Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/B30vWqmcZohll39UPIS-eyybv6M.roa
File:                     B30vWqmcZohll39UPIS-eyybv6M.roa (raw, json)
Hash identifier:          kSOqmf1qWFV4X1SaKp5vfoYoBcMKIOjO8HnNLjwxUG8=
Subject key identifier:   07:7D:2F:5A:A9:9C:66:88:65:97:7F:54:3C:84:BE:7B:2C:9B:BF:A3
Certificate issuer:       /CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5
Certificate serial:       026B
Authority key identifier: 60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/B30vWqmcZohll39UPIS-eyybv6M.roa
Signing time:             Fri 22 Aug 2025 08:44:01 +0000
ROA not before:           Fri 22 Aug 2025 08:44:01 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131642
IP address blocks:        103.69.80.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/YBbvQfMhyapsHhPRFbW2CjApyOU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/YBbvQfMhyapsHhPRFbW2CjApyOU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5
        Validity
            Not Before: Aug 22 08:44:01 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=077D2F5AA99C668865977F543C84BE7B2C9BBFA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:df:a8:80:39:a8:09:5e:71:c4:77:e4:39:
                    e6:7b:4a:59:d0:8a:1e:b9:e2:92:97:d0:e3:77:87:
                    0f:8e:da:e4:af:2e:d0:8b:ee:ff:37:17:ae:32:fe:
                    2d:28:df:49:16:c5:df:04:f0:d4:e5:03:a8:fa:3e:
                    dc:f9:4a:5d:82:47:05:f9:7a:de:a4:4d:a6:b7:e0:
                    6b:32:c3:02:5d:97:0e:2f:18:e6:c5:f2:55:58:39:
                    66:2f:6d:ed:79:3c:2f:dc:02:f2:44:67:da:8b:dd:
                    6d:9c:7a:d2:22:1a:f3:2e:97:52:3b:2c:f8:db:2e:
                    83:21:53:88:20:ae:d1:91:d3:88:cc:bb:e5:f4:cc:
                    7a:65:38:dc:fc:fc:a1:96:cd:b6:f5:8c:08:91:41:
                    75:82:7e:4b:8f:e1:18:64:88:74:69:7a:84:74:c6:
                    5e:96:7f:24:d9:da:4d:f2:bc:b9:d2:74:35:a0:ae:
                    cf:e8:7a:0e:19:f3:7f:a6:dc:88:35:0f:1f:4f:66:
                    58:ad:c6:99:30:34:83:93:af:69:c2:0f:8e:2c:7f:
                    c3:ab:7f:2d:8e:72:de:25:0d:2f:f0:40:6f:d5:7a:
                    4d:0f:2c:54:76:a1:6f:b9:51:94:13:7e:ed:4b:fc:
                    ce:b7:5b:7b:44:3c:fc:ab:25:ba:59:ea:0c:f5:42:
                    b6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7D:2F:5A:A9:9C:66:88:65:97:7F:54:3C:84:BE:7B:2C:9B:BF:A3
            X509v3 Authority Key Identifier:
                keyid:60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/YBbvQfMhyapsHhPRFbW2CjApyOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/B30vWqmcZohll39UPIS-eyybv6M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:1e:fc:e4:fa:e9:af:83:bb:1e:8e:b6:18:4c:e0:68:79:6a:
         bf:95:c7:b3:09:42:10:e3:a7:0b:ea:8e:15:58:16:e1:f2:61:
         f4:89:9f:25:f5:0e:b7:9d:4b:ec:88:e2:dc:8d:4e:2a:0a:49:
         56:72:f9:41:f4:a1:94:a0:b5:36:2f:9a:66:11:b0:3d:16:35:
         f7:be:84:9e:38:67:dc:a4:c3:90:b5:9c:88:2a:40:f3:b8:23:
         8c:57:6a:7f:08:41:cb:6b:89:2c:94:15:01:71:fe:14:1d:2d:
         5d:2b:9a:8c:e3:09:d3:31:63:3b:49:73:bd:fa:63:ca:17:fb:
         28:88:c3:d1:5a:02:f4:d5:32:83:ba:68:9c:ad:b8:31:15:c1:
         cf:e8:f7:25:6d:f9:3b:c8:3e:32:4f:b9:76:6c:c4:13:2e:f4:
         e1:f5:24:83:fa:26:03:1a:10:27:e8:73:8e:ba:44:6c:0e:4f:
         fc:d4:f8:9d:f3:e4:c6:0b:8a:30:b5:36:62:b7:da:c1:9a:2c:
         4f:d0:92:f8:74:e3:55:c8:56:b7:ac:b9:56:c9:47:13:6d:da:
         79:f2:68:54:99:96:ef:8a:a6:87:0b:71:ab:d0:54:7a:b1:00:
         ed:19:23:35:9b:a1:9e:43:d0:76:b9:63:58:c4:e0:03:8a:9a:
         36:7a:90:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:17:24 2025 by rpki-client