Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/uVpCyt4I9_4UpOaMpHsrjQ79gbU.roa
File:                     uVpCyt4I9_4UpOaMpHsrjQ79gbU.roa (raw, json)
Hash identifier:          yGxIMffw1i4AYsIFeQuwhmoHrAq22YyLYDNfD05QWqI=
Subject key identifier:   B9:5A:42:CA:DE:08:F7:FE:14:A4:E6:8C:A4:7B:2B:8D:0E:FD:81:B5
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       19FD
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/uVpCyt4I9_4UpOaMpHsrjQ79gbU.roa
Signing time:             Fri 22 Aug 2025 08:53:36 +0000
ROA not before:           Fri 22 Aug 2025 08:53:36 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4780
IP address blocks:        123.205.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Sep 2025 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6653 (0x19fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Aug 22 08:53:36 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B95A42CADE08F7FE14A4E68CA47B2B8D0EFD81B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cf:a9:ad:87:f2:a1:e3:05:b8:fd:e9:bd:51:
                    25:85:cd:0a:96:d5:68:a6:1a:c6:aa:fd:9d:f8:37:
                    36:97:6a:0f:42:84:72:d4:79:2e:07:97:99:19:61:
                    22:b4:4b:5e:dd:6d:71:d9:f5:18:3d:84:2c:cf:a0:
                    19:57:7a:e5:a4:86:2d:cc:87:5a:36:03:d3:31:31:
                    9b:19:49:8e:21:ed:25:2e:00:82:8d:6b:dd:d9:0f:
                    95:b8:29:a0:a4:20:11:d7:8d:e0:e8:4a:4d:9c:7a:
                    6a:d3:ff:aa:77:cc:70:55:6b:f6:ae:06:76:38:d8:
                    94:09:f9:6c:b3:df:8e:10:00:42:34:d4:38:95:6b:
                    53:06:1b:65:bc:ce:09:ba:a0:c4:83:38:de:8a:23:
                    57:fb:8b:d8:c9:ec:92:b4:b4:33:4c:c2:d8:85:34:
                    2c:84:a6:9f:b2:aa:47:f2:da:be:93:c5:6c:ba:54:
                    12:90:be:fc:08:e4:f4:42:35:13:d2:94:dc:6d:b6:
                    1a:b8:6d:ab:10:2e:af:9b:52:aa:40:49:02:44:bf:
                    06:cb:21:1d:5a:1f:a5:83:21:cf:f4:e4:ca:78:c6:
                    a6:a8:61:56:2a:2a:a3:7f:69:b7:20:25:c5:53:38:
                    ae:e4:90:0e:ba:43:ca:dd:3f:47:a1:34:04:c4:c6:
                    f8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5A:42:CA:DE:08:F7:FE:14:A4:E6:8C:A4:7B:2B:8D:0E:FD:81:B5
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/uVpCyt4I9_4UpOaMpHsrjQ79gbU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.205.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:d0:bc:9c:5c:78:e4:12:ad:a5:ff:ef:d2:53:d5:99:58:e9:
         f0:1e:c4:83:4d:80:4a:ad:21:d5:2e:ee:ea:b2:cd:ab:0e:b6:
         41:1f:09:92:4a:d5:a1:24:e8:ab:a7:c6:1a:c7:15:7e:68:75:
         b4:71:59:90:a1:7e:c9:9a:b4:fb:98:ed:a5:c3:03:18:5d:49:
         39:1e:9e:2a:b8:74:5c:fb:1c:ac:40:60:7b:9f:c1:0c:c6:46:
         7d:12:9c:55:89:41:42:6e:bb:7b:2b:c3:2d:6d:81:18:e7:12:
         12:09:8e:a0:2b:e9:21:64:01:3f:f6:21:c7:2b:eb:bb:66:eb:
         d7:7a:b3:19:b1:6e:5f:9f:6b:e0:f1:23:d5:4d:aa:ba:81:24:
         bf:73:a9:44:2c:e1:96:c8:c9:56:11:d3:15:fa:cd:1e:c6:93:
         75:6c:d8:97:b4:06:b7:fd:38:89:db:3b:1d:2d:a2:d9:14:16:
         b2:9c:78:07:26:26:3c:2d:4e:ab:6c:e9:cf:5b:3b:d4:b2:dc:
         04:19:b5:7c:da:c3:8e:a4:70:6c:f0:db:c3:85:cf:ed:6e:4d:
         06:db:f3:fa:34:1c:b1:c1:c3:b3:b9:80:d0:b3:d6:ed:8a:8a:
         03:2f:c3:b7:86:6e:c3:b1:f4:66:06:59:bd:53:31:9a:45:36:
         4b:ff:39:84
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICGf0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw
ODUzMzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI5NUE0MkNBREUwOEY3
RkUxNEE0RTY4Q0E0N0IyQjhEMEVGRDgxQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8z6mth/Kh4wW4/em9USWFzQqW1WimGsaq/Z34NzaXag9ChHLU
eS4Hl5kZYSK0S17dbXHZ9Rg9hCzPoBlXeuWkhi3Mh1o2A9MxMZsZSY4h7SUuAIKN
a93ZD5W4KaCkIBHXjeDoSk2cemrT/6p3zHBVa/auBnY42JQJ+Wyz344QAEI01DiV
a1MGG2W8zgm6oMSDON6KI1f7i9jJ7JK0tDNMwtiFNCyEpp+yqkfy2r6TxWy6VBKQ
vvwI5PRCNRPSlNxtthq4basQLq+bUqpASQJEvwbLIR1aH6WDIc/05Mp4xqaoYVYq
KqN/abcgJcVTOK7kkA66Q8rdP0ehNATExviXAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUuVpCyt4I9/4UpOaMpHsrjQ79gbUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvdVZwQ3l0NEk5XzRVcE9hTXBIc3Jq
UTc5Z2JVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHvNDzAN
BgkqhkiG9w0BAQsFAAOCAQEAKdC8nFx45BKtpf/v0lPVmVjp8B7Eg02ASq0h1S7u
6rLNqw62QR8JkkrVoSToq6fGGscVfmh1tHFZkKF+yZq0+5jtpcMDGF1JOR6eKrh0
XPscrEBge5/BDMZGfRKcVYlBQm67eyvDLW2BGOcSEgmOoCvpIWQBP/Yhxyvru2br
13qzGbFuX59r4PEj1U2quoEkv3OpRCzhlsjJVhHTFfrNHsaTdWzYl7QGt/04ids7
HS2i2RQWspx4ByYmPC1Oq2zpz1s71LLcBBm1fNrDjqRwbPDbw4XP7W5NBtvz+jQc
scHDs7mA0LPW7YqKAy/Dt4Zuw7H0ZgZZvVMxmkU2S/85hA==
-----END CERTIFICATE-----
Generated at Sat Sep 6 12:07:53 2025 by rpki-client