Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/9WgQpP1wrJ9wA9mp83koHm4BsgM.roa
File:                     9WgQpP1wrJ9wA9mp83koHm4BsgM.roa (raw, json)
Hash identifier:          y1R7AUL8gv7ldnMZ4sX617boh1ILoGmoEuwif1KXvdk=
Subject key identifier:   F5:68:10:A4:FD:70:AC:9F:70:03:D9:A9:F3:79:28:1E:6E:01:B2:03
Certificate issuer:       /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Certificate serial:       04D8
Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/9WgQpP1wrJ9wA9mp83koHm4BsgM.roa
Signing time:             Fri 22 Aug 2025 08:50:41 +0000
ROA not before:           Fri 22 Aug 2025 08:50:41 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38855
IP address blocks:        160.30.78.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 17:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240 (0x4d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
        Validity
            Not Before: Aug 22 08:50:41 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F56810A4FD70AC9F7003D9A9F379281E6E01B203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:63:6b:8b:67:ce:e9:58:54:0a:47:07:e8:
                    62:c1:f7:fb:1d:0f:be:70:2e:66:18:5a:3d:43:de:
                    9d:1a:09:e6:8b:52:03:fe:e6:5c:fd:e7:17:ac:b4:
                    10:c2:7d:36:a8:82:a3:f9:29:cc:6e:51:d6:d0:e8:
                    ea:e7:dc:57:37:0f:21:8f:41:36:07:db:f9:0e:1e:
                    21:68:d3:b3:60:69:36:6b:ae:00:31:41:fe:0f:ec:
                    71:ae:1a:b2:10:f5:e9:22:93:e7:4e:39:0b:3e:89:
                    e3:24:a8:ce:f8:77:61:cf:e5:28:68:50:c8:a7:76:
                    11:c4:c8:af:65:b6:2c:f4:2d:58:9b:98:e6:5d:6d:
                    ba:5a:9c:81:1b:8c:7a:fb:87:38:48:ce:58:83:c6:
                    94:ea:ec:bb:5b:53:7a:76:aa:6b:d7:91:73:1e:5b:
                    1f:ae:6f:ee:6b:ad:84:f2:8b:d2:cc:3c:31:3f:9d:
                    cc:bd:08:9e:fb:15:cc:45:23:b3:b2:8e:af:eb:59:
                    26:1e:23:a6:09:de:c9:9f:36:1f:84:50:b9:ae:7c:
                    71:00:aa:c1:62:19:12:6a:9a:22:f2:a6:a0:3e:7f:
                    39:46:ed:fd:82:b0:ee:08:bc:f6:3b:4f:fe:61:bc:
                    a3:30:c1:c9:f1:1f:fc:99:d7:c3:31:4a:48:ba:e2:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:68:10:A4:FD:70:AC:9F:70:03:D9:A9:F3:79:28:1E:6E:01:B2:03
            X509v3 Authority Key Identifier:
                keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/9WgQpP1wrJ9wA9mp83koHm4BsgM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:d8:6d:18:59:80:b9:26:0d:77:80:c6:e1:d1:1f:85:c7:27:
         25:49:e2:68:68:84:7f:bb:8b:7c:79:90:51:f8:4c:ae:61:9f:
         d1:1d:cf:d0:5d:44:8f:a1:4f:c0:f3:15:25:30:ca:f7:de:8b:
         25:c1:b2:d7:04:ff:66:97:4f:73:7f:ba:41:ec:2f:f1:2d:0f:
         c0:36:c5:e3:d1:db:f8:66:7c:03:fe:49:35:6e:21:8f:eb:bf:
         e8:48:55:70:5a:23:2c:ec:b7:39:7f:82:f0:29:f2:7d:05:3c:
         dc:08:8f:7c:ec:e4:1b:e4:6d:1c:3f:1c:76:d1:39:78:d1:99:
         bb:bf:b2:2f:23:1e:c8:ce:ba:f4:56:03:59:30:22:31:ea:f5:
         7e:70:6e:3c:1c:17:7f:1b:ca:d5:51:01:a6:69:07:53:ba:b6:
         31:a2:24:e1:97:73:ed:9c:2f:b2:3f:b9:73:e5:a0:06:d3:f6:
         94:25:22:89:37:5c:c0:04:29:c7:6f:c6:94:18:0e:08:f8:fa:
         16:9b:99:a3:f8:13:29:1b:a9:b2:1e:4e:67:3b:51:5b:2f:c5:
         c9:d7:5d:8c:fb:5a:57:7a:e5:22:1c:cc:c7:2e:15:75:61:1d:
         dc:e1:2d:cf:52:42:d5:c5:93:75:32:6d:49:63:bd:7b:17:89:
         09:21:52:33
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDRG
OERDRjY2QjI1QjcxOTA1NkQxRUQ2NUMxNkVBOTI1N0U1NTUzRDAeFw0yNTA4MjIw
ODUwNDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY1NjgxMEE0RkQ3MEFD
OUY3MDAzRDlBOUYzNzkyODFFNkUwMUIyMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvw2Nri2fO6VhUCkcH6GLB9/sdD75wLmYYWj1D3p0aCeaLUgP+
5lz95xestBDCfTaogqP5KcxuUdbQ6Orn3Fc3DyGPQTYH2/kOHiFo07NgaTZrrgAx
Qf4P7HGuGrIQ9ekik+dOOQs+ieMkqM74d2HP5ShoUMindhHEyK9ltiz0LVibmOZd
bbpanIEbjHr7hzhIzliDxpTq7LtbU3p2qmvXkXMeWx+ub+5rrYTyi9LMPDE/ncy9
CJ77FcxFI7Oyjq/rWSYeI6YJ3smfNh+EULmufHEAqsFiGRJqmiLypqA+fzlG7f2C
sO4IvPY7T/5hvKMwwcnxH/yZ18MxSki64ty/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU9WgQpP1wrJ9wA9mp83koHm4BsgMwHwYDVR0jBBgwFoAURPjc9msltxkFbR7W
XBbqklflVT0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVJRE9V
L1JQamM5bXNsdHhrRmJSN1dYQmJxa2xmbFZUMC5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvUlBqYzltc2x0eGtGYlI3V1hCYnFrbGZsVlQwLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVJRE9VLzlXZ1FwUDF3cko5d0E5bXA4
M2tvSG00QnNnTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg
Hk4wDQYJKoZIhvcNAQELBQADggEBABTYbRhZgLkmDXeAxuHRH4XHJyVJ4mhohH+7
i3x5kFH4TK5hn9Edz9BdRI+hT8DzFSUwyvfeiyXBstcE/2aXT3N/ukHsL/EtD8A2
xePR2/hmfAP+STVuIY/rv+hIVXBaIyzstzl/gvAp8n0FPNwIj3zs5BvkbRw/HHbR
OXjRmbu/si8jHsjOuvRWA1kwIjHq9X5wbjwcF38bytVRAaZpB1O6tjGiJOGXc+2c
L7I/uXPloAbT9pQlIok3XMAEKcdvxpQYDgj4+habmaP4EykbqbIeTmc7UVsvxcnX
XYz7Wld65SIczMcuFXVhHdzhLc9SQtXFk3UybUljvXsXiQkhUjM=
-----END CERTIFICATE-----
Generated at Sun Aug 24 13:52:12 2025 by rpki-client