Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/deUFEDvjXRoYNkUxmdgUpEyNdkE.roa
File:                     deUFEDvjXRoYNkUxmdgUpEyNdkE.roa (raw, json)
Hash identifier:          EQGj8CHUsaVw8Dkd8D6ZHDc2ruk5VFHZm/doJC7Pdxs=
Subject key identifier:   75:E5:05:10:3B:E3:5D:1A:18:36:45:31:99:D8:14:A4:4C:8D:76:41
Certificate issuer:       /CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D
Certificate serial:       0479
Authority key identifier: 8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/deUFEDvjXRoYNkUxmdgUpEyNdkE.roa
Signing time:             Fri 22 Aug 2025 08:49:59 +0000
ROA not before:           Fri 22 Aug 2025 08:49:59 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     16509
IP address blocks:        103.168.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/jFCLfdoCT7LJ73-79PvQK59DGR0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/jFCLfdoCT7LJ73-79PvQK59DGR0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 03:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1145 (0x479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D
        Validity
            Not Before: Aug 22 08:49:59 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=75E505103BE35D1A1836453199D814A44C8D7641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:0e:6c:8f:15:a6:95:20:1d:c6:77:7d:43:
                    8e:fc:f8:2c:88:14:e8:d5:44:29:ca:98:e0:1d:5c:
                    02:10:e2:c6:f5:a3:99:7c:c0:14:82:bf:62:a2:df:
                    5b:14:96:a5:0d:1e:df:0c:bb:e1:48:9c:f1:43:6e:
                    56:1e:81:b8:ac:f4:5b:50:23:01:ec:66:c9:46:df:
                    48:c6:4d:c7:f9:c7:49:b5:ad:97:94:c3:f4:7b:2f:
                    1b:31:8b:d0:4f:92:ba:1b:c1:7f:2b:eb:b1:5c:df:
                    13:33:fb:30:c5:c8:b4:58:9e:1c:46:33:6d:7c:71:
                    1b:0f:4b:1f:04:36:5a:13:20:cb:3d:ff:e2:bf:74:
                    7d:bb:2f:ea:bc:d9:d0:4b:94:49:f7:22:15:4a:b4:
                    08:69:58:86:fc:5b:17:bd:be:d7:00:25:45:e5:65:
                    d2:7b:80:e1:ea:9e:cc:ea:41:c2:3c:58:99:4a:6d:
                    6b:c3:aa:8e:61:a4:fd:63:d2:19:b2:ac:c0:1a:65:
                    08:7d:54:9b:a3:6d:1b:1d:1d:0f:91:67:0d:02:b7:
                    1f:b6:1f:c9:fe:08:70:b1:28:ed:b4:08:e8:c2:74:
                    d9:ad:ec:8d:78:3b:51:50:75:8f:df:dd:18:24:fe:
                    23:21:df:97:5a:69:01:d0:f7:58:f9:ee:1a:ab:8f:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E5:05:10:3B:E3:5D:1A:18:36:45:31:99:D8:14:A4:4C:8D:76:41
            X509v3 Authority Key Identifier:
                keyid:8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/jFCLfdoCT7LJ73-79PvQK59DGR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/deUFEDvjXRoYNkUxmdgUpEyNdkE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:ff:43:bc:69:cc:f4:91:08:73:8a:b3:cf:3e:0d:ab:b9:f4:
         6a:e4:82:dd:87:0d:37:a4:2f:0e:5c:74:a4:e1:a4:7a:2e:85:
         ad:ac:99:c6:0a:f9:28:a4:2d:d9:e8:30:48:4f:80:58:70:21:
         b0:22:d9:27:3b:2f:a5:0a:04:5f:ff:41:0e:36:70:d6:da:48:
         2c:14:94:c3:ec:df:66:c9:89:fd:b8:ed:4a:ba:e3:4d:1a:e9:
         23:2f:1f:a6:2d:07:36:f5:69:89:88:6a:ca:b3:fb:e7:6a:67:
         b2:48:7e:68:82:df:54:f2:92:03:7a:23:12:08:1f:5f:cc:66:
         e3:a5:ba:df:de:cb:4f:53:fd:45:9b:91:6c:11:ad:68:95:e7:
         1a:56:31:a6:71:2b:7f:b1:ec:67:64:26:9d:25:eb:16:d3:6d:
         b4:8c:b1:74:6e:88:99:b1:4e:2b:b1:b1:28:b3:85:04:36:39:
         c8:c0:5e:92:f1:d4:58:9b:6b:a0:2f:e7:4b:64:cd:ec:e2:e3:
         4d:07:bb:be:10:b4:17:b0:4c:e6:31:54:07:ec:73:1e:92:95:
         63:98:46:05:3f:27:ab:e1:9b:db:16:3a:41:46:67:47:de:e4:
         e3:67:c8:c9:91:b2:77:d9:2a:f9:b6:9e:ef:14:83:c5:31:94:
         29:d1:f2:84
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICBHkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEM1
MDhCN0REQTAyNEZCMkM5RUY3RkJCRjRGQkQwMkI5RjQzMTkxRDAeFw0yNTA4MjIw
ODQ5NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc1RTUwNTEwM0JFMzVE
MUExODM2NDUzMTk5RDgxNEE0NEM4RDc2NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7Aw5sjxWmlSAdxnd9Q478+CyIFOjVRCnKmOAdXAIQ4sb1o5l8
wBSCv2Ki31sUlqUNHt8Mu+FInPFDblYegbis9FtQIwHsZslG30jGTcf5x0m1rZeU
w/R7Lxsxi9BPkrobwX8r67Fc3xMz+zDFyLRYnhxGM218cRsPSx8ENloTIMs9/+K/
dH27L+q82dBLlEn3IhVKtAhpWIb8Wxe9vtcAJUXlZdJ7gOHqnszqQcI8WJlKbWvD
qo5hpP1j0hmyrMAaZQh9VJujbRsdHQ+RZw0Ctx+2H8n+CHCxKO20COjCdNmt7I14
O1FQdY/f3Rgk/iMh35daaQHQ91j57hqrj4L1AgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUdeUFEDvjXRoYNkUxmdgUpEyNdkEwHwYDVR0jBBgwFoAUjFCLfdoCT7LJ73+7
9PvQK59DGR0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lCRVJM
SU5LL2pGQ0xmZG9DVDdMSjczLTc5UHZRSzU5REdSMC5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvakZDTGZkb0NUN0xKNzMtNzlQdlFLNTlER1IwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lCRVJMSU5LL2RlVUZFRHZqWFJv
WU5rVXhtZGdVcEV5TmRrRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFnqJwwDQYJKoZIhvcNAQELBQADggEBAKX/Q7xpzPSRCHOKs88+Dau59Grk
gt2HDTekLw5cdKThpHouha2smcYK+SikLdnoMEhPgFhwIbAi2Sc7L6UKBF//QQ42
cNbaSCwUlMPs32bJif247Uq6400a6SMvH6YtBzb1aYmIasqz++dqZ7JIfmiC31Ty
kgN6IxIIH1/MZuOlut/ey09T/UWbkWwRrWiV5xpWMaZxK3+x7GdkJp0l6xbTbbSM
sXRuiJmxTiuxsSizhQQ2OcjAXpLx1Fiba6Av50tkzezi400Hu74QtBewTOYxVAfs
cx6SlWOYRgU/J6vhm9sWOkFGZ0fe5ONnyMmRsnfZKvm2nu8Ug8UxlCnR8oQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:27:26 2025 by rpki-client