Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/JNV_4Sl-15_6HPlLUxd8k7RHXes.roa
File:                     JNV_4Sl-15_6HPlLUxd8k7RHXes.roa (raw, json)
Hash identifier:          tke/3TfoP1vgog24ZLE9wUs6jweJfsnady6iVGc/vHA=
Subject key identifier:   24:D5:7F:E1:29:7E:D7:9F:FA:1C:F9:4B:53:17:7C:93:B4:47:5D:EB
Certificate issuer:       /CN=834D79F4126BF9E9DC0B32B86764E7D602514E01
Certificate serial:       041C
Authority key identifier: 83:4D:79:F4:12:6B:F9:E9:DC:0B:32:B8:67:64:E7:D6:02:51:4E:01
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/g0159BJr-encCzK4Z2Tn1gJRTgE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/JNV_4Sl-15_6HPlLUxd8k7RHXes.roa
Signing time:             Fri 22 Aug 2025 08:44:17 +0000
ROA not before:           Fri 22 Aug 2025 08:44:17 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     40065
IP address blocks:        103.175.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/g0159BJr-encCzK4Z2Tn1gJRTgE.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/g0159BJr-encCzK4Z2Tn1gJRTgE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/g0159BJr-encCzK4Z2Tn1gJRTgE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 17:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1052 (0x41c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834D79F4126BF9E9DC0B32B86764E7D602514E01
        Validity
            Not Before: Aug 22 08:44:17 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=24D57FE1297ED79FFA1CF94B53177C93B4475DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:8e:4f:a2:be:39:c7:1b:76:29:83:11:5b:
                    99:0d:dd:ed:8d:71:36:6c:2a:ad:74:38:77:9b:ea:
                    91:2a:2c:a8:98:98:06:70:75:dd:30:3e:1a:a6:35:
                    e1:6c:9c:5e:df:c4:80:48:1b:61:e4:4a:23:56:43:
                    55:f4:ba:36:c3:70:be:64:09:0d:ca:c7:62:c0:46:
                    de:67:25:f1:3b:70:1e:90:b1:18:01:72:7e:ac:c7:
                    2d:7e:2b:a2:18:b4:75:67:8e:f7:50:9e:13:26:57:
                    6a:5f:3c:45:ee:c3:05:a8:ae:ac:05:73:11:bf:89:
                    af:3c:8b:1a:52:25:e4:b7:db:51:c8:32:b9:2c:88:
                    68:86:14:6a:be:ba:3f:66:51:1f:e5:8a:9b:d3:95:
                    b3:2c:de:04:58:98:90:31:07:64:da:5f:c2:8c:ce:
                    ea:6a:63:43:ba:7e:d8:78:d1:5e:35:04:11:78:a2:
                    98:4f:53:ed:30:b2:d2:35:82:b6:9a:3d:ab:37:00:
                    8a:16:22:b1:be:aa:91:8c:dc:f4:42:e3:a2:9e:af:
                    d7:38:b9:51:64:16:fc:ff:82:42:fd:47:51:09:df:
                    f0:60:00:a4:ad:1b:c3:65:d5:a2:02:7f:50:4c:c6:
                    07:50:89:b8:3a:26:fd:5e:af:71:d7:0d:ca:c5:32:
                    10:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D5:7F:E1:29:7E:D7:9F:FA:1C:F9:4B:53:17:7C:93:B4:47:5D:EB
            X509v3 Authority Key Identifier:
                keyid:83:4D:79:F4:12:6B:F9:E9:DC:0B:32:B8:67:64:E7:D6:02:51:4E:01

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/g0159BJr-encCzK4Z2Tn1gJRTgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/g0159BJr-encCzK4Z2Tn1gJRTgE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/JNV_4Sl-15_6HPlLUxd8k7RHXes.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:9b:bb:52:11:9b:4c:50:e0:d5:af:96:e4:75:8b:81:ba:b9:
         50:29:52:07:7e:27:c3:57:ba:3b:cc:33:5b:6d:be:ee:f5:ac:
         b6:b0:a1:28:a9:eb:67:5b:4b:ba:ba:4b:8c:0f:8e:5e:dc:49:
         0f:9c:9c:17:e8:40:5f:ec:c4:87:c8:5e:fe:fc:69:45:56:14:
         ee:ea:7a:8d:84:f4:2a:c5:9b:a4:1b:bd:93:9c:b5:4c:0a:97:
         3c:fb:48:63:bf:48:02:62:ab:30:9a:33:3f:1f:b4:95:c6:e8:
         2f:62:57:c2:80:4d:9a:1f:8a:d9:30:e3:72:ef:90:13:2f:82:
         58:dc:38:34:5e:e5:43:5d:e3:9d:e2:c0:ef:49:6e:92:99:5b:
         28:89:35:cc:16:66:26:84:36:a1:4b:41:10:a2:c8:19:23:3a:
         03:2a:ea:f2:7a:e0:84:de:9b:ee:77:59:ca:03:6e:39:23:6d:
         77:f2:cd:58:96:36:21:55:fe:89:ba:50:ce:17:52:21:25:a8:
         5d:d3:71:8f:23:af:fe:fe:ab:75:12:49:46:bb:e2:2c:57:15:
         b0:39:7a:bd:6a:ed:4b:75:c8:37:02:ef:19:d4:b7:18:14:75:
         bd:2a:fe:c4:ab:97:db:c7:4a:70:00:93:3d:a4:e8:02:7e:9a:
         7f:ab:6d:44
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODM0
RDc5RjQxMjZCRjlFOURDMEIzMkI4Njc2NEU3RDYwMjUxNEUwMTAeFw0yNTA4MjIw
ODQ0MTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI0RDU3RkUxMjk3RUQ3
OUZGQTFDRjk0QjUzMTc3QzkzQjQ0NzVERUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNO45Por45xxt2KYMRW5kN3e2NcTZsKq10OHeb6pEqLKiYmAZw
dd0wPhqmNeFsnF7fxIBIG2HkSiNWQ1X0ujbDcL5kCQ3Kx2LARt5nJfE7cB6QsRgB
cn6sxy1+K6IYtHVnjvdQnhMmV2pfPEXuwwWorqwFcxG/ia88ixpSJeS321HIMrks
iGiGFGq+uj9mUR/lipvTlbMs3gRYmJAxB2TaX8KMzupqY0O6fth40V41BBF4ophP
U+0wstI1graaPas3AIoWIrG+qpGM3PRC46Ker9c4uVFkFvz/gkL9R1EJ3/BgAKSt
G8Nl1aICf1BMxgdQibg6Jv1er3HXDcrFMhBfAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUJNV/4Sl+15/6HPlLUxd8k7RHXeswHwYDVR0jBBgwFoAUg0159BJr+encCzK4
Z2Tn1gJRTgEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xPVURO
T0RFL2cwMTU5QkpyLWVuY0N6SzRaMlRuMWdKUlRnRS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvZzAxNTlCSnItZW5jQ3pLNFoyVG4xZ0pSVGdFLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xPVUROT0RFL0pOVl80U2wtMTVf
NkhQbExVeGQ4azdSSFhlcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFnr6YwDQYJKoZIhvcNAQELBQADggEBAMmbu1IRm0xQ4NWvluR1i4G6uVAp
Ugd+J8NXujvMM1ttvu71rLawoSip62dbS7q6S4wPjl7cSQ+cnBfoQF/sxIfIXv78
aUVWFO7qeo2E9CrFm6QbvZOctUwKlzz7SGO/SAJiqzCaMz8ftJXG6C9iV8KATZof
itkw43LvkBMvgljcODRe5UNd453iwO9JbpKZWyiJNcwWZiaENqFLQRCiyBkjOgMq
6vJ64ITem+53WcoDbjkjbXfyzViWNiFV/om6UM4XUiElqF3TcY8jr/7+q3USSUa7
4ixXFbA5er1q7Ut1yDcC7xnUtxgUdb0q/sSrl9vHSnAAkz2k6AJ+mn+rbUQ=
-----END CERTIFICATE-----
Generated at Sun Aug 24 17:41:58 2025 by rpki-client