Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/7KdD1snMJTjVQpV_X2wJQCgI-PM.roa
File:                     7KdD1snMJTjVQpV_X2wJQCgI-PM.roa (raw, json)
Hash identifier:          BMiyy7wskNfH0SDMvAXR7HTBFnxRDBZKLWmsHAXLOJQ=
Subject key identifier:   EC:A7:43:D6:C9:CC:25:38:D5:42:95:7F:5F:6C:09:40:28:08:F8:F3
Certificate issuer:       /CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D
Certificate serial:       0453
Authority key identifier: 0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/7KdD1snMJTjVQpV_X2wJQCgI-PM.roa
Signing time:             Fri 22 Aug 2025 08:50:36 +0000
ROA not before:           Fri 22 Aug 2025 08:50:36 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     152613
IP address blocks:        160.30.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D
        Validity
            Not Before: Aug 22 08:50:36 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=ECA743D6C9CC2538D542957F5F6C09402808F8F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:1e:46:d2:7f:34:9b:5f:c6:d5:f4:d4:3e:
                    4f:8c:dc:f1:b4:3c:33:1f:0e:9a:6d:7d:71:aa:fc:
                    1a:0c:9b:a4:62:71:7e:03:2a:43:a1:a7:3b:a5:d7:
                    28:61:b2:a6:23:3f:c9:c2:b2:35:a3:5e:ed:f2:35:
                    41:cb:ee:f9:a7:62:39:25:47:e5:de:c4:a9:bf:4e:
                    2d:31:e1:e1:d3:4c:4e:88:21:3a:80:25:69:83:da:
                    2f:09:81:6c:f8:4c:92:38:28:69:07:ba:e7:22:ae:
                    cf:19:7e:3d:b4:18:81:6a:ba:2b:1f:30:79:83:28:
                    be:d7:13:63:02:6b:97:0c:2c:b3:50:0d:e8:5b:7e:
                    ea:89:64:ce:5d:6f:1f:75:4a:d2:49:05:93:49:ee:
                    02:c2:0e:0c:70:9c:15:89:16:27:87:12:59:43:18:
                    36:1a:bf:e6:bf:87:b1:9c:db:be:e6:a5:e2:3e:31:
                    37:df:42:46:46:22:e0:61:5d:37:3b:fb:fa:31:a4:
                    2e:e0:5a:6f:02:a8:9b:ce:71:ef:b1:6b:2c:b9:99:
                    26:0d:83:3d:7d:67:b4:2a:f2:9e:9f:c1:22:bd:07:
                    47:a3:a5:ea:a0:ff:f6:27:8f:07:0d:58:c4:41:7e:
                    ec:f5:40:b8:2b:65:4d:56:55:e6:42:94:81:f2:8c:
                    87:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A7:43:D6:C9:CC:25:38:D5:42:95:7F:5F:6C:09:40:28:08:F8:F3
            X509v3 Authority Key Identifier:
                keyid:0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/7KdD1snMJTjVQpV_X2wJQCgI-PM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:7e:86:71:7e:85:0d:17:8f:da:b5:68:e1:b9:05:de:f7:1d:
         89:7d:05:b5:46:3b:f5:8c:23:99:fb:c4:26:c6:35:dc:98:af:
         f8:d4:71:59:74:8b:19:fb:89:b0:4a:57:5d:c3:eb:ed:d3:54:
         b2:c9:d0:f8:ac:e8:47:47:b6:af:36:dc:28:fe:46:a7:e4:5c:
         c8:11:1d:fc:f8:b4:29:e0:4c:0a:30:28:d9:b0:04:2d:62:42:
         47:c5:ef:3c:56:a4:15:57:4b:e4:65:03:d3:bd:c6:17:1a:74:
         b3:6f:e4:d1:27:fb:8b:a4:03:f5:2c:14:b9:ab:c6:63:eb:3a:
         54:ff:e0:ec:35:8e:af:4e:78:df:8f:f2:31:fa:0e:45:4e:51:
         25:65:2b:5a:56:ae:b6:c0:af:f0:1b:e6:45:c6:f2:2e:7b:39:
         3a:92:57:0d:65:d8:c3:e1:7c:b3:d7:28:e4:1b:d6:de:a8:5e:
         91:33:8e:5b:d4:9c:af:28:07:03:9d:63:db:fc:1c:56:ee:20:
         94:8a:06:45:89:6b:a2:50:fb:43:5b:04:db:44:d4:e9:b5:fe:
         2d:4f:f1:ae:f6:03:9f:c5:73:69:40:2b:6e:bc:cb:8a:3d:6e:
         ad:c6:1d:30:64:53:82:19:bb:02:e3:a2:30:34:17:d5:61:df:
         b5:77:d2:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 24 08:11:05 2025 by rpki-client