Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/zfayHcgNurTW1lxTJV5lI9J4CH8.roa
File:                     zfayHcgNurTW1lxTJV5lI9J4CH8.roa (raw, json)
Hash identifier:          FZZQPjaM8iguKhnA/HYnTxikPBer2DkTuQGG/OA4RRI=
Subject key identifier:   CD:F6:B2:1D:C8:0D:BA:B4:D6:D6:5C:53:25:5E:65:23:D2:78:08:7F
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       1A44
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zfayHcgNurTW1lxTJV5lI9J4CH8.roa
Signing time:             Fri 22 Aug 2025 08:53:54 +0000
ROA not before:           Fri 22 Aug 2025 08:53:54 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4780
IP address blocks:        61.56.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Sep 2025 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6724 (0x1a44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Aug 22 08:53:54 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=CDF6B21DC80DBAB4D6D65C53255E6523D278087F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a4:e0:46:13:c5:86:9b:b0:bb:ab:5e:fe:30:
                    35:6f:2c:b2:d3:98:8e:9e:b6:47:90:ca:24:bc:47:
                    40:62:e1:12:f9:65:9e:f9:1d:29:e4:95:28:59:d2:
                    0d:0b:82:8c:e6:3c:50:12:ce:76:27:aa:a1:3c:4a:
                    b9:c3:ef:31:72:74:ad:90:20:24:e5:b7:71:59:dc:
                    8f:7a:38:1a:b1:bf:ba:5a:3f:5d:05:1f:f0:14:96:
                    39:12:a5:70:79:f7:2c:32:c4:2e:f0:f0:92:67:50:
                    c7:8c:1d:2c:48:a2:1b:ef:5e:88:0a:16:6a:be:b2:
                    3a:b8:31:77:b8:22:12:9e:a9:5d:ce:b6:f2:53:6b:
                    df:56:04:4b:45:d1:5d:23:a7:35:0d:e6:01:d1:6e:
                    bf:95:a9:87:ea:f9:e8:c9:2e:56:9d:0c:36:71:c5:
                    b8:d9:35:c4:e7:a3:9e:3e:74:50:47:93:24:7c:bc:
                    1f:79:a1:5c:9c:76:d9:66:35:ea:c7:64:f3:6f:cd:
                    9f:9f:d6:14:91:a4:dd:40:c1:49:28:96:00:06:a0:
                    bf:07:9e:31:ad:29:e7:11:36:c8:74:d3:f7:d1:9e:
                    d6:6d:89:38:0f:27:14:5c:06:a7:64:ac:fa:ac:cb:
                    b4:24:26:ae:52:34:30:3a:f3:5b:c2:8b:80:6d:37:
                    e1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F6:B2:1D:C8:0D:BA:B4:D6:D6:5C:53:25:5E:65:23:D2:78:08:7F
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zfayHcgNurTW1lxTJV5lI9J4CH8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:58:14:80:62:88:de:fe:17:5b:9c:6c:0f:f8:2a:f1:27:53:
         31:83:23:75:7c:c7:3b:5e:e3:98:98:d1:32:5a:68:ce:63:ee:
         c3:9a:e8:54:0a:b0:60:12:4f:1e:87:54:64:a9:bd:17:14:b5:
         de:42:50:fa:47:ea:5d:52:d8:29:e0:1d:46:f1:85:1a:a8:eb:
         01:90:ff:cd:92:51:f5:5f:26:59:a2:37:8e:5b:9e:8b:e7:03:
         ce:43:1b:2e:28:6b:39:56:59:f4:b6:2a:84:a1:2b:95:a7:bb:
         aa:51:8c:cc:7e:9a:96:81:42:1a:f2:a9:24:03:b3:47:2d:a9:
         87:4f:b5:72:26:4b:55:b3:c7:d4:fb:f3:7d:b9:1e:4b:33:21:
         d0:39:a5:12:21:f3:b4:3f:ba:da:97:fc:55:aa:e2:97:80:5d:
         93:3f:26:e4:77:9c:d5:83:2e:1a:84:d8:1a:b2:f6:c2:98:d4:
         b8:25:4d:83:ae:86:ee:50:5a:74:4e:7f:45:25:fb:42:4b:27:
         c4:44:9f:b7:92:4b:92:11:49:d1:a4:c4:a4:9d:be:a6:4c:f6:
         bf:5f:45:2e:2a:48:42:9b:08:d9:c7:61:7b:1e:66:18:ce:62:
         11:2a:92:38:70:7a:91:f0:60:25:e5:0b:42:6f:98:b7:ae:ad:
         f8:ed:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:16:58 2025 by rpki-client