Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7qdl15sj0sbYXcnGa77nhQW8Cf8.roa
File:                     7qdl15sj0sbYXcnGa77nhQW8Cf8.roa (raw, json)
Hash identifier:          yKh8Bpg0YEVdyjQu47thW+ivTi5QFsB9QyI+e8uqlbQ=
Subject key identifier:   EE:A7:65:D7:9B:23:D2:C6:D8:5D:C9:C6:6B:BE:E7:85:05:BC:09:FF
Certificate issuer:       /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Certificate serial:       12AE
Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7qdl15sj0sbYXcnGa77nhQW8Cf8.roa
Signing time:             Fri 22 Aug 2025 08:59:18 +0000
ROA not before:           Fri 22 Aug 2025 08:59:18 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131633
IP address blocks:        103.127.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4782 (0x12ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
        Validity
            Not Before: Aug 22 08:59:18 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EEA765D79B23D2C6D85DC9C66BBEE78505BC09FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:2b:5d:4f:9e:b9:36:59:62:1c:d4:36:71:
                    d9:10:56:eb:4d:98:27:ee:a9:ea:2d:f7:21:27:f0:
                    10:72:9a:a4:04:6b:e8:f9:52:39:cf:7b:32:4d:a6:
                    ec:df:2a:d0:89:e0:20:47:07:e8:eb:cb:24:5f:95:
                    3e:e5:8b:14:7e:f3:50:81:04:8b:86:e5:53:9a:b5:
                    a1:85:91:93:e4:da:4d:41:f2:df:ca:a1:45:1b:e5:
                    df:ac:32:49:a5:49:ad:a0:9e:52:a8:c1:ea:71:29:
                    39:73:95:52:54:9f:b8:92:9e:80:73:9a:fd:14:6c:
                    09:42:c7:aa:02:ae:cf:63:63:45:5e:ad:6f:5c:59:
                    af:2c:d3:88:3b:26:9a:9d:a6:f9:6b:ef:17:4c:93:
                    fd:14:52:59:2a:2b:f2:87:df:31:40:9b:86:7e:69:
                    f4:0e:57:c4:63:4a:24:cb:34:ee:7c:32:b9:55:cf:
                    3f:f8:b1:09:b9:b5:b6:e4:1d:af:c5:6f:e3:a9:af:
                    b4:c0:2d:a7:a3:22:fd:b9:9d:1d:d5:b1:ba:82:eb:
                    d2:a8:76:85:41:8a:34:f5:9c:ba:bb:75:ef:a2:e0:
                    f3:7b:91:5f:26:0a:d2:61:e4:8b:11:05:0a:65:46:
                    07:d0:d4:f1:9d:1a:19:71:fe:97:76:fb:c9:f0:6c:
                    7b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A7:65:D7:9B:23:D2:C6:D8:5D:C9:C6:6B:BE:E7:85:05:BC:09:FF
            X509v3 Authority Key Identifier:
                keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7qdl15sj0sbYXcnGa77nhQW8Cf8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:5f:30:61:d7:08:0e:a2:82:09:a1:5f:b9:16:2c:2e:8f:d6:
         6d:33:e8:65:cc:22:c6:5d:f4:48:f7:e1:c4:4c:4b:13:ae:de:
         ec:60:21:8f:ca:0f:23:d9:5e:b2:6b:1e:05:cc:75:40:6d:de:
         66:dd:c8:32:81:3c:1e:0f:93:28:39:83:d1:e0:54:68:20:7e:
         2c:52:61:f0:24:fa:28:d1:45:73:8b:40:36:cd:05:6c:79:04:
         d8:dc:0d:e6:ed:5c:08:fb:12:ac:4b:d9:f7:b0:b5:04:dc:9d:
         a4:5e:29:bb:b2:5f:6b:69:d7:5e:02:8f:3f:ab:f0:87:92:92:
         0b:e2:4e:9b:b1:4d:5c:ed:52:3f:97:ec:bb:fe:8d:d6:4b:6e:
         f1:0a:aa:98:cf:25:38:ac:ac:66:b3:0d:b6:e7:4b:53:f6:3a:
         f2:6b:ec:a8:01:02:42:49:07:0e:59:12:09:29:1c:ee:5c:b5:
         2c:49:1a:76:a1:39:61:40:11:7e:48:e0:44:db:e6:19:0b:cc:
         3d:e5:53:75:38:dd:72:f0:4c:2c:fd:22:aa:9d:ce:42:cb:25:
         d1:d5:30:9b:41:5a:fd:86:db:0b:2d:92:09:ca:2e:18:9f:d1:
         a4:3c:05:69:eb:86:50:a8:3d:7c:38:e6:76:90:72:bb:4c:ef:
         f2:5d:85:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:15:29 2025 by rpki-client