Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/aao53KVT6s8aI3NzKgEVvSmu_mk.roa
File:                     aao53KVT6s8aI3NzKgEVvSmu_mk.roa (raw, json)
Hash identifier:          jErTQ3FS/WDmc4iI4HGd4/DCOyeEz50OD1/Rb/yxGbM=
Subject key identifier:   69:AA:39:DC:A5:53:EA:CF:1A:23:73:73:2A:01:15:BD:29:AE:FE:69
Certificate issuer:       /CN=3799FB79F3AEB84516A1038E37D2F8AC3CB667C9
Certificate serial:       08
Authority key identifier: 37:99:FB:79:F3:AE:B8:45:16:A1:03:8E:37:D2:F8:AC:3C:B6:67:C9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/N5n7efOuuEUWoQOON9L4rDy2Z8k.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/aao53KVT6s8aI3NzKgEVvSmu_mk.roa
Signing time:             Thu 23 Oct 2025 06:31:49 +0000
ROA not before:           Thu 23 Oct 2025 06:31:49 +0000
ROA not after:            Fri 16 Oct 2026 15:30:24 +0000
asID:                     131657
IP address blocks:        138.252.54.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/N5n7efOuuEUWoQOON9L4rDy2Z8k.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/N5n7efOuuEUWoQOON9L4rDy2Z8k.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/N5n7efOuuEUWoQOON9L4rDy2Z8k.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 13:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3799FB79F3AEB84516A1038E37D2F8AC3CB667C9
        Validity
            Not Before: Oct 23 06:31:49 2025 GMT
            Not After : Oct 16 15:30:24 2026 GMT
        Subject: CN=69AA39DCA553EACF1A2373732A0115BD29AEFE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a9:4b:74:ae:bd:3f:cf:6e:8b:80:5c:45:64:
                    c3:d2:41:ff:df:c5:8f:22:8c:11:5b:1c:3a:e4:39:
                    d2:ab:65:c2:cb:95:4f:af:ee:bf:e9:43:dd:ca:48:
                    6e:86:63:8f:25:dc:a0:f0:1a:63:84:54:8d:98:f9:
                    6b:40:07:d1:7a:71:f8:7d:c7:1a:ea:fc:14:21:59:
                    02:16:74:7d:5c:78:00:57:63:89:e3:df:66:8d:d5:
                    3d:80:9b:ed:ea:4f:ab:bb:7c:df:58:45:b0:73:ad:
                    b8:f2:8d:7d:35:f4:ed:2e:b1:43:e4:3e:b5:3f:73:
                    f6:8d:0e:c1:01:7a:6d:5c:1f:d1:75:81:e3:3e:b5:
                    e1:8b:48:f5:e6:f9:81:a8:63:c4:64:09:15:04:e9:
                    06:77:77:35:86:4a:f7:c2:b1:03:a8:9a:f9:74:10:
                    10:44:cc:96:7b:68:7b:4e:53:a3:73:55:53:a9:28:
                    a7:ec:12:81:d3:e9:e1:1f:bc:67:c0:9c:5b:0c:a2:
                    10:63:fe:5d:7e:b7:77:60:79:db:6d:8e:b9:4e:47:
                    34:02:ba:a4:00:0e:34:9d:26:9d:41:3f:8e:e5:83:
                    1b:e1:78:0b:c6:a0:be:97:93:64:61:a4:32:c7:3c:
                    61:07:2a:6d:68:0d:f8:39:0c:48:e3:78:eb:72:de:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AA:39:DC:A5:53:EA:CF:1A:23:73:73:2A:01:15:BD:29:AE:FE:69
            X509v3 Authority Key Identifier:
                keyid:37:99:FB:79:F3:AE:B8:45:16:A1:03:8E:37:D2:F8:AC:3C:B6:67:C9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/N5n7efOuuEUWoQOON9L4rDy2Z8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/N5n7efOuuEUWoQOON9L4rDy2Z8k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/aao53KVT6s8aI3NzKgEVvSmu_mk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:ee:25:e4:da:b6:c5:1e:97:a4:85:e1:f7:16:cd:80:0a:3c:
         ba:1b:90:6e:e1:c5:58:b7:67:6d:41:7b:eb:20:7f:81:6b:ab:
         c1:0d:d1:6c:aa:c0:1f:12:79:92:e8:5a:7d:48:c5:fc:98:8b:
         7f:d0:7b:a2:4a:41:7c:3b:5c:39:d6:f3:2a:89:04:96:11:4e:
         ce:88:59:38:69:e5:6f:0e:7e:4a:a9:15:85:33:a1:90:9c:eb:
         da:f8:78:05:79:85:f6:4d:ba:27:ab:f4:03:ca:0b:c2:88:9d:
         f2:38:33:8c:0c:74:81:f8:59:34:57:70:3c:7f:1b:19:85:32:
         38:73:0b:93:2e:7f:21:ac:ce:b8:bb:ce:54:c5:b9:e8:8c:aa:
         f4:53:8b:c5:ee:b1:26:4a:ec:a1:1e:15:a6:76:34:18:2f:00:
         25:ab:e7:53:86:0f:ba:c1:c1:77:19:e8:eb:8b:96:94:9b:6c:
         9e:d5:89:b7:c8:ac:12:3a:a2:c5:00:78:7e:99:d5:a6:2f:4e:
         5b:3c:6d:fc:f9:f2:f3:36:68:f4:0b:4a:3f:c2:92:d2:4d:88:
         d5:36:6e:1e:83:6d:40:b8:d9:5e:b4:ee:b5:48:31:9f:d9:0e:
         5d:c7:17:b0:e8:a0:73:3b:51:c5:78:fa:a5:13:46:cf:c8:e4:
         90:c0:b9:18
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNzk5
RkI3OUYzQUVCODQ1MTZBMTAzOEUzN0QyRjhBQzNDQjY2N0M5MB4XDTI1MTAyMzA2
MzE0OVoXDTI2MTAxNjE1MzAyNFowMzExMC8GA1UEAxMoNjlBQTM5RENBNTUzRUFD
RjFBMjM3MzczMkEwMTE1QkQyOUFFRkU2OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ+pS3SuvT/PbouAXEVkw9JB/9/FjyKMEVscOuQ50qtlwsuVT6/u
v+lD3cpIboZjjyXcoPAaY4RUjZj5a0AH0Xpx+H3HGur8FCFZAhZ0fVx4AFdjiePf
Zo3VPYCb7epPq7t831hFsHOtuPKNfTX07S6xQ+Q+tT9z9o0OwQF6bVwf0XWB4z61
4YtI9eb5gahjxGQJFQTpBnd3NYZK98KxA6ia+XQQEETMlntoe05To3NVU6kop+wS
gdPp4R+8Z8CcWwyiEGP+XX63d2B5222OuU5HNAK6pAAONJ0mnUE/juWDG+F4C8ag
vpeTZGGkMsc8YQcqbWgN+DkMSON463LeGaMCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBRpqjncpVPqzxojc3MqARW9Ka7+aTAfBgNVHSMEGDAWgBQ3mft58664RRahA443
0visPLZnyTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT
oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MT05HREVU
RUNIL041bjdlZk91dUVVV29RT09OOUw0ckR5Mlo4ay5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvTjVuN2VmT3V1RVVXb1FPT045TDRyRHkyWjhrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTE9OR0RFVEVDSC9hYW81M0tWVDZz
OGFJM056S2dFVnZTbXVfbWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu
dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBivw2MA0GCSqGSIb3DQEBCwUAA4IBAQC27iXk2rbFHpekheH3Fs2ACjy6
G5Bu4cVYt2dtQXvrIH+Ba6vBDdFsqsAfEnmS6Fp9SMX8mIt/0HuiSkF8O1w51vMq
iQSWEU7OiFk4aeVvDn5KqRWFM6GQnOva+HgFeYX2Tbonq/QDygvCiJ3yODOMDHSB
+Fk0V3A8fxsZhTI4cwuTLn8hrM64u85UxbnojKr0U4vF7rEmSuyhHhWmdjQYLwAl
q+dThg+6wcF3Gejri5aUm2ye1Ym3yKwSOqLFAHh+mdWmL05bPG38+fLzNmj0C0o/
wpLSTYjVNm4eg21AuNletO61SDGf2Q5dxxew6KBzO1HFePqlE0bPyOSQwLkY
-----END CERTIFICATE-----
Generated at Sat Oct 25 11:40:34 2025 by rpki-client