Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/RRz8zBTeTtzhgXwh88zwIykyjn0.roa
File:                     RRz8zBTeTtzhgXwh88zwIykyjn0.roa (raw, json)
Hash identifier:          BFRVmin0jBbDlqOd7/xyhYXkaX9b+Zd7gGqY/LWarOo=
Subject key identifier:   45:1C:FC:CC:14:DE:4E:DC:E1:81:7C:21:F3:CC:F0:23:29:32:8E:7D
Certificate issuer:       /CN=6E6B044FF35B9831131F39B8304FE8CAFDE39909
Certificate serial:       0D
Authority key identifier: 6E:6B:04:4F:F3:5B:98:31:13:1F:39:B8:30:4F:E8:CA:FD:E3:99:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bmsET_NbmDETHzm4ME_oyv3jmQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/RRz8zBTeTtzhgXwh88zwIykyjn0.roa
Signing time:             Sat 01 Nov 2025 09:23:17 +0000
ROA not before:           Sat 01 Nov 2025 09:23:17 +0000
ROA not after:            Wed 09 Sep 2026 15:30:29 +0000
asID:                     18186
IP address blocks:        122.50.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/bmsET_NbmDETHzm4ME_oyv3jmQk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/bmsET_NbmDETHzm4ME_oyv3jmQk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/bmsET_NbmDETHzm4ME_oyv3jmQk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 05:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6B044FF35B9831131F39B8304FE8CAFDE39909
        Validity
            Not Before: Nov  1 09:23:17 2025 GMT
            Not After : Sep  9 15:30:29 2026 GMT
        Subject: CN=451CFCCC14DE4EDCE1817C21F3CCF02329328E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:67:e7:d7:c2:54:0e:dd:4f:76:af:9c:3b:
                    6a:c7:87:b4:ac:f7:d8:cb:cf:db:96:ea:83:5c:4b:
                    7d:9c:ca:3b:39:12:fe:65:2e:64:91:48:28:23:76:
                    cb:99:a5:a8:45:6a:bb:f2:ad:9f:ed:cd:2d:aa:ff:
                    57:48:58:f2:b9:ff:8b:cf:33:5d:27:96:fc:8c:43:
                    a9:ed:f9:31:a1:86:42:d9:6e:f9:93:6d:ad:dc:8e:
                    be:3e:1a:a3:0b:6c:d5:16:f5:d7:cb:1a:01:c8:b7:
                    62:e0:4a:dd:98:87:73:cd:e3:41:10:81:96:89:91:
                    ef:82:9b:98:af:57:b8:c3:5f:1c:cf:4a:d4:35:ea:
                    9f:90:46:b7:e0:d9:c5:cc:6c:3e:1a:fd:b9:a1:f3:
                    f3:64:c6:23:8a:ac:42:93:35:a5:d7:04:30:50:f5:
                    19:77:ae:c4:5c:84:50:f2:66:8a:79:6a:be:f8:10:
                    94:3d:8b:53:71:81:15:91:28:65:65:db:83:f4:ee:
                    f4:e2:7e:df:20:0d:bc:69:6a:44:81:9d:35:ff:ba:
                    cb:6c:9d:bd:1a:28:46:1f:61:77:57:15:75:96:8f:
                    c5:af:b9:2e:08:8e:82:a3:35:cd:e7:5c:17:79:71:
                    9c:0b:9d:0d:3c:64:41:a5:d9:16:41:62:39:bd:a0:
                    3e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1C:FC:CC:14:DE:4E:DC:E1:81:7C:21:F3:CC:F0:23:29:32:8E:7D
            X509v3 Authority Key Identifier:
                keyid:6E:6B:04:4F:F3:5B:98:31:13:1F:39:B8:30:4F:E8:CA:FD:E3:99:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/bmsET_NbmDETHzm4ME_oyv3jmQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bmsET_NbmDETHzm4ME_oyv3jmQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/RRz8zBTeTtzhgXwh88zwIykyjn0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.50.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:fc:27:49:ef:92:e7:13:d1:95:10:77:85:b0:07:b4:98:ea:
         a4:f5:e8:f9:e2:03:7a:ca:66:45:2f:b7:46:6c:d8:cb:20:9a:
         61:88:c9:dc:fd:0e:49:df:e0:29:20:be:36:db:4d:88:de:4e:
         37:d0:8a:26:3b:a4:f8:e0:65:d0:a6:92:4a:97:0c:79:43:d3:
         8e:78:ae:51:61:0a:78:0b:41:80:78:e1:50:da:2d:d6:e5:1c:
         b4:14:d3:a1:dd:ce:f6:c5:4b:be:4e:61:90:58:cf:60:61:99:
         a3:fc:5e:96:18:d3:7a:82:1f:02:12:46:ec:14:d4:e1:8e:c9:
         45:cc:65:1d:46:bc:28:2c:0b:a3:4a:7f:7c:e8:0b:f7:1c:2d:
         fc:34:25:a4:02:a3:e3:fe:b8:e0:0c:a2:cd:69:0d:65:21:02:
         2b:17:5d:9e:4f:96:06:8d:fe:ff:52:35:6a:98:aa:d9:29:72:
         38:11:71:83:82:30:a2:00:f0:ba:60:5a:88:93:c1:9d:b6:e0:
         fc:12:2b:5c:5c:83:76:b1:e1:12:a8:2a:62:2c:a7:b4:fe:15:
         44:c6:9b:93:e2:6a:28:4e:19:2c:3f:9e:73:ab:e0:94:d0:bb:
         d2:00:f8:82:1d:43:3b:b5:ee:02:85:c3:80:bc:dc:d2:d5:c5:
         f3:3c:6e:25
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RTZC
MDQ0RkYzNUI5ODMxMTMxRjM5QjgzMDRGRThDQUZERTM5OTA5MB4XDTI1MTEwMTA5
MjMxN1oXDTI2MDkwOTE1MzAyOVowMzExMC8GA1UEAxMoNDUxQ0ZDQ0MxNERFNEVE
Q0UxODE3QzIxRjNDQ0YwMjMyOTMyOEU3RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKGZZ+fXwlQO3U92r5w7aseHtKz32MvP25bqg1xLfZzKOzkS/mUu
ZJFIKCN2y5mlqEVqu/Ktn+3NLar/V0hY8rn/i88zXSeW/IxDqe35MaGGQtlu+ZNt
rdyOvj4aowts1Rb118saAci3YuBK3ZiHc83jQRCBlomR74KbmK9XuMNfHM9K1DXq
n5BGt+DZxcxsPhr9uaHz82TGI4qsQpM1pdcEMFD1GXeuxFyEUPJminlqvvgQlD2L
U3GBFZEoZWXbg/Tu9OJ+3yANvGlqRIGdNf+6y2ydvRooRh9hd1cVdZaPxa+5LgiO
gqM1zedcF3lxnAudDTxkQaXZFkFiOb2gPl0CAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBRFHPzMFN5O3OGBfCHzzPAjKTKOfTAfBgNVHSMEGDAWgBRuawRP81uYMRMfObgw
T+jK/eOZCTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT
oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQVJORVJM
SU5LL2Jtc0VUX05ibURFVEh6bTRNRV9veXYzam1Ray5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvYm1zRVRfTmJtREVUSHptNE1FX295djNqbVFrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FSTkVSTElOSy9SUno4ekJUZVR0
emhnWHdoODh6d0l5a3lqbjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu
dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBejIMMA0GCSqGSIb3DQEBCwUAA4IBAQCr/CdJ75LnE9GVEHeFsAe0mOqk
9ej54gN6ymZFL7dGbNjLIJphiMnc/Q5J3+ApIL42202I3k430IomO6T44GXQppJK
lwx5Q9OOeK5RYQp4C0GAeOFQ2i3W5Ry0FNOh3c72xUu+TmGQWM9gYZmj/F6WGNN6
gh8CEkbsFNThjslFzGUdRrwoLAujSn986Av3HC38NCWkAqPj/rjgDKLNaQ1lIQIr
F12eT5YGjf7/UjVqmKrZKXI4EXGDgjCiAPC6YFqIk8GdtuD8EitcXIN2seESqCpi
LKe0/hVExpuT4mooThksP55zq+CU0LvSAPiCHUM7te4ChcOAvNzS1cXzPG4l
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:40:45 2025 by rpki-client