Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/UTMULJ_m0U2qi2ntcrIIiGTl9k8.roa
File:                     UTMULJ_m0U2qi2ntcrIIiGTl9k8.roa (raw, json)
Hash identifier:          n8gsxFagprb7hHfSsVlFHy5JqWsKVYWN+OUbGFoJj54=
Subject key identifier:   51:33:14:2C:9F:E6:D1:4D:AA:8B:69:ED:72:B2:08:88:64:E5:F6:4F
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       19F0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UTMULJ_m0U2qi2ntcrIIiGTl9k8.roa
Signing time:             Fri 22 Aug 2025 08:53:33 +0000
ROA not before:           Fri 22 Aug 2025 08:53:33 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9919
IP address blocks:        175.180.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 03:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6640 (0x19f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Aug 22 08:53:33 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5133142C9FE6D14DAA8B69ED72B2088864E5F64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:49:14:4d:59:da:d8:ce:8c:dd:15:e6:bf:
                    8f:e2:92:d5:55:27:9d:fb:71:b0:ff:bb:39:21:09:
                    09:32:29:c7:8d:39:6c:37:94:a5:be:a3:74:7c:9e:
                    5a:01:8e:f6:9a:ce:52:ce:84:3f:cc:f2:11:60:4f:
                    27:75:59:48:54:f4:c2:3c:17:80:02:87:35:30:71:
                    3a:67:6d:6e:db:87:8e:00:1c:73:e8:29:16:eb:9c:
                    54:58:36:97:dd:7c:17:13:b0:11:7d:4e:ef:f4:47:
                    d5:49:74:f4:33:a3:2e:c9:8d:d0:a5:61:7a:5e:cc:
                    27:ad:0e:cd:56:f8:74:10:6b:c2:8f:d1:13:6d:82:
                    a1:7d:1d:6f:66:c0:1e:d3:98:ba:53:4a:46:ef:2f:
                    8e:53:27:6a:8a:e8:98:d8:1d:41:29:92:69:2b:48:
                    79:b5:0b:88:50:07:5a:51:a4:ef:c9:6a:cb:59:2f:
                    53:15:3c:65:9f:5b:cd:9a:18:ba:60:1c:4b:ed:fe:
                    b7:ca:d8:e8:76:d9:b8:13:ca:f3:ca:68:60:9d:17:
                    f0:70:74:74:e1:7b:3d:f9:b0:b2:58:7d:d3:68:5c:
                    ac:5c:e9:2c:be:ba:91:b3:b8:c5:cb:72:bb:7f:9b:
                    a6:55:64:5d:f8:3e:9c:f5:a7:9e:45:49:21:6b:84:
                    1c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:33:14:2C:9F:E6:D1:4D:AA:8B:69:ED:72:B2:08:88:64:E5:F6:4F
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UTMULJ_m0U2qi2ntcrIIiGTl9k8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.180.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         89:a9:95:72:d5:8b:07:83:bb:f2:84:27:e2:75:0a:fb:40:37:
         94:4d:e5:46:b1:db:a0:02:2d:a1:48:a9:60:8b:db:3d:ae:86:
         e3:94:c0:1c:7a:53:19:db:8c:fd:bd:64:5c:ff:4d:ee:dc:64:
         c6:45:43:6b:4a:f3:2d:3a:0c:d2:9d:9d:67:18:f0:18:47:5f:
         28:0c:fe:bb:13:9d:04:d0:7c:4a:78:4c:82:fe:f8:e7:01:6e:
         4f:30:2b:18:00:91:82:de:12:df:fe:85:b5:6d:dd:1d:26:5c:
         c4:59:77:3f:81:fe:38:51:fa:31:32:5e:7e:26:ea:dc:75:b1:
         52:a7:c5:e5:d5:82:ca:3b:91:b4:ca:45:78:6c:70:d8:47:22:
         15:12:23:a4:34:0b:b4:fb:83:46:20:c5:fd:96:42:d8:b1:23:
         bd:f6:eb:ae:66:df:32:a8:dc:f9:d9:8f:f4:57:37:3f:20:d2:
         28:1d:08:0f:ec:97:57:a4:c2:2d:91:aa:a1:a2:b5:da:c7:6e:
         07:d0:b4:87:11:97:a5:cb:33:5d:1d:12:ad:1b:d4:91:9c:c1:
         76:09:77:09:ca:e6:5e:11:fd:a2:0b:80:9f:f4:fb:8e:f6:4c:
         4b:7b:18:eb:70:a4:c7:4a:26:cb:8a:06:b1:2c:3d:7d:e0:cb:
         87:c7:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 23:35:51 2025 by rpki-client