Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/EpZF6ajuzIv0k7_dpiwu4FRiu-I.roa
File:                     EpZF6ajuzIv0k7_dpiwu4FRiu-I.roa (raw, json)
Hash identifier:          i/p9fhRhjnAQxmjh4klJG+b1VXl2E1plABNeKCf9yy4=
Subject key identifier:   12:96:45:E9:A8:EE:CC:8B:F4:93:BF:DD:A6:2C:2E:E0:54:62:BB:E2
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0E6D
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/EpZF6ajuzIv0k7_dpiwu4FRiu-I.roa
Signing time:             Fri 22 Aug 2025 08:50:15 +0000
ROA not before:           Fri 22 Aug 2025 08:50:15 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24157
IP address blocks:        180.217.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3693 (0xe6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Aug 22 08:50:15 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=129645E9A8EECC8BF493BFDDA62C2EE05462BBE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:83:e9:be:2c:23:54:e1:da:2a:b0:15:cd:d8:
                    73:24:17:21:42:1c:99:56:fe:48:ce:11:a6:30:50:
                    a7:2e:ce:c1:75:e1:79:85:7e:d0:8d:ca:ac:b1:84:
                    e3:b3:ff:de:2d:77:0f:8d:f4:39:69:c9:3e:a1:e2:
                    a7:c3:49:45:84:39:e8:43:3d:a2:c0:07:04:03:88:
                    51:d3:71:22:94:24:0b:e2:41:59:8a:78:12:27:a2:
                    c7:9f:eb:30:d5:fe:73:a3:b2:3f:47:fe:0f:a0:bc:
                    82:82:4a:fe:dd:dd:70:de:4b:89:ff:96:20:54:2f:
                    5e:c1:63:57:3d:08:df:aa:3a:7a:ea:7c:ca:d6:16:
                    97:97:51:5f:82:1d:27:f5:03:84:2c:62:18:70:d8:
                    fb:6a:21:14:7e:e5:fc:46:82:0c:0b:b8:8e:de:f0:
                    19:54:70:ab:5b:45:a4:94:6a:06:4b:01:94:b0:08:
                    ac:5c:96:c8:f0:75:81:bc:fa:fa:84:d8:8d:0a:ba:
                    6d:79:7a:ab:87:33:4a:cb:d0:0d:35:cb:f7:54:1d:
                    3c:eb:b7:42:26:8f:16:52:45:22:9d:27:4d:76:c6:
                    bb:cb:fb:86:8d:69:03:d9:ec:7c:5e:b0:4c:5c:fe:
                    bd:d9:d0:1b:cc:f2:9f:8a:5a:74:a8:a6:d3:1f:6c:
                    5a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:96:45:E9:A8:EE:CC:8B:F4:93:BF:DD:A6:2C:2E:E0:54:62:BB:E2
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/EpZF6ajuzIv0k7_dpiwu4FRiu-I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.217.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:ab:78:46:15:0d:de:11:97:ff:d3:bf:84:17:b6:9c:b5:03:
         85:91:ef:02:13:1d:8d:ee:83:58:ac:08:a8:54:8d:72:f1:63:
         87:03:97:93:e0:a9:c3:9a:e0:7e:16:35:67:95:43:ae:d0:41:
         d0:61:ff:3a:f4:e6:b9:0f:7b:d4:61:fb:8d:4f:95:ae:e3:e7:
         e9:b7:92:1e:f5:af:32:d2:35:ba:76:b1:f8:2d:8c:81:d8:8c:
         10:88:e8:56:d6:3e:f9:fc:e8:47:d2:61:db:ba:78:09:f4:82:
         1e:be:84:cc:55:2e:bf:df:20:a5:63:97:21:64:ed:29:ff:58:
         fc:8a:90:bf:f0:00:8c:54:c6:88:a4:e6:03:05:d2:71:e7:7f:
         73:86:17:8e:5d:4d:10:64:b6:88:4a:06:f6:84:cd:dd:24:c3:
         44:8b:e8:5a:4e:45:66:29:c1:9f:b7:fe:40:6e:90:eb:e3:5e:
         26:01:13:58:5e:d8:9f:b1:02:aa:9b:6b:03:e7:58:0f:56:69:
         d8:df:99:a2:76:60:ba:46:d2:16:f0:9f:b4:be:89:f1:37:73:
         9c:f8:87:a1:ba:0d:28:2e:cb:2a:e5:0e:43:53:16:2c:f6:6e:
         af:09:6e:de:0a:b8:4f:e0:66:73:40:57:bf:60:cf:83:22:00:
         c9:96:6a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:42:14 2025 by rpki-client