Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/c8jrope0WasNuBMLA8_DWw36Crs.roa
File:                     c8jrope0WasNuBMLA8_DWw36Crs.roa (raw, json)
Hash identifier:          Ul1XSDTp8askPpFPFRNlRd+tBurYh9rT3Gc9ATaYWQ8=
Subject key identifier:   73:C8:EB:A2:97:B4:59:AB:0D:B8:13:0B:03:CF:C3:5B:0D:FA:0A:BB
Certificate issuer:       /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial:       046D
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/c8jrope0WasNuBMLA8_DWw36Crs.roa
Signing time:             Fri 22 Aug 2025 08:49:36 +0000
ROA not before:           Fri 22 Aug 2025 08:49:36 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38852
IP address blocks:        103.169.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 17:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1133 (0x46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
        Validity
            Not Before: Aug 22 08:49:36 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=73C8EBA297B459AB0DB8130B03CFC35B0DFA0ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:1d:76:d6:ad:f6:83:25:32:33:8d:85:d5:
                    5e:0a:5f:e4:c1:51:77:1e:aa:45:fd:87:8e:75:c8:
                    7e:b3:6b:33:97:38:8b:f3:8d:f8:3d:94:de:f0:ba:
                    6f:2d:d8:7b:54:a3:91:81:5d:98:db:86:d7:4b:9f:
                    d3:98:32:52:82:19:9a:41:46:75:d8:3b:4a:cc:23:
                    16:2a:76:31:b2:5e:fe:2d:d4:a9:43:2e:10:e5:40:
                    fb:b9:e9:96:c5:39:2c:7e:66:49:7b:10:b0:c8:a9:
                    b6:d0:15:7f:cb:76:62:bc:ab:59:2a:8d:6c:87:56:
                    cc:b6:39:b2:12:53:b0:04:c6:17:10:cb:c2:3c:1c:
                    c7:6f:15:44:b6:4a:38:1b:ea:73:c8:24:99:bc:27:
                    ba:ee:9f:2c:7d:54:3d:40:4e:a8:19:f9:70:76:19:
                    4c:b7:3a:7b:79:c1:4d:a8:70:d1:a6:8d:06:b8:6b:
                    0b:e4:5a:2a:e2:88:31:14:e6:44:cc:69:44:33:06:
                    33:66:b8:af:fa:e5:0c:5f:c4:b9:e2:b2:5f:cc:10:
                    29:d4:e0:13:0b:45:d9:87:36:49:15:b8:fb:c2:f2:
                    49:51:7c:2f:b1:c3:e9:b4:bc:96:87:8b:42:23:76:
                    a0:6b:c1:cf:ea:43:27:f0:09:d0:e5:93:80:39:b5:
                    a1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C8:EB:A2:97:B4:59:AB:0D:B8:13:0B:03:CF:C3:5B:0D:FA:0A:BB
            X509v3 Authority Key Identifier:
                keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/c8jrope0WasNuBMLA8_DWw36Crs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:45:cd:2b:a1:6e:15:2b:8e:4e:d2:90:00:b6:2a:3d:f8:29:
         72:7f:b1:4a:05:64:c2:c3:04:99:c7:39:ad:8c:34:af:75:03:
         85:89:41:fd:f3:e5:59:62:04:2a:c9:b8:04:c4:fb:de:d4:a5:
         f9:8e:6f:14:13:6f:2c:89:62:0b:09:28:e6:04:6d:06:db:80:
         b3:41:ff:d0:a0:8d:94:d9:cd:95:44:84:87:88:72:e7:6e:1d:
         d2:2c:87:21:f5:27:7b:6b:1a:2e:a4:9a:f3:b1:d7:a2:7c:50:
         e5:b0:4b:66:9b:00:39:5a:9a:48:79:86:4a:fe:b3:a4:a9:07:
         4b:e0:a8:3c:6a:e3:d5:2a:41:ab:2c:2b:07:18:42:5c:5e:06:
         72:83:94:5a:d5:5f:21:02:69:0b:65:b7:35:f5:79:2f:72:ef:
         40:45:1b:0f:73:de:24:8f:c0:aa:cb:1c:62:e4:12:39:50:bd:
         c7:b2:06:c8:4e:1c:01:c7:e4:b0:6b:46:10:cd:97:d6:97:69:
         91:68:a1:ed:67:4d:34:34:22:ac:52:0d:71:f7:6c:c0:2a:53:
         7b:02:5f:ea:18:dd:c6:f9:7c:7d:0f:a2:5d:11:e2:cd:f9:9a:
         b6:23:36:14:57:06:b8:89:9b:68:5c:61:00:90:4e:ae:00:8d:
         9c:d0:cf:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 24 13:36:52 2025 by rpki-client