Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/JMioOvnlX1xUP-N2URk3j_01DEg.roa
File:                     JMioOvnlX1xUP-N2URk3j_01DEg.roa (raw, json)
Hash identifier:          iV9Tz38d6HHjWC0SsnXDCjyNvGbJ4YhaGTJuMpCD//U=
Subject key identifier:   24:C8:A8:3A:F9:E5:5F:5C:54:3F:E3:76:51:19:37:8F:FD:35:0C:48
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       15B6
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/JMioOvnlX1xUP-N2URk3j_01DEg.roa
Signing time:             Tue 14 Apr 2026 07:16:31 +0000
ROA not before:           Tue 14 Apr 2026 07:16:31 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131628
IP address blocks:        175.97.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 20:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5558 (0x15b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Apr 14 07:16:31 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=24C8A83AF9E55F5C543FE3765119378FFD350C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:60:3c:7c:3e:9d:42:7a:07:26:cc:35:ef:
                    02:4b:6a:da:17:f9:d3:80:a2:e2:f9:76:dc:93:a6:
                    27:0d:bb:4b:b4:36:3e:ea:0b:60:a2:49:5e:15:8b:
                    ab:22:b9:66:10:fc:8d:b8:36:59:e1:b4:c5:38:6a:
                    03:a4:ce:96:6f:7f:4b:02:8b:94:9f:03:51:c8:a2:
                    bb:87:57:cc:7d:ba:71:43:9d:22:d3:ba:81:fc:a0:
                    1a:c4:2f:3b:47:2a:0c:62:3e:08:f7:48:bd:e1:54:
                    d2:5e:37:82:2c:37:b7:1f:20:e0:b0:ad:61:f5:c2:
                    5d:0a:96:64:48:2d:5c:3e:f1:f0:a0:a8:e7:ad:a8:
                    da:9d:73:48:dd:72:f3:9f:53:a3:a9:a5:30:41:4a:
                    7f:5d:16:ff:9e:f2:7b:23:bd:b5:12:c2:1f:9f:33:
                    fe:8f:0d:4d:d5:c7:a2:86:c8:a7:87:4c:76:63:3e:
                    c4:b6:27:ba:51:1b:58:59:a1:a3:45:29:40:bc:23:
                    80:f1:d5:73:4e:27:5c:34:5d:68:c7:6e:ac:ee:ad:
                    40:51:50:93:e0:bd:f2:a1:f5:f4:98:c0:43:d0:ad:
                    cd:d0:bf:cf:70:7d:b0:62:4b:9e:28:d0:60:85:60:
                    a7:ab:6b:bf:ee:5d:d1:b7:de:a7:3b:7c:52:a0:99:
                    0d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C8:A8:3A:F9:E5:5F:5C:54:3F:E3:76:51:19:37:8F:FD:35:0C:48
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/JMioOvnlX1xUP-N2URk3j_01DEg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.97.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:3e:91:a7:73:3e:93:15:93:8f:83:48:a0:22:0f:85:73:72:
         3b:e8:08:9a:bf:8f:64:70:39:9f:b7:ca:cb:fa:16:25:6f:4f:
         c9:26:9d:70:aa:4b:4b:fa:1f:bd:33:2e:78:d9:68:b1:00:42:
         05:83:df:23:6c:a6:24:1c:36:44:c1:25:7f:23:8b:9c:8c:b8:
         7c:40:57:f6:95:bc:4e:d7:fa:05:3f:45:e4:af:00:cb:18:66:
         ca:78:7e:a5:8b:7c:92:a7:86:6a:05:ca:14:9e:ed:45:24:94:
         88:31:ee:37:6e:b0:1c:d7:d0:f9:ad:0b:17:a5:c6:40:02:48:
         f5:1e:12:13:09:5e:cb:5e:15:07:6b:6f:d8:8a:a5:56:12:bc:
         4e:4b:b2:74:ca:d6:84:82:e6:78:da:d0:3b:09:11:e1:a2:02:
         30:d5:24:40:a4:c5:33:01:bc:bb:ab:69:c9:e4:71:3a:4f:11:
         40:e3:4b:f1:a9:e7:4b:8e:4c:b9:a6:9a:ab:bd:76:49:a5:4d:
         45:d9:78:fb:96:29:8a:78:02:c6:7a:6e:ab:6a:28:80:81:7a:
         49:05:ff:54:f7:48:8f:aa:1e:ca:4d:5f:1a:d7:b4:45:d8:d7:
         04:08:aa:39:53:54:75:36:cb:95:02:97:79:ab:77:53:ae:b2:
         24:d6:b2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:59 2026 by rpki-client