Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/6U2F1T0apyKE_s6KjVTtn1ngCPM.roa
File:                     6U2F1T0apyKE_s6KjVTtn1ngCPM.roa (raw, json)
Hash identifier:          T6Wekowtjx5HTVqLi5LQgaYJZqcoVmMpZasCEkrrxIw=
Subject key identifier:   E9:4D:85:D5:3D:1A:A7:22:84:FE:CE:8A:8D:54:ED:9F:59:E0:08:F3
Certificate issuer:       /CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
Certificate serial:       DA
Authority key identifier: 1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/6U2F1T0apyKE_s6KjVTtn1ngCPM.roa
Signing time:             Mon 10 Feb 2025 14:22:29 +0000
ROA not before:           Mon 10 Feb 2025 14:22:29 +0000
ROA not after:            Fri 26 Dec 2025 15:30:27 +0000
asID:                     152619
IP address blocks:        2401:e3e0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
        Validity
            Not Before: Feb 10 14:22:29 2025 GMT
            Not After : Dec 26 15:30:27 2025 GMT
        Subject: CN=E94D85D53D1AA72284FECE8A8D54ED9F59E008F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:ff:e8:5b:5d:39:90:ad:b5:05:a2:b3:77:
                    55:55:4f:ad:3a:af:20:7f:c4:04:18:35:ac:18:41:
                    bf:22:6b:5f:b8:67:d9:31:d7:5d:59:29:45:ce:25:
                    fc:f2:75:19:2e:76:d0:25:93:7d:8e:91:de:31:24:
                    f7:41:10:86:d5:ec:cd:9f:3a:cc:27:10:90:8b:91:
                    81:69:f7:17:95:12:07:0a:dc:f3:9b:15:77:43:f0:
                    8a:4e:86:bc:be:d4:4b:51:dd:ea:a4:a1:1c:32:fb:
                    3d:1f:ea:1b:7d:92:20:e1:c4:a3:05:25:28:90:de:
                    84:6a:44:44:3e:c2:12:ba:f9:ed:87:5a:45:ac:98:
                    25:fc:2f:8f:8d:14:bb:56:61:0e:de:78:01:8a:f9:
                    8b:94:9c:e2:96:9d:db:57:4c:79:23:7c:70:97:36:
                    85:54:6a:7a:cb:c6:34:92:40:7f:9b:9d:85:47:a3:
                    22:93:24:0a:75:dc:e3:ce:41:ae:ee:98:70:34:c9:
                    fa:0b:6b:97:6d:35:9b:1e:a3:7e:1d:eb:1c:10:48:
                    ba:5e:a8:5d:08:40:5e:a9:37:7c:99:1a:37:82:0f:
                    e5:f4:b6:86:df:e7:d9:eb:17:94:f5:e8:80:08:42:
                    d2:0f:e3:13:a0:0f:25:9f:fb:d9:e4:72:d1:d1:05:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4D:85:D5:3D:1A:A7:22:84:FE:CE:8A:8D:54:ED:9F:59:E0:08:F3
            X509v3 Authority Key Identifier:
                keyid:1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/6U2F1T0apyKE_s6KjVTtn1ngCPM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e3e0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:97:75:1f:38:4b:f3:76:41:c5:1a:7d:53:a1:56:54:64:28:
         bd:bd:1b:c2:7f:c3:70:dc:ed:47:53:27:71:2f:92:a9:c6:cb:
         32:7f:06:2a:7f:8d:cf:54:37:b8:81:12:de:fb:e4:7c:c3:3a:
         d0:9f:47:31:77:2c:70:de:e2:08:60:82:7d:68:f3:64:66:f6:
         91:ff:1e:36:49:04:af:a9:75:11:27:01:44:86:c8:e3:89:0f:
         7b:bf:60:f2:cb:0d:10:96:80:d4:63:8c:bd:aa:cd:6a:2a:ed:
         4d:39:81:ad:fe:61:69:5d:76:06:97:11:a1:6e:da:24:7b:c5:
         91:c0:80:3b:95:9e:03:f8:9f:6c:eb:32:86:d0:3e:c8:5d:36:
         b9:e6:59:6c:91:85:d0:17:c5:d3:ce:55:c2:d6:aa:fd:70:98:
         44:36:44:76:ee:47:98:67:a1:e9:b4:0b:80:f0:33:dc:d0:b9:
         69:eb:a0:1e:96:aa:09:0f:59:41:f7:75:89:97:cd:76:a3:4d:
         3e:aa:8b:28:10:69:41:d1:ec:5d:3a:cd:aa:fe:66:b6:63:0e:
         03:46:e2:d6:a8:12:db:b2:47:0a:cf:3a:00:87:c3:7c:ac:d0:
         77:df:06:fd:5e:b9:99:11:9c:5b:b5:93:37:02:1e:6e:5d:d7:
         ea:5a:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:48:18 2025 by rpki-client