Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/NJBuq1hOrFmgy6600m3QQeXJ18Y.roa
File:                     NJBuq1hOrFmgy6600m3QQeXJ18Y.roa (raw, json)
Hash identifier:          YTtRoCNKffC5d+/OpMloSIIr3WPNf6uBUzjiI4GLiok=
Subject key identifier:   34:90:6E:AB:58:4E:AC:59:A0:CB:AE:B4:D2:6D:D0:41:E5:C9:D7:C6
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       197C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NJBuq1hOrFmgy6600m3QQeXJ18Y.roa
Signing time:             Fri 22 Aug 2025 08:53:02 +0000
ROA not before:           Fri 22 Aug 2025 08:53:02 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4780
IP address blocks:        115.30.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Sep 2025 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6524 (0x197c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Aug 22 08:53:02 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=34906EAB584EAC59A0CBAEB4D26DD041E5C9D7C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:a8:0f:f7:ae:94:35:de:16:dc:9b:e9:d8:
                    1b:0f:a3:a5:63:cf:79:d1:7c:12:eb:ab:ee:d4:ca:
                    e4:4c:2d:f2:70:6d:f8:c7:80:d7:52:cc:dd:0e:62:
                    ea:49:f9:53:32:a1:36:6f:7c:89:07:1f:c1:b8:ef:
                    d6:1a:2e:97:86:63:c0:f9:d6:c6:be:7f:18:e5:38:
                    a1:1d:29:38:36:49:19:77:84:18:82:a7:6a:50:7c:
                    07:02:3a:dd:52:87:b1:74:41:15:fd:c1:93:92:8e:
                    9b:18:aa:fb:32:25:ef:32:0d:f3:b2:63:33:79:19:
                    0b:04:d5:43:a1:fb:d1:45:9d:fa:6f:27:84:f7:39:
                    d3:26:42:1d:19:2b:af:53:0e:4e:21:30:06:e0:76:
                    a7:40:dc:0d:f5:1f:e2:c6:c8:27:70:1b:04:04:e1:
                    db:5b:cf:12:02:e0:b7:cb:49:39:92:44:1e:6b:07:
                    96:95:d1:b6:84:1a:e0:34:fc:89:c9:18:f4:6c:ae:
                    56:c0:bd:49:81:38:26:aa:7f:65:c5:2b:21:40:30:
                    06:57:11:71:42:9d:38:05:dd:0b:15:d7:05:a7:5e:
                    af:b8:1d:58:c0:30:d1:df:9c:a6:fa:e4:41:16:03:
                    ab:8f:f4:b2:21:d3:14:39:82:75:de:08:f1:5c:35:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:90:6E:AB:58:4E:AC:59:A0:CB:AE:B4:D2:6D:D0:41:E5:C9:D7:C6
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NJBuq1hOrFmgy6600m3QQeXJ18Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.30.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         95:65:cd:df:7d:f2:ab:01:09:8a:34:47:d3:b9:16:83:db:9b:
         e3:20:db:49:31:ee:35:d6:98:72:6c:31:47:68:94:f2:d3:1d:
         17:91:78:51:22:8c:9c:7d:bf:4e:05:da:2b:03:94:e7:98:2e:
         8f:3c:8b:70:f8:3d:2b:e5:e5:1d:59:2a:11:96:69:5b:6a:5e:
         2c:03:a5:88:1f:e1:ab:de:e9:a1:55:c9:41:56:1d:cd:3b:ba:
         73:7c:34:11:8b:c4:4f:d9:a9:ad:eb:a8:f4:5f:a3:43:f6:1d:
         a0:d5:ac:6a:08:48:19:e4:90:f2:3f:ba:1e:23:96:77:f7:8a:
         23:38:e1:c1:cd:7c:87:d4:ed:29:2d:dc:f4:f3:7a:bb:76:55:
         2b:80:19:c4:98:84:88:50:80:bd:86:96:01:a0:47:c8:63:a9:
         d8:fa:86:72:2f:4d:90:d1:b7:27:45:39:16:95:55:e4:cf:4e:
         63:33:4c:ef:66:43:fb:1e:93:50:51:ac:c8:f6:12:0c:db:58:
         4d:5b:a4:e1:25:83:65:11:a5:c3:ca:aa:bd:b2:c9:38:0b:69:
         e0:c1:99:10:be:1b:77:05:1e:cd:ea:d0:7d:aa:7d:e1:71:bd:
         c8:c4:04:3d:b0:1c:49:46:e0:7d:a2:20:9d:f6:a4:73:6d:f6:
         82:20:9e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:07:46 2025 by rpki-client