Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VOCOM/7Xuu8qN38ZRaDVWyPD4VC3ROsac.roa
File:                     7Xuu8qN38ZRaDVWyPD4VC3ROsac.roa (raw, json)
Hash identifier:          m+Lg9pUayN5/R4YgtKxLUt3Znu3pUmTAe31BYj5I5AE=
Subject key identifier:   ED:7B:AE:F2:A3:77:F1:94:5A:0D:55:B2:3C:3E:15:0B:74:4E:B1:A7
Certificate issuer:       /CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF
Certificate serial:       01C6
Authority key identifier: 9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/7Xuu8qN38ZRaDVWyPD4VC3ROsac.roa
Signing time:             Mon 10 Feb 2025 14:17:16 +0000
ROA not before:           Mon 10 Feb 2025 14:17:16 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     63897
IP address blocks:        2400:4460::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 22:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF
        Validity
            Not Before: Feb 10 14:17:16 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=ED7BAEF2A377F1945A0D55B23C3E150B744EB1A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8f:8e:b7:4b:f1:b4:c6:2f:66:eb:7d:e4:8a:
                    c0:cc:10:e7:1b:03:f0:e5:22:81:3e:0d:51:e8:7a:
                    2d:8f:eb:9d:2f:fe:e4:cd:a0:a9:66:55:30:b8:74:
                    9e:11:51:81:40:af:c6:79:4f:3f:42:8a:07:18:0e:
                    63:88:c3:8f:61:5e:89:62:bc:08:eb:8e:d6:bc:4d:
                    27:03:c6:bf:8c:9d:d9:71:8c:7e:e2:62:2d:f7:46:
                    72:09:b4:2b:6d:bf:e3:a5:99:15:b2:cd:3e:16:2f:
                    15:58:1d:b7:a1:4b:9d:08:38:c0:99:a9:67:cd:d6:
                    20:0d:41:41:85:73:31:db:06:09:84:16:d6:c2:af:
                    68:86:87:67:98:f2:7e:1a:76:1f:48:c0:6e:83:f7:
                    d6:82:58:8d:02:15:bf:01:e0:15:4c:50:03:29:bf:
                    47:64:3d:b8:f1:50:b6:d1:39:6b:fc:56:73:fe:bb:
                    e3:fb:8e:b6:d6:10:d2:1f:d7:43:23:8a:6d:7c:28:
                    7c:fa:f5:07:05:1d:d9:81:e9:0e:70:82:a2:df:3a:
                    4b:b4:34:64:f9:45:a9:b0:24:8c:f2:79:80:1e:44:
                    47:cb:29:82:f6:05:1f:d7:62:6a:8b:29:31:0f:7e:
                    c1:dd:12:cd:dd:9a:48:ef:c0:e6:10:83:80:2e:33:
                    86:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7B:AE:F2:A3:77:F1:94:5A:0D:55:B2:3C:3E:15:0B:74:4E:B1:A7
            X509v3 Authority Key Identifier:
                keyid:9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/7Xuu8qN38ZRaDVWyPD4VC3ROsac.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:4460::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:99:e8:a0:95:08:47:28:d6:1f:a8:06:36:b8:41:48:15:28:
         3e:f4:00:f9:c2:b0:83:8c:69:64:99:a2:c7:eb:e1:56:ec:e5:
         7b:a0:ee:01:53:05:eb:da:c3:f0:fe:62:9a:db:9a:58:51:d1:
         f7:ad:b5:64:95:64:c5:be:79:e7:7f:f1:04:57:f0:f2:ad:bf:
         78:d0:6b:a3:ac:e0:6b:94:07:3a:d1:fc:0b:3e:ba:be:53:ac:
         2d:b3:2d:0a:6f:35:88:bb:06:d1:c5:d9:65:59:5c:51:87:bb:
         a5:ed:47:f3:66:8e:89:b9:47:fe:1c:77:98:6e:5e:a2:f9:7e:
         10:49:e0:9c:6d:97:0b:17:80:4e:23:b1:96:68:a1:c4:e7:2f:
         a3:bf:6a:eb:be:25:43:36:3f:ce:a8:41:e3:f0:4d:46:b1:da:
         e1:09:5a:c6:a4:04:31:17:c0:b7:87:2d:b2:fc:b7:5e:21:18:
         6e:e4:7a:f1:ba:06:8a:07:34:ce:d3:76:61:61:64:78:5b:9f:
         2d:a8:30:29:22:a3:80:8f:1c:07:c4:60:3c:d4:11:06:9a:70:
         55:6c:6f:0d:6e:9f:9b:05:86:7c:1c:58:66:ed:d3:a0:97:47:
         8e:f2:ec:1d:e8:1b:cb:b8:c4:9b:e9:4d:3b:03:56:60:f4:ef:
         c0:2c:f9:18
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUU4
NDcxMDhFQkEwQjU1MEJDMDIwRkQ5QjFEQzZERUIyOUUwREJFRjAeFw0yNTAyMTAx
NDE3MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVEN0JBRUYyQTM3N0Yx
OTQ1QTBENTVCMjNDM0UxNTBCNzQ0RUIxQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRj463S/G0xi9m633kisDMEOcbA/DlIoE+DVHoei2P650v/uTN
oKlmVTC4dJ4RUYFAr8Z5Tz9CigcYDmOIw49hXolivAjrjta8TScDxr+MndlxjH7i
Yi33RnIJtCttv+OlmRWyzT4WLxVYHbehS50IOMCZqWfN1iANQUGFczHbBgmEFtbC
r2iGh2eY8n4adh9IwG6D99aCWI0CFb8B4BVMUAMpv0dkPbjxULbROWv8VnP+u+P7
jrbWENIf10Mjim18KHz69QcFHdmB6Q5wgqLfOku0NGT5RamwJIzyeYAeREfLKYL2
BR/XYmqLKTEPfsHdEs3dmkjvwOYQg4AuM4bdAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQU7Xuu8qN38ZRaDVWyPD4VC3ROsacwHwYDVR0jBBgwFoAUnoRxCOugtVC8Ag/Z
sdxt6yng2+8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVk9DT00v
bm9SeENPdWd0VkM4QWdfWnNkeHQ2eW5nMi04LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9ub1J4Q091Z3RWQzhBZ19ac2R4dDZ5bmcyLTguY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9WT0NPTS83WHV1OHFOMzhaUmFEVld5UEQ0
VkMzUk9zYWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJABE
YDANBgkqhkiG9w0BAQsFAAOCAQEAcZnooJUIRyjWH6gGNrhBSBUoPvQA+cKwg4xp
ZJmix+vhVuzle6DuAVMF69rD8P5imtuaWFHR9621ZJVkxb5553/xBFfw8q2/eNBr
o6zga5QHOtH8Cz66vlOsLbMtCm81iLsG0cXZZVlcUYe7pe1H82aOiblH/hx3mG5e
ovl+EEngnG2XCxeATiOxlmihxOcvo79q674lQzY/zqhB4/BNRrHa4QlaxqQEMRfA
t4ctsvy3XiEYbuR68boGigc0ztN2YWFkeFufLagwKSKjgI8cB8RgPNQRBppwVWxv
DW6fmwWGfBxYZu3ToJdHjvLsHegby7jEm+lNOwNWYPTvwCz5GA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:13:31 2025 by rpki-client