Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/ue8ObbvhrPR9k0_3_F1w0o356Fk.roa
File:                     ue8ObbvhrPR9k0_3_F1w0o356Fk.roa (raw, json)
Hash identifier:          FcDDAfkU5IpDDCnf7d+sMXWWLEzheC1DKOywSCLIFBg=
Subject key identifier:   B9:EF:0E:6D:BB:E1:AC:F4:7D:93:4F:F7:FC:5D:70:D2:8D:F9:E8:59
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       0859
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/ue8ObbvhrPR9k0_3_F1w0o356Fk.roa
Signing time:             Fri 22 Aug 2025 08:44:23 +0000
ROA not before:           Fri 22 Aug 2025 08:44:23 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17415
IP address blocks:        103.152.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2137 (0x859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Aug 22 08:44:23 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B9EF0E6DBBE1ACF47D934FF7FC5D70D28DF9E859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:c6:6b:ad:22:c0:dc:0d:81:1b:6e:cf:d3:
                    61:8f:d8:fb:ae:9a:12:83:67:ae:6c:c5:e3:b8:c9:
                    39:24:1b:52:b6:1b:22:60:33:b4:ff:e1:ed:bb:fc:
                    1a:31:1e:01:62:db:da:b3:27:5e:30:c9:79:37:e9:
                    55:14:72:f1:3a:6b:44:fe:2c:ff:8b:26:98:71:a4:
                    d0:bb:49:2d:21:eb:b5:6d:27:bc:a9:0e:88:a6:60:
                    f3:6c:a5:61:df:30:14:65:20:2c:06:cf:00:05:92:
                    1d:1f:87:09:f0:92:36:3d:82:75:1d:76:35:64:87:
                    b2:5a:f4:8b:8f:2a:28:e1:2f:1b:da:67:6c:8e:67:
                    dc:09:b5:e2:85:63:5e:f2:91:03:ff:51:2c:45:c5:
                    6a:d3:40:9a:25:a4:51:a6:56:90:27:ed:98:c4:d6:
                    b6:2f:ba:d8:0f:70:a3:44:2a:73:69:9d:c3:22:57:
                    40:12:2d:25:30:59:64:95:b3:8c:f5:ce:95:d8:a3:
                    e0:79:b6:81:8c:26:15:58:15:2a:74:1b:90:e6:e3:
                    d0:8c:ca:8a:46:2e:7f:14:1c:80:83:41:65:a5:fa:
                    3e:84:4c:4f:53:76:c0:38:c1:77:fa:24:87:1d:2d:
                    92:be:49:db:80:ec:2c:ad:ce:39:54:cb:bb:1f:60:
                    46:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EF:0E:6D:BB:E1:AC:F4:7D:93:4F:F7:FC:5D:70:D2:8D:F9:E8:59
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/ue8ObbvhrPR9k0_3_F1w0o356Fk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:65:b0:cb:67:4d:7b:7f:49:3b:b8:68:59:5a:58:cc:85:8f:
         d5:14:c8:7e:89:dc:42:42:81:9c:31:96:55:d7:36:0c:f3:a1:
         9a:57:b9:6e:05:22:f6:fd:6c:70:48:d9:9a:65:2b:53:21:87:
         79:61:38:a3:f6:fa:19:f6:07:fb:b3:9f:91:d8:39:2d:66:c2:
         ae:d1:2d:1a:1d:ca:8f:01:62:1e:c7:4e:28:5c:fe:8b:2f:61:
         d8:4d:f8:aa:f8:1a:ec:16:cb:ce:67:5a:1a:a5:ef:fb:26:e6:
         a8:7d:66:22:c9:3f:a6:25:29:85:bb:e7:b0:ea:7a:52:a6:13:
         c0:ab:2f:81:2e:06:3e:80:b3:cb:ca:33:b6:8e:52:55:78:9f:
         3a:1a:99:ce:07:94:82:f5:af:50:62:6c:8e:25:59:23:06:a2:
         98:a1:4c:5d:0d:fb:f5:95:29:3b:25:c0:13:e7:fb:75:b6:8f:
         1b:17:f8:ea:d3:5f:58:66:b8:dd:67:c8:b3:dc:e7:d1:bb:08:
         9e:50:51:b1:33:74:d3:15:ee:7d:94:aa:fe:7a:cd:a1:13:5f:
         78:94:86:ab:77:0a:1c:c5:75:e4:a9:fb:01:96:47:12:48:38:
         ef:ef:14:f3:9b:3b:fd:2c:67:46:f7:be:77:90:61:c2:b1:db:
         14:26:be:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:45:12 2025 by rpki-client