
         fa:9b:c8:51:6f:eb:3b:d6:57:58:0b:b3:8a:8c:73:53:a5:20:
         3f:ad:33:d8:b2:0e:41:a6:25:33:25:6d:5e:55:61:45:36:7e:
         1f:81:00:4e:96:2b:42:3f:41:fa:48:18:cb:d6:0a:89:3f:86:
         a4:98:55:95:33:08:9a:13:c0:30:9a:c6:52:ca:76:27:78:2e:
         0b:e1:5a:fc:c3:05:7e:61:64:d9:d8:2c:3e:58:fb:da:02:d6:
         eb:01:4b:f7:4d:4a:ed:ab:60:d9:38:3a:68:b2:e3:8c:96:81:
         d1:da:de:4f:ac:e0:98:e2:f6:d9:60:f2:5b:6f:e2:e5:e1:31:
         2d:28:6a:28:c7:e1:a3:64:76:81:0d:28:f9:f1:05:6c:3e:a2:
         a7:7c:0a:68:49:36:63:eb:fb:7b:d4:3b:5b:21:4f:18:c0:61:
         85:36:4f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:32 2025 by rpki-client