Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/XQN6OxMUcoAGxpGLooiky-tL7gc.roa
File:                     XQN6OxMUcoAGxpGLooiky-tL7gc.roa (raw, json)
Hash identifier:          KYlnunaZYM8trExSsCQ39CrmyKf/rWIHR1sdiY7IVHE=
Subject key identifier:   5D:03:7A:3B:13:14:72:80:06:C6:91:8B:A2:88:A4:CB:EB:4B:EE:07
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0DC9
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/XQN6OxMUcoAGxpGLooiky-tL7gc.roa
Signing time:             Fri 22 Aug 2025 08:51:42 +0000
ROA not before:           Fri 22 Aug 2025 08:51:42 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131593
IP address blocks:        103.42.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 17:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Aug 22 08:51:42 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5D037A3B1314728006C6918BA288A4CBEB4BEE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c3:34:43:28:ea:04:87:e7:8a:d0:76:ba:31:
                    fb:b7:2e:e2:f3:cb:b6:1b:26:7a:d7:98:2b:41:07:
                    78:24:4f:a3:bd:18:4e:87:c8:4d:7c:a7:ab:00:d1:
                    f5:78:ea:d3:70:55:ee:30:0d:71:3e:ba:f6:f4:cd:
                    29:3a:56:93:9d:f5:27:fe:52:d6:69:63:8d:5c:07:
                    ae:7f:2f:72:f9:a2:8e:23:a2:37:9d:49:e8:3b:1d:
                    c0:e7:ec:87:22:8c:94:1c:68:3a:25:a6:d1:77:23:
                    72:80:91:f6:34:3c:30:dd:a8:4f:b3:69:0d:1e:74:
                    53:17:33:2e:72:83:e8:f2:82:34:6b:03:c6:5c:be:
                    a6:6d:06:14:6f:a6:72:e8:1d:f7:c7:20:37:84:bc:
                    e0:c1:2e:e6:bc:5f:92:cc:22:4c:bf:a7:fe:b8:d2:
                    bb:03:73:fb:8c:9c:03:77:90:1f:71:47:0d:36:c8:
                    d9:4e:45:d3:9a:5f:ad:fa:3d:81:e2:52:ce:a6:0c:
                    4b:3b:78:a6:f8:bc:15:39:ce:14:0f:cd:aa:09:7f:
                    38:d2:ac:aa:2f:80:3b:bf:18:82:96:9c:46:44:76:
                    6a:7b:60:05:05:f8:7d:d7:db:55:3b:66:54:8d:61:
                    9e:0f:1c:20:b5:8a:18:ce:91:6f:3f:9b:10:6b:94:
                    bc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:03:7A:3B:13:14:72:80:06:C6:91:8B:A2:88:A4:CB:EB:4B:EE:07
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/XQN6OxMUcoAGxpGLooiky-tL7gc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8c:fb:50:a7:13:a0:7f:47:9e:3b:4a:e6:13:b2:46:18:09:
         d4:ea:a1:9d:d3:e5:83:b7:f3:f0:2a:f8:21:ba:1f:54:36:9a:
         93:67:41:3b:a9:4a:65:c9:8e:48:b4:c8:c8:70:6f:0d:76:6c:
         74:1d:2c:4e:ff:7e:3a:2d:59:c3:4b:fd:3f:ac:c8:37:8f:17:
         46:0e:92:07:73:07:95:cc:32:f9:e3:c9:c9:ed:0c:10:3b:03:
         04:d1:b2:b5:ab:80:16:e2:c5:25:d7:88:29:8c:03:e0:fd:fd:
         11:b3:48:2b:4b:96:55:6d:f5:7d:73:24:7b:9e:f4:63:d2:a5:
         21:a3:0e:e0:40:eb:fa:0d:4e:c1:c1:41:d4:98:46:73:60:09:
         cb:2b:51:ae:5c:dd:38:0f:7b:53:e8:64:02:85:0e:da:b6:30:
         64:30:6f:aa:8c:44:46:64:9e:08:97:83:9b:eb:bb:30:50:ca:
         d5:b1:d6:85:bb:91:a3:fc:fc:23:60:52:39:13:5c:89:93:eb:
         34:4d:d7:f1:82:78:fc:27:55:d2:62:c1:24:71:67:95:fc:01:
         ee:a5:f4:77:02:e1:d6:d5:a5:31:4e:90:ac:08:9c:16:7b:29:
         b7:82:c6:26:d0:1d:4e:a1:09:a0:28:7f:2a:a6:b2:25:5e:d8:
         7f:af:9c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:38:08 2025 by rpki-client