Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/DfUyHdZjjCZNikalitillbRExvY.roa
File:                     DfUyHdZjjCZNikalitillbRExvY.roa (raw, json)
Hash identifier:          0OtlcCA/c6MRDxtJW1CTLuevfR5xp4o1r7QgZ7DYk9A=
Subject key identifier:   0D:F5:32:1D:D6:63:8C:26:4D:8A:46:A5:8A:D8:A5:95:B4:44:C6:F6
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0E7B
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/DfUyHdZjjCZNikalitillbRExvY.roa
Signing time:             Fri 22 Aug 2025 08:50:18 +0000
ROA not before:           Fri 22 Aug 2025 08:50:18 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24157
IP address blocks:        103.239.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3707 (0xe7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Aug 22 08:50:18 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=0DF5321DD6638C264D8A46A58AD8A595B444C6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:d9:67:b3:44:61:93:bc:29:22:26:48:0b:
                    5d:60:11:64:47:aa:f5:1b:6c:d8:0e:9e:19:49:15:
                    b8:35:28:36:c2:46:43:11:c7:39:3b:44:ce:6e:c6:
                    bd:18:51:46:21:93:7a:3a:91:9b:ac:e9:01:db:78:
                    34:85:0c:fe:f6:38:fd:e5:0a:18:e5:0a:43:84:09:
                    e2:8c:11:b0:d7:f3:f2:6c:a1:fb:bf:fb:45:03:6c:
                    f0:6e:60:22:af:22:0f:a7:c9:9d:a5:56:3f:07:a6:
                    31:29:88:05:e0:20:56:a2:76:77:80:77:27:9d:d5:
                    65:87:32:49:ca:9f:74:3d:86:98:8d:b5:d1:a1:51:
                    f1:1b:0c:e4:5a:86:b3:db:94:d4:10:17:8c:78:64:
                    87:13:22:f8:49:f0:0d:8b:3c:e1:a5:57:62:b3:c9:
                    b6:d3:05:93:7d:5e:6d:4b:c9:12:37:03:47:26:68:
                    94:f8:e9:4b:8a:b0:3d:1b:d9:48:c6:a6:58:58:2f:
                    e3:ab:26:59:dd:f5:c0:ea:39:5c:9f:a8:77:61:ae:
                    a7:87:a2:56:91:5c:88:31:a0:81:d9:00:3f:2a:ba:
                    58:2c:5e:8b:05:ea:c2:94:42:f8:d2:c0:44:51:89:
                    c6:18:68:e4:fe:88:53:b2:04:43:0e:7e:41:06:ab:
                    05:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F5:32:1D:D6:63:8C:26:4D:8A:46:A5:8A:D8:A5:95:B4:44:C6:F6
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/DfUyHdZjjCZNikalitillbRExvY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:fc:37:6c:65:ea:83:d5:d6:f4:95:4a:67:e5:e7:b8:34:f2:
         ea:54:52:00:ae:40:39:10:f7:06:66:3e:8d:57:90:e9:f4:16:
         59:6c:b7:0d:f6:4b:f6:2f:c7:f5:d2:4d:77:8c:cc:ab:0b:2c:
         3b:c4:ba:c4:c8:49:65:45:8f:1f:54:c1:42:cd:17:54:aa:4f:
         e0:0b:7e:61:34:a9:5f:ba:ae:0e:55:72:d7:78:37:22:e2:93:
         ac:4a:7c:bf:7b:2c:2a:bf:ef:d4:4c:fe:e7:e5:a6:fe:c8:a0:
         d8:5b:0c:86:b4:c7:9c:7c:a6:c0:4d:06:c1:64:23:a8:11:71:
         51:6f:fc:8f:bc:27:c1:e0:dd:66:96:f1:ea:8c:23:54:7a:ea:
         17:2a:d2:50:13:15:05:84:92:34:ef:a2:f9:4f:6b:6e:43:88:
         2b:70:b1:89:69:a6:7a:63:04:fe:40:d2:76:62:ea:88:5f:79:
         3c:c4:1d:09:56:09:b9:bc:28:f0:41:25:91:69:3a:1d:3f:2f:
         2c:9c:37:76:49:2d:e4:7a:36:28:b8:58:6f:1e:00:a7:e0:9a:
         a0:4e:91:07:88:59:9b:0f:4a:3a:f9:7b:01:28:b3:9b:c8:43:
         ed:4a:dc:f9:c6:9b:33:5f:7b:83:63:f3:9d:c8:fc:74:31:b5:
         a4:ac:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:43:38 2025 by rpki-client