Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/anwAL6WSEHi5639WA_DwwGelj1U.roa
File:                     anwAL6WSEHi5639WA_DwwGelj1U.roa (raw, json)
Hash identifier:          jcp2urduzhVf1eM35oQBDPxHFK6t/1+RxRWb7gNT6Hs=
Subject key identifier:   6A:7C:00:2F:A5:92:10:78:B9:EB:7F:56:03:F0:F0:C0:67:A5:8F:55
Certificate issuer:       /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Certificate serial:       0DC4
Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/anwAL6WSEHi5639WA_DwwGelj1U.roa
Signing time:             Fri 22 Aug 2025 09:03:13 +0000
ROA not before:           Fri 22 Aug 2025 09:03:13 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     14618
IP address blocks:        103.123.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3524 (0xdc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
        Validity
            Not Before: Aug 22 09:03:13 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=6A7C002FA5921078B9EB7F5603F0F0C067A58F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:60:ff:00:7c:97:9b:96:a0:2c:21:00:b3:c3:
                    cf:e0:48:b1:1a:de:be:8b:1c:ff:33:cc:84:b6:90:
                    c0:87:1d:c9:e5:21:47:c3:77:28:c5:28:bd:3d:a2:
                    11:05:ce:de:db:24:72:b7:ec:9d:09:01:74:2f:53:
                    7f:c9:c8:4a:28:0e:8a:8b:5f:c1:93:c3:05:22:c9:
                    b5:98:5e:84:7c:ac:82:fa:1c:b3:2a:8c:e7:64:e3:
                    4e:41:44:5a:9b:3f:50:94:be:16:94:72:31:af:3a:
                    28:4a:d2:37:70:71:c3:4d:af:89:1a:98:13:b2:c0:
                    7c:2c:68:9f:49:47:a1:6c:bf:9c:c2:73:63:a3:d1:
                    02:e2:6d:74:05:dd:83:68:7e:a7:66:54:05:d7:6b:
                    d9:c7:37:c1:b6:78:00:86:03:2e:a4:b1:74:fc:92:
                    fd:c8:bc:dd:e3:83:e7:16:24:fe:f1:26:d9:01:e8:
                    54:2d:3c:ad:93:32:3d:2e:fe:87:37:52:42:34:24:
                    4e:0f:bc:7c:89:62:b9:30:b1:27:1f:01:f1:c3:10:
                    65:ef:2f:dc:c4:e5:fc:88:b5:83:36:ec:24:98:f0:
                    f2:b9:8b:d6:a4:77:6f:87:32:b9:1a:f7:f1:7e:0f:
                    91:e1:92:50:da:36:d5:15:e1:39:1a:88:f4:18:06:
                    f3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7C:00:2F:A5:92:10:78:B9:EB:7F:56:03:F0:F0:C0:67:A5:8F:55
            X509v3 Authority Key Identifier:
                keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/anwAL6WSEHi5639WA_DwwGelj1U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:93:37:e8:bb:df:b5:1e:ee:97:0f:d3:3e:44:2e:7d:bc:d2:
         8d:94:51:4d:0b:2d:a1:d2:9c:f2:58:c4:15:2b:80:be:99:27:
         77:df:79:11:cb:a9:84:d4:2f:5a:28:4a:55:0e:85:fb:ed:15:
         f8:05:37:73:f2:ee:ad:11:42:e3:4c:60:7e:56:fb:d5:9c:8d:
         b2:f3:6a:17:c9:c1:c6:23:3f:19:22:d9:34:de:6c:5e:f4:bb:
         c8:c3:61:c2:c8:56:48:73:47:40:8e:33:62:9e:6d:89:7a:96:
         72:35:97:63:b2:e6:ab:59:db:5c:d1:a3:a4:d4:f6:35:70:9b:
         82:48:a0:f0:fc:ab:5a:9f:a4:ee:80:c1:11:3c:8c:b5:4c:fe:
         d7:d0:98:82:cd:4a:02:f0:ca:81:f2:12:fe:90:f4:56:8e:c3:
         4d:a0:0d:88:8d:18:46:4c:5b:01:88:4c:93:97:74:eb:fc:7d:
         77:be:9c:a1:67:0b:9d:27:9a:72:43:68:35:27:9a:98:3b:a3:
         54:aa:99:33:a1:6f:0a:22:d7:f7:1a:f0:49:62:bf:ae:95:6e:
         08:e8:5d:f1:b4:8e:10:51:71:bf:b1:da:cd:28:62:f7:d0:d9:
         4f:12:6e:1d:98:80:c8:da:67:7c:86:b1:01:ec:b7:7f:22:09:
         f6:00:67:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:59:35 2025 by rpki-client