Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/NmQ8BBO4LonT-eQgYmHCbTR5cGY.roa
File:                     NmQ8BBO4LonT-eQgYmHCbTR5cGY.roa (raw, json)
Hash identifier:          700LtPQZ2bjcgwvKuHHVtaaWjPWIvcgjXu3X81p8dNQ=
Subject key identifier:   36:64:3C:04:13:B8:2E:89:D3:F9:E4:20:62:61:C2:6D:34:79:70:66
Certificate issuer:       /CN=09C34B8ACA620F628C7A1E6821440EEE680E4CD8
Certificate serial:       0113
Authority key identifier: 09:C3:4B:8A:CA:62:0F:62:8C:7A:1E:68:21:44:0E:EE:68:0E:4C:D8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/NmQ8BBO4LonT-eQgYmHCbTR5cGY.roa
Signing time:             Fri 22 Aug 2025 09:01:30 +0000
ROA not before:           Fri 22 Aug 2025 09:01:30 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131683
IP address blocks:        103.161.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09C34B8ACA620F628C7A1E6821440EEE680E4CD8
        Validity
            Not Before: Aug 22 09:01:30 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=36643C0413B82E89D3F9E4206261C26D34797066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:24:7a:3a:a2:7b:3d:5e:77:7c:d2:03:09:
                    97:f4:ec:00:a5:62:62:7e:45:00:3e:bc:be:82:de:
                    fa:00:ce:f3:d1:93:0e:4c:46:00:77:c3:7e:bf:7f:
                    62:a8:03:2f:ac:2a:47:f3:c0:d1:c2:44:48:14:d5:
                    53:ee:33:b1:ca:ff:4f:d1:c5:9a:3d:2a:48:03:31:
                    81:26:da:24:c3:ad:6a:0d:41:42:a3:c2:e3:14:b1:
                    55:26:29:db:25:14:49:76:86:4d:85:6c:20:6a:fb:
                    7b:93:d6:0d:b8:53:30:c8:d7:c3:88:9e:a4:d3:ac:
                    2b:e5:99:b7:a0:6a:7a:50:62:d4:09:92:2d:de:66:
                    ee:31:7f:d5:6d:9a:70:70:a9:55:bf:47:82:01:64:
                    e3:5e:22:e0:02:68:4b:62:e2:e3:d4:65:7a:de:ec:
                    97:a5:91:a9:c0:05:21:df:f2:c1:f0:b0:ab:77:6b:
                    ec:bf:2c:53:2e:8a:e1:02:ca:07:64:af:35:2d:ff:
                    0e:6c:44:59:f4:7f:ed:bb:46:c5:24:87:71:ae:c4:
                    e8:49:b0:8a:b6:36:0a:7d:c0:06:a6:34:b3:fc:cb:
                    96:44:06:8a:22:70:a9:79:3d:2e:97:44:09:c7:aa:
                    ce:53:92:67:39:12:5d:2e:9f:b5:2d:8b:85:3f:18:
                    14:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:64:3C:04:13:B8:2E:89:D3:F9:E4:20:62:61:C2:6D:34:79:70:66
            X509v3 Authority Key Identifier:
                keyid:09:C3:4B:8A:CA:62:0F:62:8C:7A:1E:68:21:44:0E:EE:68:0E:4C:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/NmQ8BBO4LonT-eQgYmHCbTR5cGY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:62:ac:45:0d:38:66:e3:fa:21:12:f7:6e:77:9a:48:43:d1:
         45:59:9c:5d:ff:75:75:eb:6b:db:33:6e:95:2c:fa:7a:db:49:
         e1:45:96:c9:f0:2b:22:89:4b:e1:ee:72:26:a2:48:ec:85:6c:
         8c:d8:e4:c8:c8:e3:bd:c1:7a:1c:bc:45:76:e7:21:ba:69:04:
         c4:e2:4f:c3:a0:0e:fa:9f:51:69:7b:5e:c2:b5:b1:b8:e9:44:
         d7:e9:bb:f6:42:01:2a:5f:19:ac:88:a1:66:50:23:b9:24:b3:
         0b:15:35:6b:77:46:f5:d9:f9:90:5d:17:54:37:d6:f4:17:6e:
         26:a0:89:26:96:c7:08:0e:a0:a6:1a:ea:f1:76:d5:6e:c8:be:
         de:07:7f:38:ce:7a:f2:a3:4e:c0:b2:73:47:21:d3:10:e8:cc:
         6c:69:c9:e7:d9:06:a3:af:42:5e:83:6c:88:8e:7f:8d:29:63:
         09:02:1d:29:8a:07:c9:9d:e6:ca:90:ee:e1:11:ef:f0:5a:88:
         59:7c:01:3a:34:fe:40:db:9f:07:8d:80:bd:9c:bc:72:98:6c:
         ff:99:27:1c:0f:b9:c4:33:8b:ac:eb:d2:ec:14:f4:4a:7d:96:
         27:02:99:14:8d:fe:76:a3:69:82:71:a8:ca:15:44:8f:bf:28:
         2e:53:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:43:36 2025 by rpki-client