Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/087oS-qHJyzTkXdA9b2Te-JvmKM.roa
File:                     087oS-qHJyzTkXdA9b2Te-JvmKM.roa (raw, json)
Hash identifier:          hJU1HOP1aMHGU6G9/JSMNmXdsXcJIPSdxT8vgNpZ5ZA=
Subject key identifier:   D3:CE:E8:4B:EA:87:27:2C:D3:91:77:40:F5:BD:93:7B:E2:6F:98:A3
Certificate issuer:       /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial:       0D60
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/087oS-qHJyzTkXdA9b2Te-JvmKM.roa
Signing time:             Fri 22 Aug 2025 08:57:00 +0000
ROA not before:           Fri 22 Aug 2025 08:57:00 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     7483
IP address blocks:        103.229.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3424 (0xd60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
        Validity
            Not Before: Aug 22 08:57:00 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D3CEE84BEA87272CD3917740F5BD937BE26F98A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:0b:ee:3e:60:71:e2:c2:46:11:68:20:34:
                    c8:b6:20:ca:a5:fd:32:82:da:c9:9c:b8:b8:6c:94:
                    ea:2c:d2:10:59:dd:dd:7c:4c:e5:76:76:17:a2:42:
                    4c:8c:ba:07:08:31:61:ea:39:36:d7:58:35:1f:46:
                    83:a0:c8:fc:d9:17:b9:3d:e0:5b:da:04:7e:b7:bf:
                    18:0f:05:21:a1:14:6f:40:f5:5e:85:2f:8e:96:aa:
                    28:b9:16:3e:5e:41:b3:84:91:63:14:f9:ee:23:95:
                    38:ce:0f:75:54:e6:87:82:89:5f:0d:e4:68:8a:9c:
                    b5:d6:e7:e1:6f:14:b2:ba:25:25:32:0b:ec:d7:a1:
                    df:09:ed:4a:c8:d8:98:50:90:9e:ba:b4:42:ff:c8:
                    42:a0:86:8b:b0:63:60:c4:77:ad:1f:ff:e2:ac:f4:
                    aa:3c:a5:25:f0:87:18:bc:80:f2:79:70:29:2d:bb:
                    dd:e0:98:75:0c:91:b0:d4:c0:a3:bc:0b:58:e2:3f:
                    fd:73:22:20:44:ab:db:2a:90:9d:3c:84:3c:d6:61:
                    10:cf:ea:a4:60:75:f6:56:32:ac:7f:a9:85:5f:83:
                    30:5f:db:91:2b:1e:2f:cf:8e:46:09:4e:c1:69:95:
                    6d:43:9c:02:59:d9:f0:c9:45:38:61:a7:4d:76:57:
                    18:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CE:E8:4B:EA:87:27:2C:D3:91:77:40:F5:BD:93:7B:E2:6F:98:A3
            X509v3 Authority Key Identifier:
                keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/087oS-qHJyzTkXdA9b2Te-JvmKM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:04:7b:87:7e:5f:76:96:8c:83:99:95:ea:77:4e:fa:71:da:
         0a:5e:1d:32:e3:2b:32:c3:27:72:6b:6e:4a:d4:62:c7:c4:0c:
         0d:58:bc:98:30:d3:05:e9:56:8a:fb:31:35:e9:1a:dc:9c:0c:
         40:eb:31:b8:e3:b8:38:9b:ed:a1:50:e9:67:60:a9:56:3d:c3:
         d2:45:54:55:ba:7e:9c:ab:96:85:cd:71:2e:05:c9:33:95:2b:
         c0:72:fb:8a:61:39:a9:fb:b1:79:01:84:6f:4e:bb:d3:19:6b:
         20:9f:b5:3b:41:73:2c:e1:af:69:35:8b:ea:02:d1:6a:71:96:
         7d:9b:f9:51:7d:cd:01:69:93:5a:c7:71:e5:a3:0c:86:b6:22:
         09:77:ce:a5:3e:9a:b2:d1:a7:60:75:22:bc:75:30:d8:d8:19:
         28:8c:5f:10:e0:da:d7:76:ef:0c:4d:9e:5d:c9:ca:0b:44:e8:
         91:82:7e:e4:70:a0:14:ea:0c:af:07:6a:91:ab:9a:57:c5:58:
         4c:a1:9a:0e:ba:a9:be:d1:85:70:de:ae:03:2e:e9:2a:77:d2:
         c7:29:20:06:ed:c5:53:7d:b0:a0:79:ce:6f:4d:88:0b:b5:0a:
         28:aa:b5:04:48:5c:5f:57:15:35:b8:b1:dd:20:36:29:ba:58:
         0d:f9:00:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:19:47 2025 by rpki-client