Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/P56SVh_XimHeRpteSwdzhq-m3Uw.roa
File:                     P56SVh_XimHeRpteSwdzhq-m3Uw.roa (raw, json)
Hash identifier:          PaLZ28yNG6tgtprvjAujI0LPj2CGE50QmvVO1Ky+BM8=
Subject key identifier:   3F:9E:92:56:1F:D7:8A:61:DE:46:9B:5E:4B:07:73:86:AF:A6:DD:4C
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       19A3
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/P56SVh_XimHeRpteSwdzhq-m3Uw.roa
Signing time:             Fri 22 Aug 2025 08:53:12 +0000
ROA not before:           Fri 22 Aug 2025 08:53:12 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4780
IP address blocks:        210.64.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Sep 2025 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6563 (0x19a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Aug 22 08:53:12 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=3F9E92561FD78A61DE469B5E4B077386AFA6DD4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:48:80:4f:68:9c:e9:48:40:f7:76:02:29:
                    05:5c:ad:b7:94:e9:cc:fa:a2:f6:79:63:78:1e:6c:
                    f4:99:dc:96:55:67:f4:b9:c0:4a:62:1c:5a:c4:26:
                    cb:ac:f7:af:92:55:7b:ef:71:3b:d0:c0:46:8a:a9:
                    ca:20:b8:4b:3e:52:a8:80:80:b3:57:ee:2e:b9:bb:
                    0f:cc:1b:bf:7a:b3:4b:c0:c7:a1:fd:89:01:71:e7:
                    6d:2e:b3:bb:60:d7:57:df:43:be:aa:b4:a1:9c:87:
                    7b:19:69:62:cb:47:4a:c6:3a:b7:9d:a2:e0:6a:bd:
                    0d:32:7f:9f:d8:a0:61:5d:2c:8a:2a:2f:12:da:bb:
                    92:7b:c8:1f:df:2d:01:60:75:0c:90:b2:7c:d1:f1:
                    9a:48:3e:e6:6c:06:84:ab:54:42:2b:a4:bf:10:fc:
                    ec:2b:23:12:5a:f9:97:a3:79:73:92:d2:bf:00:02:
                    0f:92:a3:d9:c0:2f:40:38:60:09:f9:3a:45:80:ad:
                    ea:e8:92:11:6a:21:e1:ca:43:88:92:95:f4:3d:85:
                    20:37:da:56:96:c9:b3:b2:f1:67:96:a7:24:ea:49:
                    e6:76:06:31:96:6b:0f:bc:9e:c9:95:20:15:f1:e3:
                    df:27:32:89:26:07:08:ea:6e:70:40:cb:88:4b:43:
                    e6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9E:92:56:1F:D7:8A:61:DE:46:9B:5E:4B:07:73:86:AF:A6:DD:4C
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/P56SVh_XimHeRpteSwdzhq-m3Uw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.64.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8a:75:a1:7c:7d:34:a6:83:4d:73:18:c9:76:c0:c8:b3:11:5c:
         c6:bf:bd:35:23:4c:ed:48:a9:58:b5:09:02:f8:68:6b:5d:08:
         3f:39:5b:bb:d4:2b:3b:f1:d8:82:5c:ec:1e:2c:41:0d:f1:b7:
         f4:6f:02:51:8b:0e:6a:1c:5b:c8:46:b6:83:5b:e7:50:0e:49:
         ed:6a:89:d2:3d:5f:92:1c:a8:27:c8:79:5a:c7:03:8c:6b:0a:
         4b:1c:90:d0:66:da:b4:72:e1:01:87:8f:8d:15:a1:14:42:bf:
         10:66:6f:0c:d9:08:5c:fe:56:f8:3e:e1:d3:54:04:44:1f:5e:
         dd:de:e2:66:7d:0a:85:81:61:5a:df:8b:b9:d7:17:cf:07:d4:
         79:a0:29:ea:b6:fb:44:2c:44:09:1f:86:64:68:e3:9a:ce:40:
         84:39:d8:4f:89:6e:38:a5:97:c2:21:25:0f:a6:41:cd:d3:ba:
         bf:48:09:77:89:b1:5b:4b:6c:60:dd:79:03:3a:29:40:29:e0:
         b3:0c:80:f7:4d:29:57:1d:12:22:9a:c6:74:a6:9a:10:76:db:
         28:9e:c4:bc:eb:de:a6:52:b8:64:b9:6d:16:82:7d:3c:bd:b2:
         3b:23:00:a8:cf:0d:00:75:ab:58:0e:c7:7c:0c:0a:87:b6:e2:
         3a:07:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:07:49 2025 by rpki-client