Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/Jw4FncC-DI44AvRvJpsoDZhvRHc.roa
File:                     Jw4FncC-DI44AvRvJpsoDZhvRHc.roa (raw, json)
Hash identifier:          ob8Vacx3H1BzfBWRY8X+FYKnV/qXpgssQkL26HMto7I=
Subject key identifier:   27:0E:05:9D:C0:BE:0C:8E:38:02:F4:6F:26:9B:28:0D:98:6F:44:77
Certificate issuer:       /CN=A736CFF1948740614D0321E63B8403EB9AB9748D
Certificate serial:       0326
Authority key identifier: A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/Jw4FncC-DI44AvRvJpsoDZhvRHc.roa
Signing time:             Fri 22 Aug 2025 08:48:50 +0000
ROA not before:           Fri 22 Aug 2025 08:48:50 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     983
IP address blocks:        103.36.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 806 (0x326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A736CFF1948740614D0321E63B8403EB9AB9748D
        Validity
            Not Before: Aug 22 08:48:50 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=270E059DC0BE0C8E3802F46F269B280D986F4477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:81:3f:ad:4a:7b:ec:32:90:41:49:40:5b:
                    06:63:75:0a:ae:18:bc:f2:54:02:43:cd:7e:07:f6:
                    f1:d9:fc:1e:92:55:66:b1:2d:55:29:cc:cc:51:af:
                    59:89:59:68:85:d7:a5:17:c6:ed:66:77:08:40:0d:
                    56:3a:de:03:e6:5b:5b:1a:a8:03:d3:e8:b7:98:12:
                    70:4c:82:c4:3b:e3:4b:07:6a:aa:b0:5d:ea:2b:03:
                    49:69:0a:00:41:5f:b8:b7:54:e2:36:2a:1a:d6:c4:
                    fd:78:23:03:76:27:a8:ea:d5:d5:ce:c2:30:4a:d0:
                    5a:33:cd:5e:8c:e8:d0:2a:ad:e9:ad:b8:18:71:59:
                    fa:a1:6f:90:29:fa:f8:e0:bd:16:ab:24:f0:dd:a0:
                    e4:9b:48:e9:ab:c0:98:8d:15:ab:a3:4c:14:7d:15:
                    39:1f:1c:73:45:55:8d:91:5e:e6:9c:ab:a3:19:4a:
                    2a:b6:55:4a:86:2c:e9:ad:de:89:80:10:87:f0:4d:
                    1f:9d:a0:7b:dc:ba:2c:32:42:71:94:28:af:83:7b:
                    d6:02:87:91:6a:90:ab:1e:da:3a:38:d9:a2:d7:74:
                    87:d1:3d:ba:b4:74:05:5c:ea:3e:2d:9b:e8:49:e6:
                    6e:8c:b9:cd:94:4a:55:ba:76:5a:12:e3:4d:c7:fe:
                    34:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0E:05:9D:C0:BE:0C:8E:38:02:F4:6F:26:9B:28:0D:98:6F:44:77
            X509v3 Authority Key Identifier:
                keyid:A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/Jw4FncC-DI44AvRvJpsoDZhvRHc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:fe:b7:57:b0:62:d7:51:fd:31:de:db:0f:b6:34:53:5d:7a:
         8f:00:e9:0e:77:9c:b9:b3:24:64:0a:ec:06:82:02:5e:3a:f8:
         8b:1d:02:93:ec:e2:c0:22:27:dc:04:ef:e2:c7:57:28:4f:13:
         70:11:ed:e5:7e:d4:a0:cd:81:0a:d0:24:8a:90:a2:e2:13:91:
         06:19:c9:1b:1d:96:eb:1a:76:63:87:67:89:05:80:af:11:31:
         59:3f:d2:b1:52:91:71:28:ea:f1:ff:b3:94:83:32:1e:1d:7c:
         b3:1b:10:9f:a1:5f:31:c9:13:b1:78:9d:bf:19:4e:e7:0c:84:
         9c:9f:6d:03:54:44:3b:f0:17:e2:c7:78:36:1c:b1:c2:fb:38:
         2d:fd:64:ce:b6:0a:59:1e:65:a7:d0:27:ee:f8:51:31:be:42:
         24:c3:34:5b:54:e5:b1:5a:a1:72:30:4a:79:5f:ce:af:e6:b6:
         a1:4a:31:7e:74:cb:4a:b7:bb:f9:7d:26:8b:2f:a0:c3:ae:08:
         1a:0a:03:e5:0d:ce:f8:90:0e:cd:81:b1:86:c1:89:48:7e:9e:
         15:2a:28:1b:e3:dd:75:64:77:34:ce:81:68:9c:db:6e:3e:56:
         96:35:83:61:f3:42:80:ca:94:e0:59:ea:18:6c:cd:5d:bf:e3:
         87:96:b8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:39:40 2025 by rpki-client