Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCRS/nsVXvlaZC5sjPThoV6_6cGAPe5Y.roa
File:                     nsVXvlaZC5sjPThoV6_6cGAPe5Y.roa (raw, json)
Hash identifier:          fclIkSTECSk8GNoe6PnsG3XKY/t9UJJdEsw0zNRyhbk=
Subject key identifier:   9E:C5:57:BE:56:99:0B:9B:23:3D:38:68:57:AF:FA:70:60:0F:7B:96
Certificate issuer:       /CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
Certificate serial:       0413
Authority key identifier: 22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/nsVXvlaZC5sjPThoV6_6cGAPe5Y.roa
Signing time:             Fri 22 Aug 2025 08:51:41 +0000
ROA not before:           Fri 22 Aug 2025 08:51:41 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     213607
IP address blocks:        103.177.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043 (0x413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
        Validity
            Not Before: Aug 22 08:51:41 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=9EC557BE56990B9B233D386857AFFA70600F7B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:a8:72:b8:49:b6:8e:3e:9e:d8:52:41:f2:
                    58:94:df:e5:dc:70:03:31:b4:cf:24:00:0f:b8:c0:
                    a8:ab:2d:ac:c1:04:fc:9f:7a:67:2f:42:ff:5e:5b:
                    85:a6:80:34:30:8d:1c:9c:96:3f:c3:7a:79:f4:20:
                    3b:38:f8:ea:63:0e:3b:54:c5:7c:ac:79:ce:5e:fb:
                    28:81:84:aa:b8:d8:55:bd:ee:f0:08:de:38:98:15:
                    5f:fc:64:e6:6d:77:ee:8f:66:85:fa:79:ac:c0:0b:
                    44:30:56:76:b9:fb:54:a2:d5:a2:d3:31:45:ac:0e:
                    d5:d0:6d:2d:51:5f:97:06:2f:8b:26:22:7d:ff:7d:
                    c1:f0:e1:d2:a7:ef:08:76:4e:8f:fc:c8:3c:c2:79:
                    fc:f1:df:78:55:5c:3d:d3:d4:d2:20:80:0d:4f:1b:
                    d6:66:46:63:a3:a0:a1:e5:ac:15:ce:30:9c:6d:9c:
                    b5:f9:85:2f:05:57:72:26:c4:e9:5e:9c:d8:8f:ca:
                    6d:77:2d:5b:d7:0f:14:29:c5:2a:76:f2:96:a4:af:
                    ba:5f:03:3f:30:9a:46:02:97:f0:d0:a3:48:d4:90:
                    d2:e1:c2:e6:f8:04:02:8b:64:af:62:f9:4f:1d:88:
                    71:b2:49:df:5d:ce:26:5e:2a:a5:84:50:48:c6:0e:
                    8a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C5:57:BE:56:99:0B:9B:23:3D:38:68:57:AF:FA:70:60:0F:7B:96
            X509v3 Authority Key Identifier:
                keyid:22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/nsVXvlaZC5sjPThoV6_6cGAPe5Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:fb:09:02:b8:c2:df:a7:0d:dd:93:8a:c7:00:90:e3:1f:06:
         0e:49:f5:e5:9d:98:5d:b3:f4:61:7a:8d:26:11:8b:51:44:7c:
         39:61:9f:6d:4b:71:4d:65:cd:1d:d6:ce:28:3b:72:74:e4:ef:
         da:9e:cb:22:49:7a:64:e1:bd:e7:63:19:f3:a7:df:b1:af:3e:
         b8:c8:7c:c8:42:4f:9e:61:1f:e8:c5:9c:54:fe:80:5e:e2:bd:
         dd:0b:de:a9:db:5f:8f:ea:3b:cb:3a:db:f9:2d:ed:1d:22:0b:
         09:34:62:ca:26:4a:2d:98:13:33:e6:43:95:0f:29:2d:20:8f:
         57:47:41:e7:1d:6d:4e:67:ca:8f:88:5b:e1:8f:2b:7a:67:c5:
         f4:97:3a:2d:e6:2f:f5:12:fd:76:30:2e:fa:4e:f3:30:24:fe:
         b8:d6:52:55:16:47:12:9f:f0:d3:eb:0e:0e:36:6b:d4:e5:c6:
         cf:87:fb:dd:39:be:0c:ee:29:18:67:38:16:29:24:58:2c:43:
         db:3f:87:85:a0:90:56:7a:0d:f9:b7:21:ec:a3:80:c4:b5:bd:
         58:d0:85:b9:15:8c:19:f6:27:4a:4a:74:2d:71:1f:99:70:99:
         2a:26:f3:49:ed:57:b3:f0:3f:8d:cf:93:4c:d7:d2:28:03:44:
         32:7f:41:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:45:14 2025 by rpki-client