Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/adYOHtCL2NlFJfwc44eImlY_Qnk.roa
File:                     adYOHtCL2NlFJfwc44eImlY_Qnk.roa (raw, json)
Hash identifier:          f73lldAFZ2u8CGntQ5Kzn+RMQ8pIrT0pmGoxW4l0Lw0=
Subject key identifier:   69:D6:0E:1E:D0:8B:D8:D9:45:25:FC:1C:E3:87:88:9A:56:3F:42:79
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       06CE
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/adYOHtCL2NlFJfwc44eImlY_Qnk.roa
Signing time:             Fri 22 Aug 2025 08:48:57 +0000
ROA not before:           Fri 22 Aug 2025 08:48:57 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38136
IP address blocks:        103.156.184.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1742 (0x6ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Aug 22 08:48:57 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=69D60E1ED08BD8D94525FC1CE387889A563F4279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:77:cd:81:7a:8e:65:56:7f:a9:ba:d5:6e:
                    70:fc:fe:1c:07:56:62:53:0e:e4:07:59:4b:92:4e:
                    68:fd:4f:4b:7e:f5:25:88:e2:68:a1:63:3a:9e:02:
                    a8:fe:1c:19:08:ab:d6:89:a5:de:bf:d8:c4:ff:1c:
                    75:35:0a:e3:d5:64:2e:e7:24:c7:8f:06:37:f4:6e:
                    7a:52:15:e0:4e:7f:64:9e:b0:15:e4:58:2b:6b:83:
                    54:d9:3c:3e:a7:66:91:5c:5b:5b:aa:90:32:60:54:
                    5f:7f:d1:25:3f:0e:8b:47:62:a8:47:6a:c3:66:4f:
                    72:2f:c8:d5:03:6e:d1:f7:da:d3:e9:95:de:de:f6:
                    68:ef:fd:f7:47:46:b5:ce:7d:a7:ae:d0:27:2e:e2:
                    41:71:cc:88:0e:57:4e:9e:95:e3:36:6b:2f:a4:ad:
                    d0:88:e6:1a:24:e3:b6:3e:be:9f:cd:f8:68:78:1f:
                    b8:73:59:30:50:1a:c5:37:3f:a2:85:d7:ca:c7:25:
                    b0:73:85:d4:c8:30:28:bb:bb:b4:27:36:cd:77:97:
                    6d:dc:e4:dd:7f:cf:4f:51:88:a2:9c:c7:1c:2c:9b:
                    a7:7c:bd:d2:b8:b4:d5:14:94:ca:9e:52:8f:17:13:
                    45:0e:44:c1:70:5f:62:7b:51:5c:67:72:d8:86:16:
                    0f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D6:0E:1E:D0:8B:D8:D9:45:25:FC:1C:E3:87:88:9A:56:3F:42:79
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/adYOHtCL2NlFJfwc44eImlY_Qnk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:a5:d7:66:ae:2e:5d:92:0d:13:d1:b2:5f:c1:03:3b:2a:08:
         a2:95:cd:c4:16:fc:43:3a:ff:9b:88:f6:58:5c:d8:af:3d:f9:
         82:ad:d6:12:75:30:11:1c:7c:7b:9e:8f:8a:76:a0:6e:d8:dc:
         7a:63:3d:78:5f:f8:c0:96:4c:e7:c1:87:09:e4:07:2f:92:fa:
         1e:fd:7a:36:22:9c:af:a7:67:f2:3a:42:ac:b4:27:da:dd:d0:
         b9:3f:5a:db:5c:63:6a:02:48:42:09:d2:e2:df:f6:20:bd:df:
         eb:0b:2c:0f:ec:24:14:e7:4d:26:74:ca:97:8c:b1:13:0c:a0:
         bb:64:01:0b:78:91:c9:03:c7:7c:9a:c7:a1:ab:8a:c3:f3:c2:
         c0:0a:99:ea:6a:b1:1f:5e:20:52:bb:f3:92:17:ed:45:36:3a:
         a4:e9:50:2d:64:9e:9e:5f:e3:f4:ee:5f:c3:ee:4f:67:4b:a3:
         52:e1:9f:0f:60:64:15:6e:cf:e0:29:db:31:f8:cb:1c:79:70:
         e7:66:85:f1:b8:85:e4:c2:98:71:34:bd:db:e6:b4:72:b1:57:
         9c:e7:17:e4:ea:a7:f4:28:2d:4f:de:b0:22:e8:d9:9e:15:7a:
         b0:96:33:f2:20:ae:56:37:8f:5a:d7:c6:fa:9c:0a:35:38:5c:
         eb:9b:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:39:07 2025 by rpki-client