Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/J0175PYaAemzT8V7PMELK-WUQdc.roa
File:                     J0175PYaAemzT8V7PMELK-WUQdc.roa (raw, json)
Hash identifier:          I9l+iH2iWFMBKtykrm21RDqmEM4ol/neD9TxCGYMMQE=
Subject key identifier:   27:4D:7B:E4:F6:1A:01:E9:B3:4F:C5:7B:3C:C1:0B:2B:E5:94:41:D7
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       1A37
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/J0175PYaAemzT8V7PMELK-WUQdc.roa
Signing time:             Fri 22 Aug 2025 08:53:49 +0000
ROA not before:           Fri 22 Aug 2025 08:53:49 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4780
IP address blocks:        210.66.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Sep 2025 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6711 (0x1a37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Aug 22 08:53:49 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=274D7BE4F61A01E9B34FC57B3CC10B2BE59441D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:9e:16:70:7e:11:79:22:67:7e:84:bb:78:
                    d3:f9:53:4d:58:5f:a6:0f:b1:ed:20:1d:d6:52:ac:
                    f2:cc:75:60:93:1d:a2:32:26:52:3e:03:92:f7:cb:
                    c4:00:83:74:72:09:f4:16:2e:64:93:35:59:90:61:
                    3b:89:45:96:72:10:be:09:be:70:8e:48:19:d7:a3:
                    ce:c6:78:2e:42:10:50:a6:62:c3:8a:39:5c:b4:79:
                    56:67:08:f6:06:a5:7f:c8:fc:0e:d9:8e:76:45:67:
                    0e:64:1b:5a:14:47:d6:65:53:7c:1c:4c:d3:7e:4a:
                    c8:bc:31:50:1f:4c:45:c7:04:7d:a9:bd:e3:7d:9e:
                    8a:35:af:e0:b8:03:e9:82:d8:1c:e3:6b:93:22:88:
                    49:1d:2b:db:a7:cd:3a:ba:6a:0c:17:ef:ad:d0:c4:
                    ce:f5:f7:f7:f0:b8:e1:75:6c:2b:53:fb:8b:a6:ad:
                    b1:54:30:11:91:26:3a:04:d6:27:bc:77:55:69:bd:
                    c5:af:96:cd:3c:81:43:3f:1f:81:59:c9:12:33:b7:
                    5f:7c:e9:e8:8c:27:22:05:64:92:61:a9:b7:e1:28:
                    87:c0:a8:97:6d:4e:a7:af:8c:e6:f0:01:7e:e1:34:
                    b4:6b:4d:47:e0:d8:65:73:2f:bd:37:de:69:4b:6f:
                    50:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4D:7B:E4:F6:1A:01:E9:B3:4F:C5:7B:3C:C1:0B:2B:E5:94:41:D7
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/J0175PYaAemzT8V7PMELK-WUQdc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.66.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9d:58:2c:d7:70:3c:93:fb:08:ab:d1:09:79:29:4a:f4:d5:22:
         2d:56:a7:5e:45:32:18:71:b2:fb:c0:ca:77:f2:57:2e:a0:3b:
         97:4f:a4:72:38:27:2e:4c:b2:c1:f0:b6:ce:f0:f6:7e:86:43:
         c1:b3:31:85:90:13:92:00:3c:54:82:11:53:93:e4:21:1e:b4:
         8d:de:28:14:f0:12:e9:67:b5:0d:07:6d:87:ea:22:05:8b:a4:
         67:86:37:25:fb:10:a5:a2:f3:81:b3:ac:8c:1b:9f:93:2a:a0:
         6d:e4:71:e6:dc:88:11:c6:bd:17:20:a9:fe:66:10:3f:1e:9d:
         e7:2b:81:25:83:a8:1e:cb:f3:c7:08:57:d7:54:75:89:25:ee:
         4e:de:d4:52:31:e6:bf:fb:0b:24:b3:13:4a:f9:43:ee:69:c4:
         f3:9c:57:3a:76:f9:10:78:68:c9:c9:31:c8:fd:3c:ff:46:e7:
         1a:9e:a6:47:10:5e:04:83:96:24:ee:e7:02:12:a5:b6:bc:a6:
         f9:fe:0e:d8:7a:72:21:54:f2:ff:ec:b1:34:b5:82:3b:f4:d1:
         3f:a2:d6:56:c0:30:dd:9e:d9:15:8d:68:5a:5f:ab:5c:8d:46:
         80:2e:6e:1a:02:08:88:97:65:b7:de:87:f0:2d:80:35:f3:1a:
         4e:28:96:6f
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICGjcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw
ODUzNDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI3NEQ3QkU0RjYxQTAx
RTlCMzRGQzU3QjNDQzEwQjJCRTU5NDQxRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFs54WcH4ReSJnfoS7eNP5U01YX6YPse0gHdZSrPLMdWCTHaIy
JlI+A5L3y8QAg3RyCfQWLmSTNVmQYTuJRZZyEL4JvnCOSBnXo87GeC5CEFCmYsOK
OVy0eVZnCPYGpX/I/A7ZjnZFZw5kG1oUR9ZlU3wcTNN+Ssi8MVAfTEXHBH2pveN9
noo1r+C4A+mC2Bzja5MiiEkdK9unzTq6agwX763QxM719/fwuOF1bCtT+4umrbFU
MBGRJjoE1ie8d1VpvcWvls08gUM/H4FZyRIzt1986eiMJyIFZJJhqbfhKIfAqJdt
TqevjObwAX7hNLRrTUfg2GVzL7033mlLb1CtAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUJ0175PYaAemzT8V7PMELK+WUQdcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSjAxNzVQWWFBZW16VDhWN1BNRUxL
LVdVUWRjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANJCMA0G
CSqGSIb3DQEBCwUAA4IBAQCdWCzXcDyT+wir0Ql5KUr01SItVqdeRTIYcbL7wMp3
8lcuoDuXT6RyOCcuTLLB8LbO8PZ+hkPBszGFkBOSADxUghFTk+QhHrSN3igU8BLp
Z7UNB22H6iIFi6Rnhjcl+xClovOBs6yMG5+TKqBt5HHm3IgRxr0XIKn+ZhA/Hp3n
K4Elg6gey/PHCFfXVHWJJe5O3tRSMea/+wsksxNK+UPuacTznFc6dvkQeGjJyTHI
/Tz/RucanqZHEF4Eg5Yk7ucCEqW2vKb5/g7YenIhVPL/7LE0tYI79NE/otZWwDDd
ntkVjWhaX6tcjUaALm4aAgiIl2W33ofwLYA18xpOKJZv
-----END CERTIFICATE-----
Generated at Sat Sep 6 12:08:13 2025 by rpki-client