Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/ptyNudxyHCb9YnZRwZg0UvCvUTA.roa
File:                     ptyNudxyHCb9YnZRwZg0UvCvUTA.roa (raw, json)
Hash identifier:          pD466eUGwfszgv91emKjo5pJNE/AyyRdyJJxwzW2Afs=
Subject key identifier:   A6:DC:8D:B9:DC:72:1C:26:FD:62:76:51:C1:98:34:52:F0:AF:51:30
Certificate issuer:       /CN=8D9CD775ACA4F221429B7CD15BF48760D8168543
Certificate serial:       0ECB
Authority key identifier: 8D:9C:D7:75:AC:A4:F2:21:42:9B:7C:D1:5B:F4:87:60:D8:16:85:43
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jZzXdayk8iFCm3zRW_SHYNgWhUM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/ptyNudxyHCb9YnZRwZg0UvCvUTA.roa
Signing time:             Fri 22 Aug 2025 08:58:45 +0000
ROA not before:           Fri 22 Aug 2025 08:58:45 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131651
IP address blocks:        103.139.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/jZzXdayk8iFCm3zRW_SHYNgWhUM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/jZzXdayk8iFCm3zRW_SHYNgWhUM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/jZzXdayk8iFCm3zRW_SHYNgWhUM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3787 (0xecb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D9CD775ACA4F221429B7CD15BF48760D8168543
        Validity
            Not Before: Aug 22 08:58:45 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=A6DC8DB9DC721C26FD627651C1983452F0AF5130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:0b:a0:66:5f:8d:6f:2a:16:11:27:6f:59:
                    8b:1e:48:5e:a4:13:ce:db:0f:15:96:fe:41:72:1f:
                    a6:0a:e7:8f:cb:50:af:2a:b7:2b:07:2c:9d:0c:48:
                    9a:7c:8a:ff:c8:bc:30:6d:89:dc:80:7d:03:97:c8:
                    c6:6f:db:44:75:67:6f:7a:e5:c9:3f:21:77:1c:5c:
                    aa:85:83:7a:ed:9c:be:cd:e3:eb:da:f0:81:90:62:
                    a4:06:fa:e1:bf:f6:41:2e:53:fc:d7:52:04:7e:2b:
                    a6:ed:9e:80:50:ff:d3:f6:2c:c5:0a:ca:71:99:a8:
                    b7:35:2c:7d:68:4f:3d:4d:0e:35:2e:b0:20:f3:e0:
                    5e:5c:0b:7e:c4:15:ea:f7:bd:c7:87:ed:6c:87:ab:
                    41:57:5b:cc:c1:79:79:88:da:61:a9:e3:2f:58:7a:
                    d8:ec:f7:bd:bb:cc:20:67:7d:e5:9f:76:37:02:2b:
                    88:52:42:a0:1f:09:d2:5f:7e:3c:5b:ba:ca:87:ec:
                    54:24:b2:51:4a:87:59:0b:47:ee:56:98:ab:7a:10:
                    f8:d7:eb:91:da:d8:db:6b:53:ef:2b:a0:06:ef:ce:
                    ba:ba:8d:00:28:93:9c:75:5d:cd:27:3f:2e:03:06:
                    1c:14:47:1c:04:26:5b:7f:66:fd:6b:c5:85:14:26:
                    41:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DC:8D:B9:DC:72:1C:26:FD:62:76:51:C1:98:34:52:F0:AF:51:30
            X509v3 Authority Key Identifier:
                keyid:8D:9C:D7:75:AC:A4:F2:21:42:9B:7C:D1:5B:F4:87:60:D8:16:85:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/jZzXdayk8iFCm3zRW_SHYNgWhUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jZzXdayk8iFCm3zRW_SHYNgWhUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/ptyNudxyHCb9YnZRwZg0UvCvUTA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:92:68:28:12:ba:71:e2:e1:0a:a0:bd:23:30:8c:b5:2e:a7:
         23:dd:a7:49:67:88:54:76:d8:7d:46:c3:e5:fc:cc:ba:d9:cc:
         78:84:c6:7c:98:e2:40:a2:c0:20:3f:49:2d:cb:36:f2:d5:18:
         73:ae:dd:49:48:95:8f:45:f7:ec:5a:95:52:fa:03:d0:6a:b2:
         c5:a8:46:ca:e2:88:5c:8f:3d:b3:84:62:81:6b:e1:3b:42:30:
         28:b6:53:90:c3:79:b8:67:94:12:6e:a5:72:0e:59:ba:75:6c:
         da:30:5b:b4:0e:ad:5b:03:3c:bd:16:b0:d2:95:0d:49:c0:9a:
         32:6f:82:77:5b:fb:f3:a4:46:af:55:73:bc:4a:59:9d:a2:c0:
         5b:46:51:17:e0:95:d7:ae:e7:e1:b6:26:41:e9:91:6a:5b:2d:
         49:f6:39:a6:9f:cd:c7:17:c0:a5:f0:0e:ed:e0:a5:88:85:e0:
         7b:eb:c7:60:cf:15:76:61:72:96:28:92:e4:9a:4b:78:3c:d9:
         15:aa:12:f6:01:74:46:41:33:b3:b9:34:08:41:f9:cb:e8:86:
         ea:2f:68:c4:b7:e7:42:f8:9d:b1:08:be:81:57:87:19:73:33:
         b8:6b:f1:14:7e:c2:fc:b3:76:97:52:4c:50:4a:5e:f7:97:36:
         a0:89:2d:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:39:50 2025 by rpki-client