Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/nEI1jbGVeUZcN7l2GnewN_dB9Tc.roa
File:                     nEI1jbGVeUZcN7l2GnewN_dB9Tc.roa (raw, json)
Hash identifier:          fjuNJfqtfA8IuoUYCE7+xdh2o3O8MmC7uRstz0dTylw=
Subject key identifier:   9C:42:35:8D:B1:95:79:46:5C:37:B9:76:1A:77:B0:37:F7:41:F5:37
Certificate issuer:       /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Certificate serial:       12A9
Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/nEI1jbGVeUZcN7l2GnewN_dB9Tc.roa
Signing time:             Fri 22 Aug 2025 08:59:17 +0000
ROA not before:           Fri 22 Aug 2025 08:59:17 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     10103
IP address blocks:        103.127.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4777 (0x12a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
        Validity
            Not Before: Aug 22 08:59:17 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=9C42358DB19579465C37B9761A77B037F741F537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:a0:8d:5f:65:ac:5b:87:61:0e:ae:56:af:
                    51:e3:ef:9d:c1:ad:ee:2e:9c:6b:0d:fc:37:6b:18:
                    19:4a:57:62:da:18:fe:10:e0:2c:25:6c:f4:f5:7a:
                    b4:50:ca:50:22:8f:ac:95:07:e2:97:e1:28:f4:0e:
                    87:b9:08:63:9c:a6:37:ee:62:06:3b:51:c6:58:dc:
                    2a:e8:34:ea:1c:bb:85:85:f3:f7:d5:50:60:c1:9c:
                    b2:cb:0c:2e:88:77:f9:c2:81:f7:67:5d:e8:89:15:
                    ea:bf:bd:ca:9c:58:25:a4:73:00:72:ed:1c:d7:4d:
                    a6:ff:93:76:bf:e1:90:4a:74:42:ae:cd:75:d9:df:
                    72:84:ba:be:aa:57:cf:86:b7:96:6c:3c:25:04:31:
                    74:e1:ba:66:89:68:4b:62:f9:e0:07:44:0d:48:3b:
                    2c:f1:5f:e4:56:5a:a4:c0:9f:aa:e6:7c:7a:9c:2b:
                    2f:fa:63:d6:bb:01:5f:b5:3c:61:e9:bc:a3:3a:ad:
                    d6:11:0e:28:58:06:e3:5a:57:52:d4:01:1d:27:3e:
                    75:0e:e3:41:6a:e9:c1:25:3c:65:67:d1:02:0b:5d:
                    2a:6e:01:c3:61:87:19:df:82:90:da:57:ce:05:60:
                    1a:ea:69:24:4b:71:ac:10:a2:be:1a:7d:ec:92:ec:
                    40:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:42:35:8D:B1:95:79:46:5C:37:B9:76:1A:77:B0:37:F7:41:F5:37
            X509v3 Authority Key Identifier:
                keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/nEI1jbGVeUZcN7l2GnewN_dB9Tc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:8a:16:bd:9a:25:31:3b:03:a5:3d:fd:8a:00:e4:67:2a:3b:
         81:cf:03:72:94:52:ff:f7:5d:be:2e:2c:9c:1d:0b:de:63:a0:
         f6:1c:e6:41:22:73:39:4b:58:b9:a1:8d:37:7c:9e:96:dc:ae:
         60:02:42:85:d3:84:fc:4a:21:fa:9a:a2:8d:c8:d2:6c:9b:48:
         ee:f2:97:5d:88:63:1d:32:f9:af:0d:01:00:25:fe:c6:4b:76:
         ef:0e:63:d8:cb:66:20:48:f9:34:3a:b9:60:02:1f:f4:62:38:
         86:96:3a:ac:88:9d:7f:89:67:c8:43:5d:b9:7a:bf:37:b9:ef:
         15:92:03:ac:99:67:7b:66:9e:d2:32:e9:33:bb:5a:e4:16:ad:
         d6:1b:79:8d:7f:ac:55:57:6d:c8:03:e5:ad:21:3c:fe:63:64:
         9a:6d:c3:f4:cf:9e:57:f5:57:7c:08:b5:f5:5e:59:53:5d:23:
         b6:04:cc:56:6d:36:73:d7:52:a7:91:ec:4b:71:ec:4c:c2:72:
         8d:1f:a4:66:7f:28:9f:dc:b2:78:43:e0:7b:09:f8:a6:97:0b:
         fe:6c:18:2e:10:ff:c5:68:be:ce:3b:cb:f0:80:89:85:ce:90:
         e4:5f:31:59:a5:a3:d6:7c:88:84:b2:42:f1:02:cc:3a:f4:6e:
         20:00:1e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:15:29 2025 by rpki-client