Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/PVeeBJLovo9co2_VoYc0vBbbKIE.roa
File:                     PVeeBJLovo9co2_VoYc0vBbbKIE.roa (raw, json)
Hash identifier:          okHVRv/5tXfT3fG6yX7lHlmf4y+HQL8MHTAzPMNOjc8=
Subject key identifier:   3D:57:9E:04:92:E8:BE:8F:5C:A3:6F:D5:A1:87:34:BC:16:DB:28:81
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0E7C
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/PVeeBJLovo9co2_VoYc0vBbbKIE.roa
Signing time:             Fri 22 Aug 2025 08:50:18 +0000
ROA not before:           Fri 22 Aug 2025 08:50:18 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24157
IP address blocks:        103.5.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3708 (0xe7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Aug 22 08:50:18 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=3D579E0492E8BE8F5CA36FD5A18734BC16DB2881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:11:a2:9c:6a:7b:86:b9:a1:74:5e:01:83:34:
                    02:d9:d0:3a:50:78:8b:8b:05:75:b4:55:4e:1d:9c:
                    08:cc:25:78:ef:f5:20:01:83:b0:b4:f9:15:26:74:
                    41:b4:ab:5c:0d:54:2d:e1:de:c2:f6:cc:d1:a8:21:
                    91:78:c3:06:05:d5:a6:9a:00:45:0d:2d:70:ba:ec:
                    d0:84:da:89:bd:54:dc:2f:c5:81:9c:23:6c:70:d4:
                    49:74:41:55:5e:2b:c2:d9:3e:ba:c1:a7:06:44:64:
                    7c:ef:5a:a3:25:ff:77:e6:84:2b:f7:a8:67:e8:07:
                    db:c6:86:7b:12:f2:1d:3d:9b:42:74:1e:10:a9:83:
                    53:f0:99:4b:ab:50:ba:2e:c7:72:f5:0a:e5:88:fd:
                    dc:87:af:63:8b:2a:1c:57:c1:52:82:63:c9:89:51:
                    51:af:2f:22:a6:f5:b6:f4:64:f6:59:48:5d:1f:fd:
                    01:6a:06:7c:69:71:cf:de:87:a7:bb:32:c0:d3:d0:
                    8d:32:75:65:9d:74:b7:ea:d1:4d:eb:6c:d6:1a:f4:
                    77:17:2c:a4:0c:10:7f:e1:76:de:86:30:03:9c:bf:
                    9f:df:6a:36:8c:84:16:15:99:97:d2:b9:33:86:87:
                    67:ff:65:5d:21:e8:0d:87:ad:e3:48:60:39:39:35:
                    4c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:57:9E:04:92:E8:BE:8F:5C:A3:6F:D5:A1:87:34:BC:16:DB:28:81
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/PVeeBJLovo9co2_VoYc0vBbbKIE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:23:22:21:6b:7c:80:3d:45:2a:c1:50:38:6b:7e:1e:86:28:
         d0:d7:1d:55:6f:5d:31:c0:58:3b:d7:93:fa:c9:5a:df:6b:04:
         64:c4:7a:06:b1:eb:2e:51:e5:8d:99:8a:75:ed:37:94:c1:ee:
         19:e7:8e:c3:b9:d0:a4:2f:03:b3:df:19:a3:e1:33:69:8f:7a:
         ba:ac:83:14:1f:90:13:49:1a:19:3c:89:8a:5a:f6:01:52:f0:
         18:c7:cc:3a:6e:d8:ff:b2:ab:84:bd:c2:8a:7f:c0:65:be:bb:
         e0:2b:52:61:6f:cc:14:01:fe:86:cf:34:8b:de:d9:26:19:aa:
         73:14:d5:56:bf:d0:66:93:d7:5a:f7:89:0f:55:29:ed:16:52:
         e1:69:f9:9c:ce:bc:52:b5:f5:8c:c0:5d:d8:b1:fa:09:96:ff:
         0b:8d:43:aa:12:62:fd:93:e5:d3:40:7a:35:3a:ab:f0:a7:b1:
         54:11:aa:68:ed:bb:1e:0c:5a:5c:73:b2:b7:34:f1:e4:16:e2:
         95:57:5a:6b:09:2f:a2:0b:e3:9c:58:23:0e:eb:89:3a:31:11:
         d0:e4:fb:fc:d5:ae:c1:b1:08:f1:65:19:66:86:57:35:f5:87:
         09:47:b9:da:49:17:fd:51:b6:15:6c:48:4f:53:d3:a6:c9:66:
         61:a2:d7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:44:02 2025 by rpki-client