Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MOMOKA/UMTuHIUGa1fRSpLXY3eZq1Wwtig.roa
File:                     UMTuHIUGa1fRSpLXY3eZq1Wwtig.roa (raw, json)
Hash identifier:          zho6hfmhKOxA7AgGDTNZKqplQ2BOpcOHEJBSOGd+VCs=
Subject key identifier:   50:C4:EE:1C:85:06:6B:57:D1:4A:92:D7:63:77:99:AB:55:B0:B6:28
Certificate issuer:       /CN=32D2C54082FCCEBB5BA954EDA20608AA4C633B6E
Certificate serial:       03CF
Authority key identifier: 32:D2:C5:40:82:FC:CE:BB:5B:A9:54:ED:A2:06:08:AA:4C:63:3B:6E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/MtLFQIL8zrtbqVTtogYIqkxjO24.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MOMOKA/UMTuHIUGa1fRSpLXY3eZq1Wwtig.roa
Signing time:             Fri 22 Aug 2025 08:51:14 +0000
ROA not before:           Fri 22 Aug 2025 08:51:14 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     208137
IP address blocks:        103.179.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MOMOKA/MtLFQIL8zrtbqVTtogYIqkxjO24.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MOMOKA/MtLFQIL8zrtbqVTtogYIqkxjO24.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MtLFQIL8zrtbqVTtogYIqkxjO24.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 975 (0x3cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D2C54082FCCEBB5BA954EDA20608AA4C633B6E
        Validity
            Not Before: Aug 22 08:51:14 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=50C4EE1C85066B57D14A92D7637799AB55B0B628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:45:9b:1d:5f:77:85:46:c5:57:22:d8:26:
                    a1:f5:78:d0:05:c0:92:18:d4:9b:1e:34:14:c2:b1:
                    10:81:5a:23:87:c5:e0:e5:92:40:c9:ce:11:3b:fc:
                    77:db:3c:b7:0a:7d:fd:3e:dc:b7:fb:ba:d4:3d:9c:
                    b0:e9:0a:af:f8:70:54:fe:42:c2:80:38:fd:62:53:
                    de:1b:c8:72:cc:43:dd:fa:e1:4d:d5:96:3b:74:d5:
                    72:7c:64:bd:cf:9f:6a:3c:21:01:cf:fa:02:fb:d9:
                    2f:e0:19:80:d2:97:f5:7a:85:6c:8b:91:78:42:f7:
                    8f:eb:5e:84:cd:b9:5d:29:10:ef:2a:6e:46:9d:48:
                    a7:dc:f6:ee:d7:8f:0a:05:fa:2e:56:de:31:a6:32:
                    30:f7:fc:c1:15:b1:ae:1e:61:a1:55:49:91:d0:af:
                    16:a2:16:a3:a0:9c:7c:7d:9d:7c:32:a3:c3:eb:14:
                    b2:18:e4:d1:ab:5d:cd:9d:7e:6d:df:d8:cc:70:ae:
                    a0:95:dc:be:51:50:95:f0:7c:5e:fa:47:df:8b:c5:
                    f3:74:cc:32:1c:55:2c:b9:c6:33:11:95:b8:f0:54:
                    90:83:17:41:33:7f:53:a2:80:2a:6d:f3:06:6b:b0:
                    13:94:53:c7:be:33:91:e8:3b:ac:43:82:f0:99:b3:
                    75:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C4:EE:1C:85:06:6B:57:D1:4A:92:D7:63:77:99:AB:55:B0:B6:28
            X509v3 Authority Key Identifier:
                keyid:32:D2:C5:40:82:FC:CE:BB:5B:A9:54:ED:A2:06:08:AA:4C:63:3B:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOMOKA/MtLFQIL8zrtbqVTtogYIqkxjO24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MtLFQIL8zrtbqVTtogYIqkxjO24.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOMOKA/UMTuHIUGa1fRSpLXY3eZq1Wwtig.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:e2:8d:c6:4d:eb:0a:62:e4:fd:cf:5d:f9:b4:53:71:c1:ed:
         a3:9f:c0:d9:3b:61:1a:9e:80:ca:44:04:43:8f:e5:85:00:e2:
         c6:08:a4:dc:dd:f2:f7:93:c8:75:16:9a:70:62:5c:de:ce:cb:
         0c:84:47:9d:78:48:3a:72:2e:2f:81:e9:db:aa:0d:95:17:55:
         be:f4:ab:49:7a:6c:c8:7a:67:74:8e:1b:09:7a:78:42:82:cf:
         d5:29:15:bb:eb:e3:57:bd:00:07:bc:77:12:3a:e2:e9:0d:a8:
         42:6c:1f:be:f4:c8:2c:4a:bc:12:d2:a3:0c:7f:cf:42:82:19:
         69:b4:b3:7c:08:c6:17:5d:54:62:8e:ff:6b:d4:4f:e5:e7:bf:
         a3:70:91:f1:a6:7c:b6:66:3e:ea:a0:cb:e2:91:80:03:0e:53:
         ea:ae:9c:85:af:a6:4c:27:a1:13:87:ad:e8:79:b8:ae:4d:a6:
         07:9c:7e:9a:ed:56:b4:b6:18:a5:98:1d:bd:d1:7d:5a:81:a8:
         5e:25:b3:de:c3:83:ef:91:f9:5f:c4:bf:ca:ad:0f:4e:a5:8a:
         4d:17:69:6d:02:2e:d1:9a:43:88:de:f4:aa:bb:57:f4:6c:c6:
         70:d4:e5:43:53:88:05:03:6e:62:eb:eb:ec:43:8f:67:c3:0e:
         63:a7:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:39:52 2025 by rpki-client