Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/VnMtCzXLOMpssRWKeP5iNUPt-ww.roa
File:                     VnMtCzXLOMpssRWKeP5iNUPt-ww.roa (raw, json)
Hash identifier:          221FrdceJwC+uld8Pgu0t2vbcS+Va88tj++a0XDzyn8=
Subject key identifier:   56:73:2D:0B:35:CB:38:CA:6C:B1:15:8A:78:FE:62:35:43:ED:FB:0C
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       1A07
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VnMtCzXLOMpssRWKeP5iNUPt-ww.roa
Signing time:             Fri 22 Aug 2025 08:53:38 +0000
ROA not before:           Fri 22 Aug 2025 08:53:38 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     198949
IP address blocks:        113.196.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Sep 2025 03:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6663 (0x1a07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Aug 22 08:53:38 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=56732D0B35CB38CA6CB1158A78FE623543EDFB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4b:a4:2f:a9:4d:00:a3:85:f0:20:55:ef:c1:
                    35:68:ae:28:3f:4f:38:ef:7d:5e:36:e3:8f:d4:ca:
                    36:64:3a:d1:e7:90:ad:50:94:1d:93:b0:37:2a:94:
                    b5:19:15:7c:e1:3c:34:28:a1:5b:35:e3:9a:7c:f6:
                    49:ac:61:47:4d:ba:3f:f6:75:ee:bb:e9:a0:04:2c:
                    97:59:24:cb:7d:14:5a:f2:23:d1:db:d9:f6:62:a2:
                    9f:db:fd:ca:40:23:a4:e6:81:0b:22:1e:2d:e1:bd:
                    c4:0e:a5:72:1b:2b:50:19:14:03:8e:ff:85:8d:27:
                    7b:da:bf:d8:61:28:79:97:70:89:00:37:cc:de:9a:
                    b4:c0:3b:13:8f:b3:f4:58:0a:97:21:7f:b3:40:c0:
                    d6:c2:92:65:aa:10:36:93:e9:a4:af:b2:4d:d6:49:
                    96:34:8b:06:00:f9:3f:55:e5:3f:53:63:fa:be:44:
                    46:35:22:3f:bd:1f:4c:dd:2d:45:b5:c4:a1:81:a5:
                    76:ce:5d:48:65:bf:7b:8e:47:60:06:a0:d8:d2:ec:
                    4b:b8:1d:32:80:a8:04:20:c3:77:7a:41:0e:67:23:
                    60:8e:7d:83:05:5d:72:db:4b:66:6c:6b:2a:0c:82:
                    d1:37:5d:60:72:8f:bb:95:b1:3d:a3:a8:6b:04:48:
                    72:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:73:2D:0B:35:CB:38:CA:6C:B1:15:8A:78:FE:62:35:43:ED:FB:0C
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VnMtCzXLOMpssRWKeP5iNUPt-ww.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.196.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:f8:41:da:b1:58:89:af:27:17:52:d8:a7:2d:9b:af:c2:0f:
         e8:99:39:80:8e:1a:6b:6f:9a:22:eb:29:f6:d6:c4:40:d0:96:
         c8:05:e3:01:e6:81:a8:15:4c:06:07:7f:13:b2:9b:66:43:10:
         1c:3e:f9:ad:20:9d:d4:74:28:b8:c1:f9:d4:5a:4e:99:a1:43:
         86:74:8a:a6:84:e6:ef:83:14:72:e9:df:8b:13:a3:41:7c:d8:
         50:cc:7e:f8:82:1f:cc:36:9d:33:93:5a:65:d2:57:c5:e2:66:
         de:e1:a2:53:f8:5b:1b:20:b3:8b:a9:63:b3:41:02:8c:dd:9c:
         40:db:c5:0c:c8:f1:c1:c5:ff:73:c3:1a:fe:bb:61:5b:c9:a8:
         92:b8:e4:58:21:9f:a0:f0:bf:50:e5:45:af:bd:77:df:38:24:
         db:f1:64:5a:33:3d:08:1f:b2:70:d4:0e:c0:82:b7:53:a6:9f:
         e6:4d:af:bb:52:38:05:94:d3:ac:28:b5:26:f4:ca:24:1d:fa:
         33:da:23:24:bd:49:e8:e2:aa:92:02:6e:0f:cd:97:2e:b3:2a:
         51:7c:3a:e4:dd:a3:da:d8:1a:35:68:92:22:07:2c:29:85:de:
         f3:cf:bd:56:dd:34:23:e9:e2:db:db:44:cb:a3:e0:d3:44:45:
         4f:c8:59:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:31:26 2025 by rpki-client