Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/FQFhDA9IpwNNdwpBWMBqHTA_X7o.roa
File:                     FQFhDA9IpwNNdwpBWMBqHTA_X7o.roa (raw, json)
Hash identifier:          Wrr1CWl7pCrH8gmngMJSBQAgXxpuMm4Xbv/b5bIlhvw=
Subject key identifier:   15:01:61:0C:0F:48:A7:03:4D:77:0A:41:58:C0:6A:1D:30:3F:5F:BA
Certificate issuer:       /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Certificate serial:       04DA
Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/FQFhDA9IpwNNdwpBWMBqHTA_X7o.roa
Signing time:             Fri 22 Aug 2025 08:50:41 +0000
ROA not before:           Fri 22 Aug 2025 08:50:41 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131657
IP address blocks:        160.30.78.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 17:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
        Validity
            Not Before: Aug 22 08:50:41 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=1501610C0F48A7034D770A4158C06A1D303F5FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:26:b2:5e:bc:91:ea:5d:93:62:bb:c1:9f:
                    ea:31:fc:24:03:d7:2f:d7:dc:1b:77:2b:95:f7:17:
                    27:a2:62:e2:b2:7d:46:f2:31:df:77:db:e2:23:94:
                    f9:96:73:5e:56:3c:d2:97:79:bb:05:50:bc:05:7b:
                    e4:80:b5:7b:d4:fe:e6:38:ec:a4:03:0f:ac:3b:e7:
                    82:e8:ad:7e:85:77:2c:9b:1a:c0:22:4c:d7:b6:5c:
                    ca:26:76:6f:7c:48:be:09:65:16:be:11:b8:d8:4a:
                    a4:4e:a1:6a:34:30:59:2e:23:85:28:8a:44:b0:6e:
                    f8:74:c4:57:1c:4a:95:e7:f6:ce:31:9c:54:c7:fb:
                    51:57:a4:ed:2b:90:df:16:1c:55:c4:3f:4b:ac:ed:
                    0b:7a:6c:11:bf:64:d0:d7:f1:3e:97:c4:66:3f:b0:
                    b0:b0:ea:04:c8:18:18:c8:ea:00:bb:1d:08:4b:f3:
                    8c:46:c0:05:b9:a8:81:44:60:c8:81:86:0d:81:ef:
                    76:26:3c:74:95:f2:dc:59:a2:38:1b:8c:42:04:47:
                    e9:bf:22:91:03:4f:0e:50:d8:14:e2:21:4e:6b:98:
                    ab:98:a9:8f:a7:6f:8c:fd:ca:90:7e:24:da:33:ad:
                    33:b5:e4:31:c5:71:7f:b4:69:36:91:54:3b:d9:ae:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:01:61:0C:0F:48:A7:03:4D:77:0A:41:58:C0:6A:1D:30:3F:5F:BA
            X509v3 Authority Key Identifier:
                keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/FQFhDA9IpwNNdwpBWMBqHTA_X7o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:0b:c1:35:b7:cb:c5:33:84:d7:b6:41:8a:f1:e1:63:de:06:
         5d:9d:e4:ee:cb:77:e9:95:aa:d1:0b:4b:d5:ed:e3:93:e5:36:
         4c:aa:f9:c0:77:87:cd:49:30:39:60:3d:57:f3:62:b2:1c:1c:
         fd:94:97:ba:01:1f:55:ad:43:73:c7:04:e1:e5:59:bf:db:03:
         71:98:65:90:18:d5:ec:db:b6:3c:38:24:35:e4:a2:93:b7:77:
         f6:5e:ab:9e:07:9e:59:3d:dc:22:29:f1:e0:82:ea:c3:7e:9f:
         f1:cf:c1:81:7b:82:b3:70:b2:bf:1a:d9:45:ca:cf:1d:ad:67:
         a2:b6:3d:ff:74:4d:e9:fb:b2:5e:c7:73:18:ab:ca:bb:87:57:
         41:0e:42:5b:b7:ab:9f:e4:bd:37:24:63:c4:72:35:d1:f6:f0:
         a0:d9:4c:cb:d0:b6:6c:71:36:3f:7f:18:81:0d:0c:30:82:8d:
         61:eb:f3:3e:5d:60:ca:cb:4e:65:67:7a:c5:c5:d5:3d:94:c0:
         19:84:99:7f:8b:48:d9:97:60:01:51:c0:c0:b1:c6:e0:5f:89:
         44:a1:b0:5f:97:2d:40:d9:8e:ac:a2:ec:54:13:b6:51:06:3d:
         30:be:dc:5d:91:80:fc:46:99:4a:f6:97:a6:2e:4d:0f:8d:b9:
         0b:c2:19:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 15:25:05 2025 by rpki-client