Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/eE_Na3RqzG5Gch0eoq7FpEiKrvA.roa
File:                     eE_Na3RqzG5Gch0eoq7FpEiKrvA.roa (raw, json)
Hash identifier:          g5BIhfu3yzJWkfYmX/o8swbnnbhBZQEVR70QMUX/eBE=
Subject key identifier:   78:4F:CD:6B:74:6A:CC:6E:46:72:1D:1E:A2:AE:C5:A4:48:8A:AE:F0
Certificate issuer:       /CN=2B3B89AD32F3B95B7AF165F4C8A4CD08E754D5AB
Certificate serial:       0419
Authority key identifier: 2B:3B:89:AD:32:F3:B9:5B:7A:F1:65:F4:C8:A4:CD:08:E7:54:D5:AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KzuJrTLzuVt68WX0yKTNCOdU1as.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/eE_Na3RqzG5Gch0eoq7FpEiKrvA.roa
Signing time:             Fri 22 Aug 2025 08:51:05 +0000
ROA not before:           Fri 22 Aug 2025 08:51:05 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     40065
IP address blocks:        103.175.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/KzuJrTLzuVt68WX0yKTNCOdU1as.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/KzuJrTLzuVt68WX0yKTNCOdU1as.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KzuJrTLzuVt68WX0yKTNCOdU1as.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B3B89AD32F3B95B7AF165F4C8A4CD08E754D5AB
        Validity
            Not Before: Aug 22 08:51:05 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=784FCD6B746ACC6E46721D1EA2AEC5A4488AAEF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8c:32:b5:2c:4b:e9:70:6f:b5:8b:3f:25:61:
                    d6:b1:7d:42:cb:a2:85:81:af:25:6a:f1:96:2f:ba:
                    bf:32:69:cc:07:1f:ca:98:44:28:1e:98:a8:b1:a3:
                    07:b1:4d:3d:e7:32:56:8e:b6:3b:d1:36:ae:9e:2f:
                    21:8b:1f:db:5d:53:57:ce:6f:c5:9f:2f:34:1c:d8:
                    70:05:e6:58:d2:d3:5f:a6:cd:0a:55:1d:0a:3a:ad:
                    58:ee:4b:f6:44:b2:28:98:10:a1:0e:72:df:22:4d:
                    96:76:e4:18:60:64:95:35:af:b4:29:6b:c7:b3:32:
                    f7:2a:a6:b6:e1:62:99:05:ab:98:7a:22:e4:e8:08:
                    09:93:38:41:1e:87:f9:93:2e:87:da:58:88:2d:a1:
                    65:a8:14:d7:f7:55:c9:7b:c7:0e:46:08:8e:93:e6:
                    6f:e1:eb:08:5b:6b:3d:cf:d1:75:e3:a4:44:1f:2f:
                    ef:c1:aa:78:71:7f:9a:5d:e5:ff:da:78:ec:f3:d3:
                    59:77:70:12:96:33:f2:32:01:93:c1:03:90:4e:02:
                    e9:7f:a2:04:c0:b1:33:9b:c2:aa:77:5e:4a:b3:29:
                    36:f3:83:a6:15:7f:21:69:5b:0a:9f:94:a6:7d:8e:
                    df:0c:43:26:6b:03:50:9a:dd:ab:1a:4c:73:60:57:
                    4e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4F:CD:6B:74:6A:CC:6E:46:72:1D:1E:A2:AE:C5:A4:48:8A:AE:F0
            X509v3 Authority Key Identifier:
                keyid:2B:3B:89:AD:32:F3:B9:5B:7A:F1:65:F4:C8:A4:CD:08:E7:54:D5:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/KzuJrTLzuVt68WX0yKTNCOdU1as.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KzuJrTLzuVt68WX0yKTNCOdU1as.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/eE_Na3RqzG5Gch0eoq7FpEiKrvA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:96:02:78:44:fc:f7:f2:40:4c:32:2e:96:69:fd:f5:f0:ef:
         ce:9f:31:57:da:4d:87:5a:af:a9:d8:ae:cc:df:22:e5:c3:34:
         7b:c5:a6:cd:fe:5c:77:c8:2c:32:7a:9b:0d:08:56:67:05:93:
         92:be:58:d3:74:ee:8d:e6:8c:0a:02:34:97:b0:ad:46:3d:93:
         81:e1:03:e0:ef:db:d5:26:a7:f1:73:87:2e:b4:bc:40:eb:45:
         59:3b:6f:c5:b9:61:29:e0:ae:87:24:06:c8:db:77:a2:93:82:
         e0:65:25:86:11:e1:3e:6e:6c:7b:88:9d:49:9b:d6:1b:e7:e0:
         48:10:d5:09:ab:2f:f8:74:e9:9f:3d:7f:35:3a:a0:8e:67:b2:
         69:b8:ce:48:1b:29:91:00:5a:b4:ec:6e:0b:ef:f3:b4:af:8e:
         28:f3:19:d9:5d:4e:6a:e8:e2:eb:16:3b:50:04:26:33:69:87:
         2d:d9:49:6b:0a:25:25:f5:57:4d:a8:92:f0:b1:f1:15:35:47:
         8b:2a:48:08:05:52:30:32:33:e4:5b:f1:10:2c:b8:dc:06:bb:
         2e:5e:78:8d:6a:33:8c:54:66:39:04:e0:08:18:f5:7a:c6:c1:
         f2:bd:e2:16:a8:50:07:ae:69:a9:82:0d:a1:a5:c4:ed:30:05:
         16:be:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:42:38 2025 by rpki-client