Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/FUXuk2vn6bIce9bKUsjgcU3uKuA.roa
File:                     FUXuk2vn6bIce9bKUsjgcU3uKuA.roa (raw, json)
Hash identifier:          AlEHns3LLEzjhg4CMpFq+KVvLFXubOBq1MABYszcBx4=
Subject key identifier:   15:45:EE:93:6B:E7:E9:B2:1C:7B:D6:CA:52:C8:E0:71:4D:EE:2A:E0
Certificate issuer:       /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Certificate serial:       03E7
Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/FUXuk2vn6bIce9bKUsjgcU3uKuA.roa
Signing time:             Fri 22 Aug 2025 08:55:56 +0000
ROA not before:           Fri 22 Aug 2025 08:55:56 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38047
IP address blocks:        103.182.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999 (0x3e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
        Validity
            Not Before: Aug 22 08:55:56 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=1545EE936BE7E9B21C7BD6CA52C8E0714DEE2AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:99:2b:1e:14:71:a0:3c:f9:7c:77:15:c2:
                    05:42:08:9b:34:fa:dd:f8:05:63:06:7d:08:dc:f6:
                    bb:6e:12:da:23:f8:3f:42:dc:83:e0:34:71:a4:5f:
                    c2:74:63:4a:2c:de:cf:5b:7e:e6:49:cf:ab:76:35:
                    76:3d:3c:96:a9:a1:a6:3d:1a:19:ff:c6:04:ef:25:
                    fb:e7:bd:67:e0:b1:e1:08:5a:85:4e:bb:8d:50:13:
                    56:36:30:a3:fc:d5:23:03:81:4f:6d:dd:a4:60:b2:
                    a1:c2:a6:e7:f1:b6:b1:81:e5:c9:7d:4f:2a:66:52:
                    cd:fc:b7:78:4e:d1:57:25:ec:f4:72:cd:aa:6d:34:
                    a3:07:b4:e9:da:99:36:95:8c:80:a5:35:85:52:6b:
                    8b:b9:da:a9:fa:43:d5:3e:28:7d:46:0e:b3:55:a3:
                    78:b1:c5:53:3f:68:f0:f6:e5:91:0f:90:5a:89:00:
                    b3:13:0d:66:96:81:04:a7:24:1f:46:e5:36:bf:81:
                    0d:d7:51:7e:06:49:00:a2:e0:e9:bb:84:c7:c5:51:
                    e5:ad:66:b8:b8:14:ee:0b:86:8f:e3:f2:49:ab:6b:
                    a0:53:a3:b9:75:ed:95:cb:1f:c2:51:d8:4f:39:7d:
                    08:8b:78:6e:05:22:44:21:5d:c5:c8:55:4b:38:88:
                    77:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:45:EE:93:6B:E7:E9:B2:1C:7B:D6:CA:52:C8:E0:71:4D:EE:2A:E0
            X509v3 Authority Key Identifier:
                keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/FUXuk2vn6bIce9bKUsjgcU3uKuA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:99:e7:ee:98:c8:bf:1a:d0:96:71:7b:3b:53:fa:b7:ac:7c:
         3a:61:d3:0b:6c:d9:cb:61:35:75:d4:97:22:72:fd:97:16:67:
         38:d3:7c:0d:be:9f:34:13:c8:72:fe:ed:32:a6:34:5b:9e:93:
         05:53:2c:11:09:0f:c1:a9:39:b4:95:4c:73:1c:44:51:ad:3c:
         1b:9e:b2:86:01:9c:06:82:4e:44:a1:c0:bd:d2:d4:28:a2:95:
         e1:4a:8f:65:4d:4a:9d:ad:74:57:d9:9e:ce:81:38:81:88:68:
         95:ea:2d:f9:73:84:ea:24:80:d3:e4:93:d2:77:2f:40:05:59:
         03:65:05:77:c4:27:a4:73:9c:e9:11:43:d4:ef:e3:34:3d:5c:
         a0:e8:e0:38:4f:5c:81:6b:fd:1c:30:ba:95:79:26:9d:75:d9:
         9c:8d:e7:f5:a2:ec:59:b1:20:32:f0:5d:01:ab:04:4c:5a:c3:
         82:73:7d:fe:1f:98:60:db:d8:0c:c4:a1:7d:40:ce:ab:7e:23:
         16:78:c0:9b:46:7e:9e:ca:d3:10:56:c2:78:50:cf:68:de:fb:
         5e:21:00:31:27:a6:94:5d:03:73:20:a4:a9:b2:c7:ff:94:73:
         82:c3:1a:3b:42:3f:1c:4a:69:ad:8b:04:b0:85:31:27:31:45:
         45:fa:6c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:16:37 2025 by rpki-client