Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/6vmDi4qujaJoGnOIUYNnHF2MP-I.roa
File:                     6vmDi4qujaJoGnOIUYNnHF2MP-I.roa (raw, json)
Hash identifier:          rhUcfQFF31RcDPDp0uk9lKP3zwcSRi3w4FCwhPqUNTI=
Subject key identifier:   EA:F9:83:8B:8A:AE:8D:A2:68:1A:73:88:51:83:67:1C:5D:8C:3F:E2
Certificate issuer:       /CN=3799FB79F3AEB84516A1038E37D2F8AC3CB667C9
Certificate serial:       0C
Authority key identifier: 37:99:FB:79:F3:AE:B8:45:16:A1:03:8E:37:D2:F8:AC:3C:B6:67:C9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/N5n7efOuuEUWoQOON9L4rDy2Z8k.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/6vmDi4qujaJoGnOIUYNnHF2MP-I.roa
Signing time:             Thu 23 Oct 2025 06:32:10 +0000
ROA not before:           Thu 23 Oct 2025 06:32:10 +0000
ROA not after:            Fri 16 Oct 2026 15:30:24 +0000
asID:                     131657
IP address blocks:        138.252.55.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/N5n7efOuuEUWoQOON9L4rDy2Z8k.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/N5n7efOuuEUWoQOON9L4rDy2Z8k.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/N5n7efOuuEUWoQOON9L4rDy2Z8k.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 13:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3799FB79F3AEB84516A1038E37D2F8AC3CB667C9
        Validity
            Not Before: Oct 23 06:32:10 2025 GMT
            Not After : Oct 16 15:30:24 2026 GMT
        Subject: CN=EAF9838B8AAE8DA2681A73885183671C5D8C3FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:6b:36:3c:18:e3:f5:ba:1a:bc:fa:0d:12:
                    82:4e:68:29:3c:20:20:fd:00:46:22:3f:01:46:05:
                    f0:ff:5b:6f:f4:8e:66:c4:e7:9d:75:9a:ad:bf:22:
                    83:0f:7b:2f:54:b7:db:47:84:2f:00:8c:52:80:6c:
                    07:c0:24:10:9d:19:92:74:34:0d:cd:37:61:f3:9a:
                    dc:67:15:30:17:bc:a8:54:62:1c:7c:80:95:5c:a1:
                    24:e3:71:df:e6:2b:55:b2:0b:bd:c0:40:e3:e2:94:
                    27:75:7c:cc:7f:69:43:a0:40:78:b7:ce:9e:1a:66:
                    a1:9d:1b:b9:0c:c5:9c:39:2c:30:fd:36:a0:5b:d1:
                    90:e8:c9:26:b6:a0:21:93:86:6f:cb:0f:cd:e1:27:
                    28:4c:e9:af:01:6b:20:61:a6:3c:5e:c3:9d:d2:f2:
                    0e:cf:6f:5c:17:c2:78:0b:30:51:ca:3b:49:92:58:
                    a4:28:3d:c9:c7:cb:65:3d:61:dc:11:7a:ef:0e:05:
                    db:ba:e3:fd:81:98:b5:5d:8e:5b:32:6f:66:ee:db:
                    48:f4:98:79:59:3b:bf:0a:c6:e4:5d:df:6f:3e:38:
                    a5:3d:61:39:c2:67:4a:2a:9e:5c:0c:3d:b6:b0:83:
                    84:7e:f3:82:19:ef:9f:64:2e:a5:60:d2:30:b7:1c:
                    36:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F9:83:8B:8A:AE:8D:A2:68:1A:73:88:51:83:67:1C:5D:8C:3F:E2
            X509v3 Authority Key Identifier:
                keyid:37:99:FB:79:F3:AE:B8:45:16:A1:03:8E:37:D2:F8:AC:3C:B6:67:C9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/N5n7efOuuEUWoQOON9L4rDy2Z8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/N5n7efOuuEUWoQOON9L4rDy2Z8k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/6vmDi4qujaJoGnOIUYNnHF2MP-I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:8e:55:73:71:a2:7b:07:f3:24:a0:38:de:cd:fc:51:68:b7:
         19:96:8a:26:2e:cd:93:f3:34:2c:f4:be:81:06:90:55:02:55:
         72:ab:99:7e:99:76:1f:bb:cf:06:e7:74:1d:cd:27:da:02:49:
         69:2b:11:df:da:4e:b6:a8:c0:ab:9c:18:ae:7b:30:09:5a:6a:
         af:5a:2b:cb:db:0c:93:4b:fb:27:13:40:e5:47:bf:ac:15:c8:
         6c:41:5f:ba:45:5a:d9:84:df:92:ab:84:04:85:23:71:fe:13:
         b7:e6:7f:f5:31:74:5d:6c:6f:30:3c:05:5a:23:61:d7:62:b7:
         fe:89:2e:8d:39:a4:7c:5a:65:cf:17:2d:9c:23:83:21:27:5e:
         98:d0:f2:34:53:65:57:0e:6f:e5:2f:ad:c6:ab:44:06:56:0a:
         88:aa:3c:a2:2d:b5:93:28:8a:a9:90:8a:da:a0:b6:ca:16:11:
         66:e5:b5:02:38:36:26:31:56:48:02:01:d6:5d:6b:62:07:cd:
         ae:8c:76:75:c9:ad:d7:8b:2a:02:fd:51:0f:90:06:42:42:76:
         0a:98:50:a0:2a:0a:a7:6c:af:f8:a4:1b:dd:ac:01:fe:e8:f7:
         d4:b5:f3:fd:45:4a:5d:e9:ac:fe:1c:c6:b7:e7:1f:cd:d3:d4:
         76:28:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:40:34 2025 by rpki-client