Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/UuMobtGH66657xpgnkWDeEbIeLY.roa
File:                     UuMobtGH66657xpgnkWDeEbIeLY.roa (raw, json)
Hash identifier:          +T0jB7ejxKjIoTgN/BCSzqfzqBx14CNixyqO1WnZXFA=
Subject key identifier:   52:E3:28:6E:D1:87:EB:AE:B9:EF:1A:60:9E:45:83:78:46:C8:78:B6
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       1AC1
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UuMobtGH66657xpgnkWDeEbIeLY.roa
Signing time:             Wed 27 Aug 2025 09:19:42 +0000
ROA not before:           Wed 27 Aug 2025 09:19:42 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18049
IP address blocks:        61.61.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Sep 2025 08:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6849 (0x1ac1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Aug 27 09:19:42 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=52E3286ED187EBAEB9EF1A609E45837846C878B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ca:12:3b:90:c4:8d:8c:20:08:df:ec:00:ce:
                    2e:cc:20:5e:90:cf:b7:20:4d:59:53:ed:e8:b7:1d:
                    75:46:e8:57:7d:e4:fd:ed:e0:0d:06:d8:2d:09:02:
                    b0:0b:69:1f:0d:41:ec:88:14:e4:3d:91:43:52:1c:
                    69:b9:17:36:cc:8e:a1:69:bd:03:1e:71:fa:bb:6e:
                    75:41:2b:0e:07:71:63:c7:3f:6a:d3:de:e4:79:a2:
                    2b:9f:e9:45:8a:92:91:34:88:f8:bf:fd:fe:c6:95:
                    8f:c5:af:4d:6e:68:b0:fb:b5:47:27:4a:3a:07:79:
                    81:60:7d:b9:43:b4:e0:a9:76:fc:ca:d5:c1:47:eb:
                    bd:0f:83:92:13:72:05:d3:75:5d:04:1c:aa:e5:6d:
                    46:e4:c6:36:91:57:50:ae:80:c3:23:10:a7:3e:a5:
                    4f:6e:3c:67:be:72:46:e2:92:2a:dc:42:aa:01:12:
                    fd:73:b1:f3:df:66:93:66:a0:62:52:d9:3c:81:30:
                    d6:be:f2:d3:6f:47:c9:99:40:1d:1e:22:ee:2c:61:
                    95:65:fa:a9:7a:dc:d3:4c:a1:f5:ce:70:72:75:e2:
                    d5:bb:4e:d1:0a:d7:a7:2f:5b:e6:b0:a5:b9:d7:0a:
                    2f:75:89:65:6d:39:b2:be:b9:7f:a9:a4:2f:49:9c:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E3:28:6E:D1:87:EB:AE:B9:EF:1A:60:9E:45:83:78:46:C8:78:B6
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UuMobtGH66657xpgnkWDeEbIeLY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:61:c7:23:1e:23:d4:78:4e:62:4d:da:5b:1a:fe:06:31:71:
         9c:01:e2:89:05:72:0e:17:6a:79:c1:b3:15:3c:50:ef:9d:a7:
         ea:d4:dd:16:f1:ad:f4:cf:58:aa:b9:32:20:db:02:98:7f:9d:
         a1:48:fe:76:22:ea:d8:fc:2c:67:aa:ea:da:01:91:d1:95:23:
         40:4c:0d:d2:d3:e5:34:31:d1:3b:cc:b6:5b:a0:cc:56:ad:80:
         a3:c0:30:d5:4c:0a:1e:9c:36:34:2e:d3:65:e4:39:a8:de:8f:
         44:e5:35:fc:5b:4f:c0:b9:ab:69:d3:3a:e8:78:1c:49:3d:50:
         52:6b:31:79:19:af:df:13:d3:d4:d7:2f:2f:9e:1e:c4:1d:bf:
         c9:ad:ca:ea:c5:b4:4a:55:6c:f9:67:d1:f5:a3:2b:df:e8:cc:
         31:a4:40:b3:7f:a9:13:2a:69:8b:6c:51:a2:cb:47:a0:73:cd:
         2b:9b:3e:86:be:18:3a:5e:cf:db:bf:6e:bd:7d:60:33:cf:3e:
         87:ea:36:50:d4:14:21:68:e2:ed:93:4f:cf:b8:bd:92:ee:35:
         ea:ee:11:b6:de:20:2c:31:91:7b:74:81:a7:81:f2:4d:0e:95:
         99:c1:80:9e:dc:31:79:04:13:c9:37:4a:5c:59:c4:bf:19:ee:
         3b:f2:57:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:59:40 2025 by rpki-client