Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/8Nz62Zl8E_N4kX52QOafqDcrV1c.roa
File:                     8Nz62Zl8E_N4kX52QOafqDcrV1c.roa (raw, json)
Hash identifier:          VT0M23w1s3P2ey/YB4J+cULZOPQYuEXDmsGDgAPC0uw=
Subject key identifier:   F0:DC:FA:D9:99:7C:13:F3:78:91:7E:76:40:E6:9F:A8:37:2B:57:57
Certificate issuer:       /CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D
Certificate serial:       0454
Authority key identifier: 0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/8Nz62Zl8E_N4kX52QOafqDcrV1c.roa
Signing time:             Fri 22 Aug 2025 08:50:36 +0000
ROA not before:           Fri 22 Aug 2025 08:50:36 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     396982
IP address blocks:        160.30.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108 (0x454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D
        Validity
            Not Before: Aug 22 08:50:36 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F0DCFAD9997C13F378917E7640E69FA8372B5757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:e7:fe:51:41:1d:cf:48:9a:77:e2:3a:22:
                    fb:61:72:b8:cd:c0:a8:5c:c0:07:34:cc:f2:c7:97:
                    23:4e:48:25:a4:4b:4a:7e:57:54:98:55:0a:e6:90:
                    57:e8:7a:c1:24:43:97:dd:d8:d2:d6:8a:12:f4:0e:
                    f4:29:db:65:a2:18:1e:15:57:eb:b1:f6:db:35:0e:
                    09:77:6f:66:05:86:fd:7c:c7:5f:26:3b:dd:ad:24:
                    11:54:7c:f2:f6:f5:7d:b2:55:c3:0f:d9:c9:4a:87:
                    4f:12:70:be:d4:ed:e6:94:da:15:0f:a6:df:69:30:
                    b4:d3:e9:0c:5b:90:0d:43:bd:cc:e6:9f:9b:10:c1:
                    ba:4e:b9:83:eb:65:a6:f6:92:44:ee:c5:dd:c4:94:
                    7e:2e:20:cc:66:92:34:13:88:6c:7a:7e:86:34:3f:
                    c2:62:41:0a:53:32:28:19:14:3e:05:db:26:23:e2:
                    f6:40:a4:2c:e8:b2:ed:d7:1c:db:58:e4:c6:eb:61:
                    0c:4c:c7:26:53:1a:06:69:3a:d7:20:1c:74:fe:55:
                    26:4d:62:d7:83:e2:22:8f:42:bc:3b:c1:55:01:e1:
                    75:73:20:f9:a2:8e:c4:66:2a:24:8f:eb:5a:5f:48:
                    07:d9:b8:36:d1:69:0d:23:35:12:04:11:ac:ec:80:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DC:FA:D9:99:7C:13:F3:78:91:7E:76:40:E6:9F:A8:37:2B:57:57
            X509v3 Authority Key Identifier:
                keyid:0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/8Nz62Zl8E_N4kX52QOafqDcrV1c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:27:21:bb:f1:13:ad:f9:d4:ca:ba:78:7f:48:65:66:bf:55:
         fd:a6:3c:1a:ad:f7:54:04:ec:bd:a7:ca:f9:d2:b6:41:9e:8a:
         82:a6:24:99:2a:f7:c7:7f:82:b8:37:56:9c:42:89:3b:47:e9:
         25:54:8b:47:0a:22:65:77:01:dc:d2:62:03:bb:dd:b5:50:5b:
         df:05:d3:85:f1:8e:f2:6c:43:c1:cd:0d:22:82:eb:c4:f0:8f:
         99:ee:1b:f4:2f:28:94:ed:10:42:cf:7b:fc:a4:98:58:29:6c:
         0b:fb:9b:26:ff:d6:38:eb:fb:87:8f:13:3f:27:a4:52:af:08:
         b7:2a:0c:48:7c:0f:ce:47:4c:9e:56:5d:85:7f:ad:45:2f:19:
         86:4c:ac:28:9f:7c:1a:f4:74:4a:77:32:ea:e7:78:fa:93:dc:
         2f:92:82:bd:9a:57:41:ff:83:de:0e:25:aa:14:16:30:b6:ad:
         e8:0c:02:24:18:c8:54:26:32:5b:05:e4:35:fc:b7:d3:6c:89:
         00:62:16:70:82:52:08:d3:1b:ef:a0:db:ed:76:56:4a:cf:c1:
         2e:ee:e3:ca:90:75:98:d8:28:31:3c:b0:ad:93:27:d6:a6:6a:
         dd:b7:c6:f1:6d:87:c9:69:a7:3e:9a:0b:30:7e:9f:6f:06:67:
         7e:87:14:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 24 08:11:32 2025 by rpki-client