Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DAFU/pc8Xin7jncSOJfT1Riuj1WKUU-U.roa
File:                     pc8Xin7jncSOJfT1Riuj1WKUU-U.roa (raw, json)
Hash identifier:          VRo+LO7Q6SUHDMFQQRj3eJUm72eOCrczYJ5fqDCc+ls=
Subject key identifier:   A5:CF:17:8A:7E:E3:9D:C4:8E:25:F4:F5:46:2B:A3:D5:62:94:53:E5
Certificate issuer:       /CN=F913CB7A44A57D0893D34D8FE9DB1E77EFE6AB1C
Certificate serial:       07
Authority key identifier: F9:13:CB:7A:44:A5:7D:08:93:D3:4D:8F:E9:DB:1E:77:EF:E6:AB:1C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-RPLekSlfQiT002P6dsed-_mqxw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DAFU/pc8Xin7jncSOJfT1Riuj1WKUU-U.roa
Signing time:             Fri 03 Oct 2025 07:09:44 +0000
ROA not before:           Fri 03 Oct 2025 07:09:44 +0000
ROA not after:            Fri 25 Sep 2026 15:30:20 +0000
asID:                     131657
IP address blocks:        210.1.234.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/DAFU/-RPLekSlfQiT002P6dsed-_mqxw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DAFU/-RPLekSlfQiT002P6dsed-_mqxw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/-RPLekSlfQiT002P6dsed-_mqxw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 08:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F913CB7A44A57D0893D34D8FE9DB1E77EFE6AB1C
        Validity
            Not Before: Oct  3 07:09:44 2025 GMT
            Not After : Sep 25 15:30:20 2026 GMT
        Subject: CN=A5CF178A7EE39DC48E25F4F5462BA3D5629453E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:43:d0:1e:68:e1:03:22:e8:ad:61:f3:08:
                    15:7b:0e:11:d9:cd:af:69:cd:e2:c5:b9:8a:51:5d:
                    c2:8e:8e:6a:d3:cc:b0:e7:48:28:2a:33:fb:e7:be:
                    5a:4a:20:87:b9:b8:e4:ea:9c:dd:83:fc:bc:24:2c:
                    a9:2a:9b:bd:fb:0f:89:35:98:8d:1e:e0:8e:a9:9e:
                    94:cd:16:e8:29:7f:14:3d:83:49:ba:2c:9e:d5:ff:
                    39:bb:7f:fc:0a:da:12:8b:e2:38:f2:6e:69:80:b2:
                    95:bf:7e:9f:31:be:f3:70:48:19:a0:98:17:6b:1e:
                    b7:4f:09:09:c0:41:1c:59:76:18:f4:c5:71:55:bd:
                    a2:58:20:36:20:fb:1e:5e:b0:7e:94:70:20:e1:ef:
                    e9:5b:7f:e7:1a:a9:0f:b7:6a:d8:16:65:62:d9:0f:
                    17:47:2c:2b:0b:61:68:3b:2a:5d:14:47:af:de:c9:
                    cf:40:67:1d:03:0b:e3:b7:a0:42:f5:bf:3d:ef:03:
                    e2:64:1e:37:23:e3:5b:20:89:24:f4:84:40:51:82:
                    eb:f3:d3:2f:de:20:d2:ab:b7:37:5e:3e:25:aa:08:
                    f6:15:93:2d:08:44:ff:d5:c0:28:19:6c:33:02:1d:
                    c1:d1:e5:8e:9d:a1:78:56:5e:6e:73:93:2b:dc:15:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CF:17:8A:7E:E3:9D:C4:8E:25:F4:F5:46:2B:A3:D5:62:94:53:E5
            X509v3 Authority Key Identifier:
                keyid:F9:13:CB:7A:44:A5:7D:08:93:D3:4D:8F:E9:DB:1E:77:EF:E6:AB:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DAFU/-RPLekSlfQiT002P6dsed-_mqxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-RPLekSlfQiT002P6dsed-_mqxw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DAFU/pc8Xin7jncSOJfT1Riuj1WKUU-U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.1.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:94:3d:3c:23:a3:86:41:2d:25:ac:f8:37:19:12:d3:f7:0b:
         05:9b:29:2d:d9:71:fd:a8:cf:e5:ec:9e:b0:1b:3a:56:e1:9a:
         b4:63:c7:98:f8:d8:ee:0a:ff:5c:6c:89:77:87:31:79:a4:6b:
         48:0f:e3:e1:b2:80:51:b3:3f:8c:35:91:42:84:8f:b9:f0:cb:
         33:99:aa:fd:3f:56:a4:ca:48:1c:5c:a3:94:a7:8d:6f:48:5c:
         95:e6:bb:71:5b:18:cc:4d:7d:1e:54:fc:11:fb:f3:23:9a:06:
         6f:35:2a:98:d4:bc:6f:a7:73:ff:b8:73:9a:f3:0b:8c:1c:04:
         0f:60:b2:67:2d:1a:42:38:9a:32:c7:8b:d8:d2:e1:bd:6a:9c:
         6f:73:a0:ed:00:fe:61:5b:84:3f:1d:56:4e:9b:a6:79:c9:f9:
         d6:98:ab:51:41:ef:1b:5a:49:03:5b:80:0f:e6:d2:31:e4:c4:
         22:c6:e2:58:dd:10:ca:c8:13:d5:23:af:d2:4b:91:38:5b:24:
         fa:fe:3d:83:0d:34:1c:ab:4d:88:a0:ef:84:e5:8d:9b:19:a8:
         5f:01:75:10:97:6a:0d:dc:7a:fc:d9:13:c2:a7:36:aa:c2:34:
         e1:e1:f6:8a:3f:7c:4e:2c:26:b0:1b:21:4a:15:b4:e8:32:af:
         b7:25:af:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:15:37 2025 by rpki-client