Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/L6JajchSZRowLwkQ0RMPMdtWwas.roa
File:                     L6JajchSZRowLwkQ0RMPMdtWwas.roa (raw, json)
Hash identifier:          hTtB0xKT6ULfg7P83Q6oGpowPiNTzFgYdSelalgYPWs=
Subject key identifier:   2F:A2:5A:8D:C8:52:65:1A:30:2F:09:10:D1:13:0F:31:DB:56:C1:AB
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       1436
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/L6JajchSZRowLwkQ0RMPMdtWwas.roa
Signing time:             Fri 22 Aug 2025 08:57:40 +0000
ROA not before:           Fri 22 Aug 2025 08:57:40 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     136744
IP address blocks:        150.116.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5174 (0x1436)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Aug 22 08:57:40 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=2FA25A8DC852651A302F0910D1130F31DB56C1AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8b:5a:43:0f:4f:91:f6:f8:4c:9b:6a:2f:bf:
                    44:36:4f:12:d6:89:4f:0b:34:54:bb:c9:3d:2b:fe:
                    b1:98:6c:08:1a:3d:a7:a0:09:7b:59:ec:1c:2e:51:
                    26:15:22:f2:7e:11:45:79:ee:04:6c:e7:34:da:23:
                    9f:b2:c0:0c:16:13:04:b2:02:9c:4c:93:26:61:7a:
                    1f:88:1f:d0:48:9a:dc:86:e7:dd:db:4b:c5:fd:87:
                    f3:1a:14:1e:8f:42:a0:d1:4c:63:53:a2:48:41:c8:
                    1b:cb:15:ae:bd:ab:fc:9c:29:02:fa:4a:59:82:23:
                    ca:b1:f8:e9:f5:56:a2:b2:f5:7d:b6:23:9c:64:a7:
                    a5:b8:c0:b2:61:01:38:bb:c4:d0:1a:74:ea:f9:45:
                    67:7b:3a:73:30:3c:75:c8:71:7d:27:f1:1b:ec:da:
                    38:0d:99:84:28:ca:2a:f1:6f:1a:cf:be:f9:3b:07:
                    74:9f:a7:d9:5d:5c:56:8b:70:ce:62:2f:e3:bd:14:
                    8e:ab:6d:c4:2b:e8:77:0f:99:4e:4a:72:53:12:e8:
                    df:f5:54:c6:6e:99:71:98:4f:c7:cd:31:d9:3c:93:
                    d0:d8:38:58:9b:b1:6e:72:2f:e5:43:73:43:91:21:
                    01:9d:79:b5:ff:75:e1:29:60:75:ca:09:b6:ca:09:
                    55:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A2:5A:8D:C8:52:65:1A:30:2F:09:10:D1:13:0F:31:DB:56:C1:AB
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/L6JajchSZRowLwkQ0RMPMdtWwas.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:fc:dc:7c:7e:a7:a3:fd:04:73:28:ec:56:ee:df:83:3d:e7:
         5f:c0:41:77:ac:85:73:a6:ba:0f:e0:63:4d:3c:8b:fe:43:c5:
         ad:9b:7f:e7:c5:9c:94:e5:69:dd:5b:a1:36:fa:71:7c:8d:b1:
         4c:17:22:9e:1b:f6:43:57:78:6f:b9:6f:c4:49:84:a9:e3:f9:
         49:2b:7e:08:63:36:1a:99:b7:1d:05:79:fb:8b:5f:85:1c:a3:
         2c:e4:89:46:c1:5a:26:a6:89:5b:56:1a:d5:2d:52:38:a9:60:
         79:05:b8:55:9f:b0:b8:13:f4:34:33:6a:ee:08:ee:74:b7:a4:
         a5:57:8f:0e:33:ce:e8:f3:99:c1:08:24:df:91:b3:b7:2c:3f:
         e6:10:ae:a5:9e:32:ed:5f:cc:8a:ad:74:8d:f9:e6:a1:82:4d:
         b6:f6:ef:b4:51:0d:74:2a:0b:06:f7:ae:e8:8a:4b:cc:5a:cd:
         3b:b1:85:e6:e8:90:72:28:3f:28:20:e2:9c:55:53:64:07:c9:
         16:a8:0f:82:89:97:7b:41:29:13:4d:a7:75:42:d1:03:de:b6:
         92:87:f9:e0:81:04:67:12:72:9c:0f:9a:3c:7c:d7:84:ea:0c:
         72:d7:ed:c3:0a:5e:1a:5a:50:a7:45:e2:2c:e9:40:fe:d9:18:
         33:20:a7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 20:37:50 2025 by rpki-client