Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/1VEv3Qi9SVJBZtQbqrxIrDxno-Y.roa
File:                     1VEv3Qi9SVJBZtQbqrxIrDxno-Y.roa (raw, json)
Hash identifier:          uVa43KFzT3icKfEgfZv8i7nMyiMsoAOUpWkSsj4FEKU=
Subject key identifier:   D5:51:2F:DD:08:BD:49:52:41:66:D4:1B:AA:BC:48:AC:3C:67:A3:E6
Certificate issuer:       /CN=3799FB79F3AEB84516A1038E37D2F8AC3CB667C9
Certificate serial:       0E
Authority key identifier: 37:99:FB:79:F3:AE:B8:45:16:A1:03:8E:37:D2:F8:AC:3C:B6:67:C9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/N5n7efOuuEUWoQOON9L4rDy2Z8k.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/1VEv3Qi9SVJBZtQbqrxIrDxno-Y.roa
Signing time:             Thu 23 Oct 2025 06:32:18 +0000
ROA not before:           Thu 23 Oct 2025 06:32:18 +0000
ROA not after:            Fri 16 Oct 2026 15:30:24 +0000
asID:                     134823
IP address blocks:        138.252.54.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/N5n7efOuuEUWoQOON9L4rDy2Z8k.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/N5n7efOuuEUWoQOON9L4rDy2Z8k.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/N5n7efOuuEUWoQOON9L4rDy2Z8k.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 13:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3799FB79F3AEB84516A1038E37D2F8AC3CB667C9
        Validity
            Not Before: Oct 23 06:32:18 2025 GMT
            Not After : Oct 16 15:30:24 2026 GMT
        Subject: CN=D5512FDD08BD49524166D41BAABC48AC3C67A3E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:e5:ff:98:12:5a:3f:50:8c:63:fa:52:1c:
                    ef:44:36:90:45:71:a9:de:21:57:21:84:72:81:33:
                    4f:50:0e:b0:25:4b:09:a6:22:f4:91:21:58:fa:89:
                    3d:27:c5:d6:9d:8c:63:b0:39:a9:96:d6:cc:49:cd:
                    25:fb:65:92:a9:7d:29:69:48:36:f3:6b:69:a8:ff:
                    ae:f9:7e:f5:39:1c:23:2a:76:29:d1:51:31:98:4d:
                    e9:50:85:a4:6d:97:34:e3:25:ae:1f:47:10:18:3e:
                    e3:c7:f6:4e:89:b6:20:df:77:05:4b:b1:0e:07:53:
                    a2:7b:37:4b:66:df:24:de:bc:f4:ea:39:ab:18:cb:
                    8c:1c:4b:a7:72:36:ea:43:39:d6:32:28:a6:9c:f9:
                    ef:9c:61:b5:0b:5a:76:5f:64:9a:a1:9d:f2:06:13:
                    73:2a:c9:46:02:a5:4a:69:a7:07:12:13:70:0a:04:
                    e5:1c:fa:6b:3c:4e:e5:a9:17:40:cd:a8:5f:04:c6:
                    c2:49:a2:a5:78:88:32:38:42:04:74:5d:1c:8b:57:
                    2e:19:09:80:72:6b:40:04:12:01:31:09:ba:38:f3:
                    22:e3:30:fb:08:a7:e2:1a:7f:98:80:98:6c:7e:6e:
                    ca:f1:41:b7:dd:b5:eb:a9:5e:c3:4a:3a:83:6e:02:
                    19:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:51:2F:DD:08:BD:49:52:41:66:D4:1B:AA:BC:48:AC:3C:67:A3:E6
            X509v3 Authority Key Identifier:
                keyid:37:99:FB:79:F3:AE:B8:45:16:A1:03:8E:37:D2:F8:AC:3C:B6:67:C9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/N5n7efOuuEUWoQOON9L4rDy2Z8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/N5n7efOuuEUWoQOON9L4rDy2Z8k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/1VEv3Qi9SVJBZtQbqrxIrDxno-Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:9e:98:b2:b6:e0:16:b1:f4:f6:3b:d6:7b:c1:dc:2b:8d:4a:
         26:0b:09:b3:48:e0:fc:11:59:97:e6:3b:cc:72:b1:5d:1b:23:
         3f:70:0b:18:aa:c6:5b:d4:57:26:be:08:44:d1:63:3a:6e:f1:
         69:55:d2:99:74:df:63:49:31:c4:2d:95:52:c4:00:67:e6:92:
         15:ee:d6:fc:12:6a:97:24:e0:6e:fd:bb:42:fe:16:82:14:d0:
         f8:29:90:94:eb:fd:ab:ba:6c:51:d8:2c:d0:cf:39:0f:15:42:
         ee:25:2c:d3:c2:57:a0:86:0d:5d:60:e2:14:10:6b:4e:79:7b:
         cf:3c:91:82:6b:10:e8:c2:69:ca:c2:8d:45:58:c4:08:13:64:
         82:9a:49:e1:c8:d3:69:90:92:ec:34:69:3c:06:6d:5b:86:19:
         c3:18:d8:d3:fc:f4:c1:9b:57:64:45:04:ab:cc:7b:26:6b:d2:
         e0:68:59:0f:ee:98:ba:a7:91:fe:2c:5d:98:19:08:71:03:4d:
         fc:39:6d:b3:56:f8:c2:55:d8:28:16:cd:d0:0d:b6:93:a2:10:
         a1:f9:0a:75:f2:64:9e:61:68:d3:50:bc:c1:2c:2b:9c:97:90:
         db:44:af:c4:b2:d3:3e:9c:f1:74:73:fd:6c:ea:fe:13:bf:58:
         8c:35:a0:c2
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNzk5
RkI3OUYzQUVCODQ1MTZBMTAzOEUzN0QyRjhBQzNDQjY2N0M5MB4XDTI1MTAyMzA2
MzIxOFoXDTI2MTAxNjE1MzAyNFowMzExMC8GA1UEAxMoRDU1MTJGREQwOEJENDk1
MjQxNjZENDFCQUFCQzQ4QUMzQzY3QTNFNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMDy5f+YElo/UIxj+lIc70Q2kEVxqd4hVyGEcoEzT1AOsCVLCaYi
9JEhWPqJPSfF1p2MY7A5qZbWzEnNJftlkql9KWlINvNraaj/rvl+9TkcIyp2KdFR
MZhN6VCFpG2XNOMlrh9HEBg+48f2Tom2IN93BUuxDgdTons3S2bfJN689Oo5qxjL
jBxLp3I26kM51jIoppz575xhtQtadl9kmqGd8gYTcyrJRgKlSmmnBxITcAoE5Rz6
azxO5akXQM2oXwTGwkmipXiIMjhCBHRdHItXLhkJgHJrQAQSATEJujjzIuMw+win
4hp/mICYbH5uyvFBt92166lew0o6g24CGccCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBTVUS/dCL1JUkFm1BuqvEisPGej5jAfBgNVHSMEGDAWgBQ3mft58664RRahA443
0visPLZnyTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT
oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MT05HREVU
RUNIL041bjdlZk91dUVVV29RT09OOUw0ckR5Mlo4ay5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvTjVuN2VmT3V1RVVXb1FPT045TDRyRHkyWjhrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTE9OR0RFVEVDSC8xVkV2M1FpOVNW
SkJadFFicXJ4SXJEeG5vLVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu
dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBivw2MA0GCSqGSIb3DQEBCwUAA4IBAQCKnpiytuAWsfT2O9Z7wdwrjUom
CwmzSOD8EVmX5jvMcrFdGyM/cAsYqsZb1FcmvghE0WM6bvFpVdKZdN9jSTHELZVS
xABn5pIV7tb8EmqXJOBu/btC/haCFND4KZCU6/2rumxR2CzQzzkPFULuJSzTwleg
hg1dYOIUEGtOeXvPPJGCaxDowmnKwo1FWMQIE2SCmknhyNNpkJLsNGk8Bm1bhhnD
GNjT/PTBm1dkRQSrzHsma9LgaFkP7pi6p5H+LF2YGQhxA038OW2zVvjCVdgoFs3Q
DbaTohCh+Qp18mSeYWjTULzBLCucl5DbRK/EstM+nPF0c/1s6v4Tv1iMNaDC
-----END CERTIFICATE-----
Generated at Sat Oct 25 11:32:17 2025 by rpki-client