Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/V8xFM209d0-dvMcIfW9XF0bvwSM.roa
File:                     V8xFM209d0-dvMcIfW9XF0bvwSM.roa (raw, json)
Hash identifier:          QRQSk5+Io+2yBdALt4ALwxuBwk1CWYPUXMWWZEzp3Fo=
Subject key identifier:   57:CC:45:33:6D:3D:77:4F:9D:BC:C7:08:7D:6F:57:17:46:EF:C1:23
Certificate issuer:       /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial:       0DB9
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/V8xFM209d0-dvMcIfW9XF0bvwSM.roa
Signing time:             Fri 22 Aug 2025 08:49:48 +0000
ROA not before:           Fri 22 Aug 2025 08:49:48 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4781
IP address blocks:        210.63.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3513 (0xdb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
        Validity
            Not Before: Aug 22 08:49:48 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=57CC45336D3D774F9DBCC7087D6F571746EFC123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c8:14:03:d0:59:55:e5:84:1f:2e:1c:b6:c5:
                    e0:d9:9c:4f:3a:c9:ce:8e:87:a7:00:4a:e1:9c:60:
                    b2:9e:8a:d1:41:b1:40:c2:d2:a9:29:40:a9:b1:eb:
                    66:15:70:10:c6:73:ae:de:32:7d:cf:45:62:97:72:
                    53:72:56:26:ff:c9:09:00:e0:47:fd:ad:93:0d:97:
                    9a:c8:a6:9d:f7:1f:57:1e:c1:2e:cd:6d:a9:c4:cf:
                    5f:c7:2d:80:34:bf:f1:35:4d:44:6d:c6:08:b4:f9:
                    0e:56:b2:3b:e1:a3:4e:02:47:9d:9a:97:77:c1:68:
                    d5:df:3d:59:80:ac:6a:db:42:74:26:9d:f5:c0:36:
                    a8:eb:ef:d4:cc:25:f9:b9:99:72:55:66:2b:e3:af:
                    89:62:7f:e6:0a:78:e8:2e:d3:df:37:2e:ff:6e:06:
                    dd:de:78:8a:5c:2d:7a:58:80:72:29:ea:0b:40:62:
                    55:39:43:21:0a:a7:a2:80:9c:c1:36:b0:ef:c3:f4:
                    ee:5c:fa:39:60:2f:b3:27:e8:f1:d5:58:72:01:b3:
                    5a:f5:12:54:61:c9:ba:99:6d:21:ea:ae:ad:07:70:
                    1e:7c:2a:ba:13:f8:5f:54:e2:7c:0e:58:ed:5b:d7:
                    aa:5e:9e:4d:d8:25:a9:7f:81:98:60:eb:9b:ad:cb:
                    5e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CC:45:33:6D:3D:77:4F:9D:BC:C7:08:7D:6F:57:17:46:EF:C1:23
            X509v3 Authority Key Identifier:
                keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/V8xFM209d0-dvMcIfW9XF0bvwSM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:42:eb:9f:8d:a7:82:6e:27:90:15:81:48:8d:82:0e:85:e3:
         1f:19:ec:26:71:f8:b8:14:32:1a:d2:9a:04:92:84:9b:ec:1d:
         42:63:2f:78:ba:05:be:86:b3:9a:23:d2:70:fd:94:17:d3:7d:
         d3:8a:ef:76:05:eb:32:4f:a6:fa:45:5f:03:51:b3:c5:36:04:
         38:f7:60:f8:17:47:d2:5e:97:9b:48:c7:dc:3e:86:c6:84:c1:
         2f:51:c7:99:ff:e6:b0:79:f0:6f:22:06:94:bc:57:e0:59:86:
         3c:13:45:62:d8:83:7e:da:79:33:a5:ce:fc:46:03:29:21:85:
         6c:c3:01:a1:8a:03:36:c5:d5:a9:15:7a:83:c0:0b:93:d0:62:
         b0:7f:20:70:36:c2:49:3b:36:9d:f8:a9:0d:4a:3b:14:9e:f7:
         35:a1:2b:5b:e1:43:29:3a:df:5a:1d:6e:33:5e:9d:39:ab:60:
         d1:66:60:aa:c0:ca:43:4d:0b:1e:1a:91:a7:61:77:6b:c1:88:
         7e:3b:63:6b:81:08:b6:cd:40:c4:8f:9f:63:23:53:42:81:46:
         8f:ee:92:82:1f:0c:9d:07:c4:0e:7e:79:51:d3:86:29:c8:05:
         ae:3e:35:46:4a:91:1e:4e:59:c8:44:d7:b7:11:20:af:08:26:
         99:56:4e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:43:18 2025 by rpki-client