Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCSKY/F5gF5bgWJACsYcTxzNMZvMsIeAs.roa
File:                     F5gF5bgWJACsYcTxzNMZvMsIeAs.roa (raw, json)
Hash identifier:          HZ3bu8yVfokUBmUVVHCcLe+QIYBpZHcP3GKxdZVchSQ=
Subject key identifier:   17:98:05:E5:B8:16:24:00:AC:61:C4:F1:CC:D3:19:BC:CB:08:78:0B
Certificate issuer:       /CN=C096A16C283D1600BF326BCFEBC1D11D0A063D9E
Certificate serial:       0233
Authority key identifier: C0:96:A1:6C:28:3D:16:00:BF:32:6B:CF:EB:C1:D1:1D:0A:06:3D:9E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wJahbCg9FgC_MmvP68HRHQoGPZ4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/F5gF5bgWJACsYcTxzNMZvMsIeAs.roa
Signing time:             Fri 24 Oct 2025 15:56:05 +0000
ROA not before:           Fri 24 Oct 2025 15:56:05 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     63908
IP address blocks:        2401:d620::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/wJahbCg9FgC_MmvP68HRHQoGPZ4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 20:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C096A16C283D1600BF326BCFEBC1D11D0A063D9E
        Validity
            Not Before: Oct 24 15:56:05 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=179805E5B8162400AC61C4F1CCD319BCCB08780B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:60:9e:c1:81:69:95:b5:99:f0:5e:07:90:
                    93:22:6a:3f:9b:16:c9:9d:a9:e4:9a:c5:7e:14:2c:
                    c2:86:01:9f:19:c0:72:69:db:1a:61:2f:34:1e:78:
                    3a:98:15:64:59:33:26:9a:e6:4e:85:05:e9:e4:92:
                    8c:ef:cc:26:7c:7d:08:b1:3a:f6:60:1e:50:aa:6c:
                    0b:59:fa:15:1a:89:a0:c0:9d:fc:97:6f:ab:2a:fd:
                    c7:d5:16:df:90:6a:50:de:0e:75:79:c7:7b:f8:bc:
                    c9:42:07:da:92:9c:82:68:f6:71:d8:22:5f:b1:eb:
                    f5:f1:2f:cd:11:9b:7c:27:ae:5e:cb:0b:41:d2:35:
                    16:c6:a7:b8:79:1b:7f:00:7f:cd:c6:01:e7:51:2b:
                    ec:e2:dd:1f:d6:4a:04:b3:33:fd:be:b3:54:b9:fd:
                    df:dc:d4:6c:e8:8a:e7:32:a3:66:e6:0c:57:36:5c:
                    d3:fa:4e:17:38:fb:c0:64:58:ea:25:06:b5:66:f8:
                    47:f2:53:65:80:9f:22:0e:e3:3b:fb:67:23:d9:c0:
                    33:44:70:bd:d7:0e:41:c3:fb:6b:2e:da:fe:40:76:
                    0d:c8:f8:44:aa:c3:f6:e9:87:8d:e2:50:77:d1:50:
                    cc:07:95:ae:cb:8e:50:fb:49:13:4e:0a:8d:22:03:
                    0f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:98:05:E5:B8:16:24:00:AC:61:C4:F1:CC:D3:19:BC:CB:08:78:0B
            X509v3 Authority Key Identifier:
                keyid:C0:96:A1:6C:28:3D:16:00:BF:32:6B:CF:EB:C1:D1:1D:0A:06:3D:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wJahbCg9FgC_MmvP68HRHQoGPZ4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/F5gF5bgWJACsYcTxzNMZvMsIeAs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d620::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:fd:c4:bd:d0:ef:47:dc:f7:3d:c8:9c:ef:bc:fc:1c:8c:59:
         34:4b:96:6e:41:61:5a:1f:a1:db:f5:10:94:60:3e:e8:25:31:
         c6:66:7c:71:b7:ca:a9:3c:45:87:38:84:5c:3c:38:1a:a8:51:
         cf:be:ff:41:8c:ab:76:cc:2c:50:a1:9f:23:e5:d9:83:88:4f:
         a0:63:00:56:94:d6:a6:b5:05:69:61:87:da:ec:4c:92:df:08:
         4f:35:5f:d6:91:d7:2f:c6:17:e4:7e:73:d3:40:c5:5d:0c:99:
         8d:b6:e6:42:28:f8:90:ba:33:43:59:d8:8d:56:c6:fa:9a:20:
         74:1f:2c:a7:75:14:68:b3:95:d2:6e:6a:e2:94:71:48:59:44:
         02:08:c7:a7:1f:1e:40:cc:28:2e:9c:84:94:f0:a6:89:c7:22:
         b8:a6:fd:e0:ff:21:0e:af:2a:87:16:f9:8a:06:26:0d:f6:d6:
         21:93:06:45:c8:71:27:32:99:45:96:f4:92:14:62:bb:cc:e8:
         ea:32:82:fb:10:09:7c:56:1c:65:8e:b7:e6:1d:ca:a4:b5:d0:
         c8:48:ce:07:ed:c9:81:ba:e5:50:a0:8d:56:02:54:5c:fc:17:
         64:39:aa:dd:a4:e3:d4:fc:37:80:6c:d4:d0:ce:e9:45:0d:2d:
         2b:b8:88:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:09:50 2025 by rpki-client