Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/4kC2bULq9anW24g_vx8krkcsdBo.roa
File:                     4kC2bULq9anW24g_vx8krkcsdBo.roa (raw, json)
Hash identifier:          7HlPeNFEe2YJl9Kvh28TwPAzDY//LorhcGKITfQzFow=
Subject key identifier:   E2:40:B6:6D:42:EA:F5:A9:D6:DB:88:3F:BF:1F:24:AE:47:2C:74:1A
Certificate issuer:       /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Certificate serial:       03E4
Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/4kC2bULq9anW24g_vx8krkcsdBo.roa
Signing time:             Fri 22 Aug 2025 08:55:56 +0000
ROA not before:           Fri 22 Aug 2025 08:55:56 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38047
IP address blocks:        103.182.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 996 (0x3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
        Validity
            Not Before: Aug 22 08:55:56 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E240B66D42EAF5A9D6DB883FBF1F24AE472C741A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:65:4b:f7:63:55:45:39:50:cf:0d:d9:84:b5:
                    c0:c7:b7:e6:73:e8:41:f8:9e:b1:39:29:62:bf:5d:
                    03:81:93:2c:dd:04:da:aa:5c:65:da:c7:c9:c0:83:
                    3d:fd:2f:ea:b4:50:45:b1:c2:2a:95:25:50:e5:68:
                    ad:a9:c7:50:4d:f0:4c:a5:45:5d:55:f1:cd:4a:14:
                    5c:8e:45:cc:7e:c4:3a:42:8b:fd:12:40:a0:ea:2a:
                    92:21:d9:c7:51:b5:28:39:96:63:37:42:67:8b:61:
                    1f:26:9e:f9:0b:99:67:cf:93:7d:78:ff:9d:c4:18:
                    26:ef:35:a2:58:62:d4:eb:c6:a4:95:ff:73:6e:47:
                    e8:aa:47:97:87:8b:ca:9e:62:d9:f2:8e:4a:0a:73:
                    42:12:8b:44:42:cb:5c:b5:27:a2:21:71:62:fc:e0:
                    e9:b3:05:24:5b:7a:26:b0:09:59:49:4b:f2:2e:ef:
                    8b:c8:1a:0b:16:f9:25:4d:7e:26:d6:ad:02:73:ee:
                    3a:db:04:67:55:d1:10:f0:4a:fa:f3:c1:7e:61:72:
                    ee:52:70:69:4d:34:bc:a1:a5:36:ae:bd:31:f0:e2:
                    59:8b:c9:87:12:56:69:73:1f:5f:88:c0:da:f2:89:
                    3b:0c:f0:2f:21:f6:c8:3c:9f:ea:83:12:22:97:5f:
                    fe:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:40:B6:6D:42:EA:F5:A9:D6:DB:88:3F:BF:1F:24:AE:47:2C:74:1A
            X509v3 Authority Key Identifier:
                keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/4kC2bULq9anW24g_vx8krkcsdBo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:f0:1e:c0:60:e9:76:1b:73:34:2b:ba:4b:09:b2:1e:b9:54:
         12:6e:cc:5d:49:59:c5:58:b9:e8:6c:a0:52:b8:4f:f6:a1:12:
         21:e1:b6:44:06:fa:1a:79:1a:dd:6e:48:a4:92:89:4a:fc:ab:
         b9:3a:c3:15:68:84:e0:44:cd:2e:47:fa:4b:f4:60:eb:52:0b:
         98:3e:59:2e:4a:c9:2b:52:02:92:8c:c4:fc:6f:01:b7:d5:28:
         35:59:16:fa:0b:99:2b:f8:22:78:a8:e9:2b:fb:21:1f:51:99:
         4d:cd:5c:77:cb:26:9c:7a:33:0d:75:1b:69:5a:56:64:17:de:
         3f:96:e6:32:e1:fc:9a:c1:1d:3c:4c:52:a7:1b:08:c4:2c:9a:
         1b:3d:65:f7:a5:45:b7:49:9b:39:e1:f3:d4:bc:09:e6:f3:18:
         44:99:90:55:f9:89:f8:55:21:44:c5:23:eb:c6:81:35:56:7d:
         6b:a0:b4:dc:e8:7c:f9:14:cb:85:de:82:9f:18:12:58:7c:55:
         fb:9b:d1:1c:28:ad:6c:51:bf:c4:19:72:fb:81:a2:f0:0e:d4:
         80:ed:c6:37:72:26:d3:01:f2:95:c4:ce:87:09:3a:24:4e:9f:
         9b:7d:cc:a3:71:83:86:da:63:24:b8:f9:ca:b1:4b:ae:05:88:
         3c:4e:d1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:15:32 2025 by rpki-client