Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/jogxG2Q4L1wZI5qlIvBLOoqnzZ0.roa
File:                     jogxG2Q4L1wZI5qlIvBLOoqnzZ0.roa (raw, json)
Hash identifier:          i9BP0lS9mQ3bC2oozZRHHEwV5LEtZ2/cD4JTB7qkBQc=
Subject key identifier:   8E:88:31:1B:64:38:2F:5C:19:23:9A:A5:22:F0:4B:3A:8A:A7:CD:9D
Certificate issuer:       /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Certificate serial:       0DD3
Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/jogxG2Q4L1wZI5qlIvBLOoqnzZ0.roa
Signing time:             Fri 22 Aug 2025 08:55:10 +0000
ROA not before:           Fri 22 Aug 2025 08:55:10 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4783
IP address blocks:        210.67.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 17:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3539 (0xdd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
        Validity
            Not Before: Aug 22 08:55:10 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8E88311B64382F5C19239AA522F04B3A8AA7CD9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:6c:59:38:5c:b4:06:2c:6c:c8:b9:26:ee:
                    38:c8:c7:26:67:2f:8a:cf:32:f4:0b:f8:69:ef:3e:
                    8c:f6:5c:e8:58:e9:8f:d1:9c:c4:ec:90:bd:92:49:
                    e9:de:c1:ca:bd:a1:6b:91:37:0d:0c:95:37:02:a7:
                    64:44:3e:a2:4e:38:84:d8:fb:d5:2a:a5:67:0a:eb:
                    08:5e:db:a9:c7:8e:df:54:42:7e:50:a3:b9:53:be:
                    9e:cd:d9:26:c0:d3:73:63:b5:cb:1b:3d:8b:71:5c:
                    b8:79:8a:89:97:9a:99:6c:93:0e:5f:64:15:26:2a:
                    32:66:12:a6:1c:44:89:dd:cb:87:39:78:62:36:6e:
                    b3:7d:bb:b1:22:8c:ea:0d:43:8e:14:5b:27:c5:9a:
                    63:d7:53:de:e9:ce:4e:61:37:bc:0f:c7:94:e7:9d:
                    b2:b4:7e:f9:f0:48:8e:bc:ef:8f:66:81:cb:34:31:
                    8c:76:ac:10:d5:e5:1f:29:e5:bf:98:dc:52:2f:64:
                    99:16:e8:66:31:0f:d6:c1:e7:1a:93:d5:02:6f:93:
                    00:8f:c8:2a:29:53:2c:59:53:d5:60:2c:e6:dc:77:
                    03:d1:a8:5f:b6:c6:21:1a:54:a9:08:6f:c4:30:82:
                    f2:83:aa:f5:f4:2c:da:18:e9:01:ff:8c:2d:1f:52:
                    51:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:88:31:1B:64:38:2F:5C:19:23:9A:A5:22:F0:4B:3A:8A:A7:CD:9D
            X509v3 Authority Key Identifier:
                keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/jogxG2Q4L1wZI5qlIvBLOoqnzZ0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.67.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:9d:b2:cf:fd:f4:96:30:44:61:f0:c6:63:72:26:24:e4:2d:
         07:8c:13:ce:01:bb:24:b3:5b:d2:2e:0b:2d:73:47:47:41:35:
         c0:e0:62:fd:2d:5b:14:e1:e6:dd:bb:04:97:96:c4:74:47:03:
         65:20:86:28:4a:cb:02:95:67:6d:70:f9:0c:d1:74:96:cd:2d:
         f8:ba:81:a0:17:9e:aa:75:f7:f0:6f:ee:9a:3f:07:cc:31:cc:
         55:ab:e0:a2:b6:15:45:05:32:97:39:5a:dc:a4:16:ae:3d:10:
         97:56:9e:c7:92:40:92:93:ce:a6:6b:42:00:fe:24:d5:f3:b0:
         9f:b3:85:98:dc:38:26:0b:b0:ab:30:c2:06:a8:c7:70:81:9b:
         22:40:6c:4f:33:1e:2b:b6:d6:6f:18:f9:3c:a6:e8:77:1e:60:
         86:4b:6b:b3:30:6e:6a:01:b7:ca:3f:cf:7b:d4:af:33:5f:d5:
         6b:ff:13:17:ad:05:8f:ec:69:08:49:79:1f:58:49:11:12:55:
         56:e8:77:e6:43:13:a3:7d:3d:6f:81:40:74:ce:31:8d:08:35:
         f3:9e:6c:bb:9e:11:99:77:d6:b6:f1:a6:a5:e2:49:df:bc:de:
         55:30:3a:9f:10:e2:20:13:2b:a9:56:c6:aa:f9:43:0f:4c:89:
         fb:a4:05:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:36:52 2025 by rpki-client