Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/J6UdI39tbtFWrVifqfwShXkJX1Q.roa
File:                     J6UdI39tbtFWrVifqfwShXkJX1Q.roa (raw, json)
Hash identifier:          NBKROC/IU/6GuI30spfFYNVmcIPFPpdmXryj/XoXeAE=
Subject key identifier:   27:A5:1D:23:7F:6D:6E:D1:56:AD:58:9F:A9:FC:12:85:79:09:5F:54
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       08A0
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/J6UdI39tbtFWrVifqfwShXkJX1Q.roa
Signing time:             Fri 22 Aug 2025 09:01:55 +0000
ROA not before:           Fri 22 Aug 2025 09:01:55 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131657
IP address blocks:        103.122.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2208 (0x8a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Aug 22 09:01:55 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=27A51D237F6D6ED156AD589FA9FC128579095F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1f:43:f2:6d:43:bc:1e:71:93:e9:e6:50:38:
                    27:98:d9:50:c0:48:33:c9:14:be:2d:77:ab:ed:37:
                    3d:1c:7e:47:98:9d:6a:91:2d:05:89:82:ca:c5:72:
                    bf:24:e4:b9:46:9f:8c:94:91:05:d7:b9:23:6d:fc:
                    ab:7c:81:13:42:3c:3e:a6:8e:75:66:58:eb:c6:e7:
                    7b:5c:eb:2d:2a:08:c6:d7:be:8d:22:f9:3f:03:46:
                    6a:1a:23:11:d1:ee:ef:6c:72:f7:a7:17:aa:63:84:
                    fb:06:6e:cd:cb:fc:6d:0f:16:45:03:71:39:51:08:
                    0d:6e:f4:1f:89:b1:7e:71:8a:e5:70:ab:52:02:ba:
                    95:4b:7a:c7:73:87:da:a9:9c:9d:83:47:17:ce:08:
                    7d:1f:c8:f5:44:7a:a9:c7:69:b4:d5:2d:5f:c2:18:
                    52:64:28:a5:6f:f6:10:89:a3:48:81:6d:25:97:a8:
                    ad:83:27:3b:ec:ce:22:c5:90:c4:2a:e6:80:9b:6f:
                    fd:9b:95:64:5e:59:c1:c7:b6:70:12:ed:2c:07:03:
                    d4:5d:61:da:ad:c8:c9:53:e9:cd:de:5c:c8:36:71:
                    e9:00:a3:39:59:d4:11:5f:eb:60:45:fa:56:b0:dd:
                    a6:d5:f0:d4:16:b1:2a:c0:60:d7:8e:c4:43:0e:df:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A5:1D:23:7F:6D:6E:D1:56:AD:58:9F:A9:FC:12:85:79:09:5F:54
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/J6UdI39tbtFWrVifqfwShXkJX1Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a0:08:c0:e3:0e:39:ca:23:12:56:48:1b:e4:0e:bf:2d:f3:
         09:c7:40:0b:c7:cf:66:ce:ed:5b:a1:46:de:4a:59:f5:0d:7f:
         b8:50:63:7b:52:de:27:b9:d7:ac:06:ab:57:f1:96:91:16:d4:
         3a:69:ce:e8:d1:95:47:53:ac:ae:09:87:01:9c:17:5e:00:14:
         d8:35:04:aa:57:8c:6f:85:a5:4d:00:cb:39:da:6e:20:1c:ee:
         8a:43:1a:3c:bd:34:68:31:b5:44:35:21:af:30:82:c8:10:13:
         02:18:35:ab:33:49:f4:b8:eb:19:33:aa:f4:e8:68:af:36:bf:
         29:7d:68:83:dc:c1:fc:5f:b6:82:14:35:d4:f4:0d:8f:df:62:
         f3:25:68:44:90:b7:62:97:99:5f:28:ea:d2:b2:0c:b0:36:5e:
         a4:da:3f:2c:f3:1a:ef:f7:f8:a6:72:4e:ff:59:8c:bb:dd:5a:
         13:34:33:50:ca:0a:bb:4a:89:36:16:b5:f6:d5:b1:2e:96:7c:
         fe:9d:61:66:16:8f:00:39:72:cf:3f:b9:ab:10:2e:41:50:29:
         07:7e:fd:17:e5:05:c7:c5:54:d2:60:5b:f0:a5:b4:1b:53:6c:
         80:aa:7a:06:01:aa:5c:5b:62:11:17:84:4c:19:2c:9b:10:e7:
         d7:bb:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:09:46 2025 by rpki-client