Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/GZELNOyiVAmLDRR2MW7N8EqLGzE.roa
File:                     GZELNOyiVAmLDRR2MW7N8EqLGzE.roa (raw, json)
Hash identifier:          +EXDQYZC6+0QrGxIPFf4wAysxyAMaPNfctcq9J3KzE0=
Subject key identifier:   19:91:0B:34:EC:A2:54:09:8B:0D:14:76:31:6E:CD:F0:4A:8B:1B:31
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0DCA
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/GZELNOyiVAmLDRR2MW7N8EqLGzE.roa
Signing time:             Fri 22 Aug 2025 08:51:42 +0000
ROA not before:           Fri 22 Aug 2025 08:51:42 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131593
IP address blocks:        103.42.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 17:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3530 (0xdca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Aug 22 08:51:42 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=19910B34ECA254098B0D1476316ECDF04A8B1B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:8f:1d:96:2b:fe:c5:a1:02:5b:ed:29:00:
                    f0:5a:d5:16:4a:09:9e:02:6a:b6:b8:2f:f9:fe:8e:
                    31:44:40:11:da:71:dc:77:14:c5:21:c1:90:5d:01:
                    56:dc:7e:d8:de:07:c1:84:17:b2:13:a0:86:57:45:
                    8f:bd:41:68:76:52:46:8a:9c:6f:a5:e8:7a:7b:94:
                    07:a8:fc:4b:25:75:d4:f0:fc:44:c7:7b:19:29:b5:
                    a1:6e:bd:8f:ce:3f:10:62:5c:96:98:72:d0:2b:d5:
                    2c:f7:21:16:09:ca:8b:f8:55:cf:46:7d:3e:05:47:
                    e5:e6:0f:ba:c0:8b:d7:19:36:09:8a:cd:50:f5:b5:
                    f8:8e:ad:42:c1:bf:09:ad:32:fc:40:9b:cc:99:3d:
                    99:f5:39:55:f1:05:9b:5b:34:09:6f:b5:b6:da:6c:
                    84:76:49:9d:c4:af:69:e0:54:0c:d6:b2:a3:4c:36:
                    5f:57:6f:f0:7a:e0:95:95:94:38:72:09:c5:20:36:
                    ef:27:c0:ff:3f:1f:bc:21:6f:89:c0:3f:8d:80:2d:
                    55:ae:92:5a:d8:16:3d:5a:6e:99:bf:8e:1c:7c:6a:
                    42:b2:c1:a5:ef:69:4f:b4:9b:97:0b:4f:b7:07:4f:
                    9f:4d:71:76:8d:4d:8a:84:8a:9d:ee:ec:5d:ec:68:
                    bc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:91:0B:34:EC:A2:54:09:8B:0D:14:76:31:6E:CD:F0:4A:8B:1B:31
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/GZELNOyiVAmLDRR2MW7N8EqLGzE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:49:c7:69:1d:04:1a:3f:6f:d1:dc:cc:11:15:6b:1e:42:98:
         9a:f8:6c:6e:4a:40:fc:f2:06:dd:03:bd:aa:a7:88:d2:59:6b:
         33:61:29:3b:ff:9f:06:90:9c:8d:ef:35:61:3e:00:23:88:a4:
         09:1d:e3:a5:7d:9f:a9:a7:5c:d0:1a:9b:67:cd:96:17:13:07:
         6e:fe:2e:66:38:02:b6:43:0b:10:56:0a:f2:6a:fa:dd:e0:d6:
         c0:bc:25:a8:79:05:35:32:a3:01:ae:5a:f6:fb:db:2c:76:63:
         11:f3:da:2c:0a:d9:38:4f:50:e6:09:cc:c0:f0:36:9b:17:30:
         3d:bc:60:ab:ac:85:00:58:4e:36:c8:96:ad:e9:4e:a0:d7:c2:
         1b:93:55:71:99:82:70:0d:1b:3b:8f:e9:df:2d:53:ca:45:68:
         70:77:42:5c:09:6b:a6:07:ce:24:7c:d0:46:26:e3:08:8f:05:
         39:b5:34:47:2c:7b:14:75:04:70:53:32:4b:6b:02:1a:5f:66:
         da:43:76:88:16:b2:96:c3:86:e6:8d:bc:6b:17:c2:40:1d:f5:
         1f:9a:5e:00:b4:0e:45:d0:f0:91:24:f2:76:07:47:61:f5:88:
         89:44:16:e6:3a:1c:cc:a2:d8:82:db:ed:08:15:11:d4:84:70:
         3b:bc:79:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:42:14 2025 by rpki-client