Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ARcMcVTbfsxk4JC_62Bgo11vZCQ.roa
File:                     ARcMcVTbfsxk4JC_62Bgo11vZCQ.roa (raw, json)
Hash identifier:          opxAZ7I1QLEusO41qVxo8weifL+7GOqKX51zXNPuutI=
Subject key identifier:   01:17:0C:71:54:DB:7E:CC:64:E0:90:BF:EB:60:60:A3:5D:6F:64:24
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       183D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ARcMcVTbfsxk4JC_62Bgo11vZCQ.roa
Signing time:             Mon 10 Feb 2025 14:07:43 +0000
ROA not before:           Mon 10 Feb 2025 14:07:43 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131584
IP address blocks:        106.105.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 08:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6205 (0x183d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb 10 14:07:43 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=01170C7154DB7ECC64E090BFEB6060A35D6F6424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:45:0f:51:92:e6:3a:50:85:5c:32:25:22:9b:
                    d1:b6:bd:fe:e8:2f:86:a4:4f:52:80:16:91:6b:3c:
                    eb:52:fd:80:bd:75:e6:1d:6f:80:40:ef:bf:22:8c:
                    68:c8:7f:38:76:53:5c:5b:24:d0:bc:54:76:c9:45:
                    a4:0c:0c:34:d2:d4:e2:93:5b:fa:25:67:94:cf:ab:
                    e3:ba:84:bf:f9:64:34:22:92:e2:b1:3a:e6:8c:01:
                    e0:95:30:13:3d:bc:83:f9:88:30:2f:52:b1:00:5d:
                    51:fd:3a:ef:24:14:29:33:11:69:87:d6:21:11:13:
                    55:1c:8d:aa:9a:c4:0a:e3:76:3d:38:d6:ba:a9:03:
                    12:7a:ec:b7:18:67:a0:ad:6a:01:9e:0e:3e:21:de:
                    51:c1:c3:79:04:9e:32:df:82:44:c7:45:3e:6c:d9:
                    e3:31:67:79:28:1f:fe:c1:b7:3a:2c:96:a9:69:75:
                    19:7e:aa:cf:c3:ea:58:d7:00:cb:94:b0:c5:38:bc:
                    81:1c:63:32:36:71:0b:f6:6e:d5:da:32:5e:13:86:
                    95:5a:11:fd:9a:d9:d2:4f:6d:1a:b1:71:73:9e:d9:
                    98:b5:31:c0:c2:3e:64:41:28:bc:8c:b8:a5:4d:17:
                    44:e5:c7:fc:1b:f3:81:dc:ee:a7:ff:38:6d:73:d9:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:17:0C:71:54:DB:7E:CC:64:E0:90:BF:EB:60:60:A3:5D:6F:64:24
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ARcMcVTbfsxk4JC_62Bgo11vZCQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:cb:d9:5a:21:d3:8d:d6:62:d9:82:ea:e5:d9:ee:49:4e:46:
         69:4f:27:19:32:2f:4c:dd:d0:31:87:b8:a3:0a:02:0a:2c:b5:
         89:4c:ac:f0:c1:4a:49:20:a9:3a:96:13:9e:c7:95:15:9a:bb:
         7e:b2:a6:2b:41:93:8b:11:34:f6:a7:d9:b8:3b:33:de:92:77:
         be:9c:ae:2e:13:9e:42:31:4b:de:2e:a6:6b:a0:e3:5d:20:bd:
         96:cc:64:20:9b:15:54:b0:73:42:b0:ab:47:34:f4:58:3f:aa:
         18:0c:76:27:30:08:d8:94:fc:c2:70:64:3d:41:ca:47:ba:5e:
         a3:8a:d3:72:e2:89:9e:85:b9:d1:cf:61:88:56:b5:fb:d9:8d:
         e0:c1:53:54:1d:ba:b0:51:c3:94:37:81:c3:af:94:4c:a3:a6:
         a0:0d:83:11:26:1c:6d:30:b1:25:fd:92:a3:24:94:2f:7f:5c:
         e8:a7:80:8e:28:0d:19:76:3f:55:9e:33:35:15:50:75:eb:31:
         38:c6:c5:19:d6:7c:0e:1d:b9:d1:ef:35:ec:f4:9b:20:c0:39:
         74:06:98:e8:8f:81:58:6e:05:97:cc:f3:0f:0d:d4:e9:97:27:
         bc:1d:16:21:dc:58:08:a1:b9:12:a7:20:8a:5f:83:5d:20:98:
         df:16:4a:8d
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICGD0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx
NDA3NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAxMTcwQzcxNTREQjdF
Q0M2NEUwOTBCRkVCNjA2MEEzNUQ2RjY0MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcRQ9RkuY6UIVcMiUim9G2vf7oL4akT1KAFpFrPOtS/YC9deYd
b4BA778ijGjIfzh2U1xbJNC8VHbJRaQMDDTS1OKTW/olZ5TPq+O6hL/5ZDQikuKx
OuaMAeCVMBM9vIP5iDAvUrEAXVH9Ou8kFCkzEWmH1iERE1UcjaqaxArjdj041rqp
AxJ67LcYZ6CtagGeDj4h3lHBw3kEnjLfgkTHRT5s2eMxZ3koH/7BtzoslqlpdRl+
qs/D6ljXAMuUsMU4vIEcYzI2cQv2btXaMl4ThpVaEf2a2dJPbRqxcXOe2Zi1McDC
PmRBKLyMuKVNF0Tlx/wb84Hc7qf/OG1z2dTLAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUARcMcVTbfsxk4JC/62Bgo11vZCQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQVJjTWNWVGJmc3hrNEpDXzYyQmdv
MTF2WkNRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGpptjAN
BgkqhkiG9w0BAQsFAAOCAQEAssvZWiHTjdZi2YLq5dnuSU5GaU8nGTIvTN3QMYe4
owoCCiy1iUys8MFKSSCpOpYTnseVFZq7frKmK0GTixE09qfZuDsz3pJ3vpyuLhOe
QjFL3i6ma6DjXSC9lsxkIJsVVLBzQrCrRzT0WD+qGAx2JzAI2JT8wnBkPUHKR7pe
o4rTcuKJnoW50c9hiFa1+9mN4MFTVB26sFHDlDeBw6+UTKOmoA2DESYcbTCxJf2S
oySUL39c6KeAjigNGXY/VZ4zNRVQdesxOMbFGdZ8Dh250e817PSbIMA5dAaY6I+B
WG4Fl8zzDw3U6ZcnvB0WIdxYCKG5Eqcgil+DXSCY3xZKjQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:07:16 2025 by rpki-client