Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/wg1bAYSmYpPMF-4EqtcaHB8XWaI.roa
File:                     wg1bAYSmYpPMF-4EqtcaHB8XWaI.roa (raw, json)
Hash identifier:          rahf6EBKeTbuFWN8DRldjM6IW+mqI9w+MxWzY2HbAxY=
Subject key identifier:   C2:0D:5B:01:84:A6:62:93:CC:17:EE:04:AA:D7:1A:1C:1F:17:59:A2
Certificate issuer:       /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial:       046E
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/wg1bAYSmYpPMF-4EqtcaHB8XWaI.roa
Signing time:             Fri 22 Aug 2025 08:49:37 +0000
ROA not before:           Fri 22 Aug 2025 08:49:37 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     20473
IP address blocks:        103.169.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 17:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1134 (0x46e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
        Validity
            Not Before: Aug 22 08:49:37 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C20D5B0184A66293CC17EE04AAD71A1C1F1759A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:ec:0c:21:1f:06:2f:eb:f2:ce:e9:75:86:
                    b2:22:0a:2c:7a:26:06:6b:b6:9a:65:b4:94:97:18:
                    c9:70:42:5c:91:e1:9e:85:f9:d2:58:e7:f2:de:36:
                    42:9d:89:e1:45:4c:8b:56:73:8e:20:3e:08:cb:98:
                    8b:b2:8d:ef:71:cb:eb:c1:98:53:07:5c:54:3e:21:
                    96:a6:fb:ae:45:7b:3c:c0:13:a1:4e:66:8f:17:6c:
                    68:ba:d1:a7:1a:ca:1c:60:d4:fd:62:b0:d2:46:c9:
                    24:43:c6:dd:5f:13:98:bf:d0:50:38:8a:76:6c:05:
                    54:d8:02:29:22:66:db:92:b7:9c:9c:f0:f9:b0:33:
                    fb:a1:8b:37:60:4a:d6:fe:6d:9d:de:5e:4a:04:15:
                    9c:7a:9c:b2:d6:53:e7:eb:1e:cb:cc:d0:bd:14:21:
                    ba:4c:e8:86:38:53:27:1a:35:65:27:e0:26:76:a8:
                    8f:7e:dc:6b:5a:1c:04:48:58:18:75:01:94:5e:ca:
                    d2:41:64:54:44:23:72:50:6e:05:43:c8:cf:47:07:
                    21:87:3c:02:24:f6:9d:6e:d7:81:58:e3:89:c4:fb:
                    fc:1a:5d:3a:ef:3a:a6:1b:54:6a:7c:81:38:1e:8a:
                    4c:6b:0b:9c:d4:ed:39:18:d3:fd:16:b2:01:68:21:
                    bb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0D:5B:01:84:A6:62:93:CC:17:EE:04:AA:D7:1A:1C:1F:17:59:A2
            X509v3 Authority Key Identifier:
                keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/wg1bAYSmYpPMF-4EqtcaHB8XWaI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:2d:4f:1e:bd:f2:9c:03:5d:52:56:ae:06:82:b3:ba:5f:d4:
         38:2c:89:05:d3:81:eb:84:f3:52:f1:8d:26:ad:c3:01:bd:37:
         f3:09:bc:e7:89:ee:61:91:2d:38:46:d1:40:64:16:c1:ad:32:
         1d:bc:e7:a7:0e:10:5e:84:e8:00:9d:2e:e4:28:91:0c:a4:25:
         aa:d7:d6:bf:54:25:d3:11:09:d3:5d:6e:54:c8:ae:7f:f0:52:
         06:1c:7b:a6:29:f3:e3:dd:99:25:5b:51:ca:c5:73:84:52:10:
         18:c9:ce:a7:54:69:20:c4:c1:90:a6:e6:e2:de:d0:6d:ca:d9:
         cd:aa:b8:65:e1:79:62:e7:f3:e7:37:da:fd:80:f3:9a:99:30:
         da:ea:df:1b:86:3c:f6:40:cc:47:bd:b0:a4:d2:7e:d1:2a:fd:
         81:17:57:71:81:93:da:7c:22:8b:ed:e8:ab:19:98:bc:7f:3c:
         09:49:7a:5c:98:56:67:0a:51:5f:03:ac:fd:4a:7d:9e:31:fc:
         35:09:83:63:a2:92:32:03:c8:e3:05:bb:4e:80:ff:5b:0a:73:
         2f:d2:08:b7:51:7f:c5:5a:f9:cc:47:6b:22:85:61:d3:37:e0:
         2d:ae:1b:71:74:e0:06:60:dd:cc:01:27:a6:60:87:b2:04:c4:
         53:fd:ee:17
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 24 13:36:47 2025 by rpki-client