Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/ALgcElpbRlWHeixD2jzKDHQoT6c.roa
File:                     ALgcElpbRlWHeixD2jzKDHQoT6c.roa (raw, json)
Hash identifier:          s46o61zq2I8YO9yS7G3rHpQ3BOsJCkV+XSduQYXtVbw=
Subject key identifier:   00:B8:1C:12:5A:5B:46:55:87:7A:2C:43:DA:3C:CA:0C:74:28:4F:A7
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       0DC0
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/ALgcElpbRlWHeixD2jzKDHQoT6c.roa
Signing time:             Fri 22 Aug 2025 08:56:40 +0000
ROA not before:           Fri 22 Aug 2025 08:56:40 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18046
IP address blocks:        103.130.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3520 (0xdc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Aug 22 08:56:40 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=00B81C125A5B4655877A2C43DA3CCA0C74284FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:d6:ea:6e:b4:20:8c:54:3b:4f:c2:b9:b4:
                    d4:48:51:52:bd:1d:6b:68:46:0f:b0:11:0c:00:01:
                    5e:37:fb:1e:f5:9c:27:16:78:3f:8f:20:7e:57:6a:
                    67:d5:a0:fc:01:dd:e2:e4:4a:d6:83:b4:35:55:96:
                    e6:91:e6:68:18:1e:0f:9b:4c:ee:e2:38:75:66:c8:
                    f5:23:f7:0d:e4:9b:f9:c0:ad:9e:1f:04:05:7e:68:
                    b6:e2:34:80:50:39:5e:49:a4:c1:e6:66:32:99:de:
                    f3:d4:8d:f3:cd:87:ed:17:a0:e7:01:d0:19:d2:28:
                    c9:0e:77:2e:5d:1d:0d:15:a7:5b:9a:e4:5f:c0:41:
                    80:90:5b:f4:f0:8b:bb:36:0d:f1:2b:46:22:7c:1f:
                    6c:34:f8:3f:80:96:30:ad:a7:bc:03:e1:33:71:3d:
                    a1:2e:23:f8:1a:0f:cf:6a:73:7f:ae:c9:ad:a0:b7:
                    37:eb:ca:97:9b:6d:e0:89:d9:19:00:7d:41:57:e0:
                    bd:86:1c:70:d2:d4:59:74:ff:45:97:54:79:1a:c4:
                    d7:4b:91:3e:71:31:d1:1d:75:47:3c:25:b8:60:07:
                    96:b5:fe:a8:71:c8:82:d1:a5:ba:b8:22:88:c3:cb:
                    bc:94:41:0f:da:59:79:5b:4f:67:28:3f:bd:70:c0:
                    51:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B8:1C:12:5A:5B:46:55:87:7A:2C:43:DA:3C:CA:0C:74:28:4F:A7
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/ALgcElpbRlWHeixD2jzKDHQoT6c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:62:10:8a:b1:85:a3:96:4e:9a:82:07:c6:eb:3b:3d:da:63:
         3d:18:53:6c:b9:de:5f:fe:35:15:1a:4b:35:e7:0b:1b:51:c4:
         bf:e2:2c:5d:3a:aa:c7:7b:4c:d3:7e:3a:a7:31:eb:64:10:68:
         03:c7:3c:90:b8:e9:61:78:e3:56:e1:36:93:8b:9b:fc:47:45:
         a8:69:8f:cf:72:8b:f0:94:87:92:85:8a:e2:94:4a:be:1c:b9:
         dc:f6:b5:8c:d2:0b:56:bc:b4:0f:8c:13:12:bc:a1:ca:98:9a:
         76:10:b8:7f:6d:54:76:b5:e9:88:ff:86:7d:38:59:8d:d6:61:
         b7:f9:61:8d:72:72:2d:99:b6:00:c5:23:e2:6c:eb:83:d3:71:
         0c:75:55:36:1e:8d:0d:07:38:1f:e8:b9:59:f0:0d:bb:d1:c4:
         3a:51:60:e3:18:b5:05:64:7e:aa:8b:26:bd:86:35:a9:8e:91:
         d4:48:89:92:ea:28:0e:b3:15:8e:c0:03:c4:c7:99:8f:61:2c:
         3b:eb:85:5b:1b:42:ea:61:46:a3:39:12:0a:55:40:74:4a:ec:
         28:7c:b7:ab:27:a5:32:78:26:ca:39:05:3a:e6:b1:ca:6c:17:
         ac:9e:58:f7:47:31:be:d0:30:e2:ea:1f:85:91:1a:33:9a:51:
         1c:2c:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:41 2025 by rpki-client