Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/7S7e62bEKmwRevYuUM8wpzIoIgg.roa
File:                     7S7e62bEKmwRevYuUM8wpzIoIgg.roa (raw, json)
Hash identifier:          S6yLfLdfpAiHyfEhnHNfXx2RN90/77nYlzGqQO9hQ8U=
Subject key identifier:   ED:2E:DE:EB:66:C4:2A:6C:11:7A:F6:2E:50:CF:30:A7:32:28:22:08
Certificate issuer:       /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial:       0D8E
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/7S7e62bEKmwRevYuUM8wpzIoIgg.roa
Signing time:             Fri 17 Oct 2025 02:34:06 +0000
ROA not before:           Fri 17 Oct 2025 02:34:06 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131617
IP address blocks:        103.104.148.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 17:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3470 (0xd8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
        Validity
            Not Before: Oct 17 02:34:06 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=ED2EDEEB66C42A6C117AF62E50CF30A732282208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:71:32:2b:43:63:9b:54:8b:88:1b:ca:5b:4f:
                    98:bd:66:56:a2:7e:6b:c1:72:2d:a4:fc:0d:60:e3:
                    62:86:86:42:53:06:47:46:7c:6e:71:3f:f3:5c:ab:
                    5a:e9:94:3f:5c:c1:af:03:39:7c:10:24:c7:64:4b:
                    6d:32:b9:41:85:db:40:2d:5f:13:0d:be:e5:bc:bd:
                    e4:ab:6c:c4:72:da:d9:1e:dc:d2:8c:2f:47:5b:9d:
                    9f:f9:98:a1:1f:83:c5:1b:89:7c:c4:14:80:e9:2c:
                    19:7c:50:fc:55:3c:a8:55:92:a9:9e:dd:e3:64:5b:
                    a0:ce:6a:84:57:d0:3e:ac:fa:cc:f5:86:a3:75:fa:
                    3c:49:f0:07:2f:0a:fb:8c:e0:b4:a5:29:5f:05:2c:
                    3c:9c:9f:5d:a2:5e:79:9b:c0:2c:3b:26:8d:32:b0:
                    9e:5d:ad:2a:20:05:3c:97:d3:91:81:28:bf:a7:95:
                    8b:30:94:b3:66:77:38:1c:f1:a0:70:91:b4:61:b8:
                    5b:13:0b:f1:f4:18:db:bc:2b:af:9b:9f:7b:8b:5b:
                    63:58:b1:b6:7d:10:91:8d:5d:ab:b3:b4:f9:91:81:
                    ca:3d:55:9b:63:39:c9:a6:f6:f0:2b:62:82:f9:25:
                    2e:97:25:d8:21:f4:41:5d:52:94:9c:39:22:91:e1:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2E:DE:EB:66:C4:2A:6C:11:7A:F6:2E:50:CF:30:A7:32:28:22:08
            X509v3 Authority Key Identifier:
                keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/7S7e62bEKmwRevYuUM8wpzIoIgg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:66:c3:28:c1:d7:1a:34:b4:a3:1f:98:36:5a:cd:9c:d8:25:
         95:02:25:93:24:50:c7:4f:e5:2c:95:84:c2:7d:c5:0f:ec:95:
         f1:0e:47:f7:68:da:29:23:b7:29:d2:51:fc:5e:d3:70:5e:8a:
         41:22:f8:dd:84:e9:fd:6d:1e:76:63:7e:5d:3d:b1:27:67:7d:
         22:dc:0c:8e:cc:bf:b1:c7:7e:18:f8:97:0c:52:66:84:df:58:
         e4:c8:5c:15:73:0e:b6:cf:f7:91:2d:e6:fe:b3:aa:51:99:09:
         da:ad:3f:46:0f:1e:cd:bc:89:9d:62:b3:e9:40:75:68:26:bc:
         ed:b2:81:8a:c1:61:ce:df:98:2e:ef:43:b1:2c:99:c1:f6:6d:
         52:a7:cc:ca:b0:71:16:50:49:3e:bf:64:94:81:e1:7d:0f:12:
         4d:a3:09:85:1d:b4:e9:be:93:1e:cb:6b:0f:03:af:77:9b:78:
         46:10:7a:60:c0:04:e5:26:db:e5:c5:e7:4c:5c:fe:bc:47:6b:
         52:2f:8e:5d:03:18:fc:4a:10:ec:69:95:9d:16:af:e8:b2:53:
         9f:20:77:d8:6f:50:d0:e3:0e:71:2f:a7:b8:5c:17:b4:31:7e:
         43:86:7f:4f:13:4f:02:08:ca:81:ef:b0:d8:ed:5e:fa:c9:da:
         65:fb:da:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:21:36 2025 by rpki-client