Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/zvx1USsK3b4G6ipC56ATK-hoOXk.roa
File:                     zvx1USsK3b4G6ipC56ATK-hoOXk.roa (raw, json)
Hash identifier:          Pt1PP+KOeka1jFQE3ry7S8LLCIew98HnoowFfJspBsk=
Subject key identifier:   CE:FC:75:51:2B:0A:DD:BE:06:EA:2A:42:E7:A0:13:2B:E8:68:39:79
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0E69
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/zvx1USsK3b4G6ipC56ATK-hoOXk.roa
Signing time:             Fri 22 Aug 2025 08:50:14 +0000
ROA not before:           Fri 22 Aug 2025 08:50:14 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24157
IP address blocks:        202.144.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3689 (0xe69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Aug 22 08:50:14 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=CEFC75512B0ADDBE06EA2A42E7A0132BE8683979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:2a:39:5f:d2:b9:a7:32:63:e0:59:54:01:
                    32:e8:5a:d5:81:4b:bb:cc:dd:5d:e2:55:e0:16:40:
                    da:a6:6e:07:a2:82:56:5f:97:28:b6:dc:1a:b2:02:
                    3a:2c:cf:58:12:18:b2:7d:c0:4a:eb:e7:52:c1:23:
                    88:24:22:8e:dd:e3:a7:e5:ca:ef:ff:53:0c:5f:09:
                    5b:32:9a:58:58:ad:6d:e3:5b:2c:4f:d9:a7:52:0c:
                    36:40:04:a7:5c:f4:1a:3a:39:11:d6:fa:94:90:7a:
                    c7:44:14:09:03:df:70:d1:14:0b:1b:21:7a:64:15:
                    76:ea:0d:d3:4c:e9:4f:bb:80:51:48:ad:e0:fb:ab:
                    4a:69:a2:49:9a:d6:71:8e:85:e6:4f:fc:49:d6:1c:
                    ba:29:bb:6d:b5:14:bb:2f:0a:0c:2d:0c:25:ed:ac:
                    6a:f4:42:66:ec:ac:43:d8:78:b5:4d:4a:64:a6:ee:
                    c0:a0:f5:59:1d:3c:98:51:b3:7c:2b:c1:a5:a5:c9:
                    46:cc:c5:80:dd:5e:25:24:d2:61:be:8f:e5:a3:2f:
                    8f:25:98:18:6a:54:09:e6:df:43:dd:06:80:8c:2f:
                    40:f3:31:a6:97:2e:df:19:16:ee:aa:f6:19:90:8e:
                    f5:e6:29:c0:0d:27:40:49:19:3c:6b:a6:38:0e:81:
                    0d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FC:75:51:2B:0A:DD:BE:06:EA:2A:42:E7:A0:13:2B:E8:68:39:79
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/zvx1USsK3b4G6ipC56ATK-hoOXk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.144.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:9a:c4:5f:d0:c6:7c:14:42:c9:95:ea:37:c0:da:a9:58:95:
         86:83:2c:59:c8:36:24:ed:13:bc:8b:40:d4:b3:30:3a:92:05:
         cd:3a:ef:a2:0f:7f:ba:91:69:5d:b6:62:f8:7d:6b:e0:2a:5c:
         8c:1b:1d:28:38:05:0b:89:6a:41:0c:6c:fa:bd:36:57:97:31:
         ef:b3:c0:29:05:84:c6:43:70:ff:72:6f:bc:3e:6a:2a:46:41:
         06:15:39:41:98:46:ed:67:42:8e:f9:ca:68:54:17:fc:85:a5:
         cb:47:8c:e7:bf:02:98:43:12:da:74:c4:74:71:a2:f0:54:48:
         2e:24:bd:e8:e3:0e:3e:83:3f:6f:e1:69:c8:86:0e:a0:c3:38:
         5d:d5:61:9a:2f:cd:c8:34:be:bc:1b:a4:1d:9b:31:17:3f:84:
         a7:4c:35:76:54:c6:c5:35:74:92:42:51:d9:fd:49:d2:0f:08:
         a6:40:95:46:03:f5:37:7f:2d:e1:07:30:f5:a2:31:85:05:b8:
         92:ff:78:46:08:d2:61:ef:2c:b2:24:ec:18:e2:b3:3f:41:10:
         da:1a:48:ef:3f:71:3c:01:33:ab:fe:61:a7:3f:cd:e5:08:a8:
         07:0e:c5:0e:d5:55:b2:82:5c:c1:6b:8f:28:f2:4c:20:f9:97:
         cc:61:51:63
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgICDmkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTA4MjIw
ODUwMTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENFRkM3NTUxMkIwQURE
QkUwNkVBMkE0MkU3QTAxMzJCRTg2ODM5NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFXio5X9K5pzJj4FlUATLoWtWBS7vM3V3iVeAWQNqmbgeiglZf
lyi23BqyAjosz1gSGLJ9wErr51LBI4gkIo7d46flyu//UwxfCVsymlhYrW3jWyxP
2adSDDZABKdc9Bo6ORHW+pSQesdEFAkD33DRFAsbIXpkFXbqDdNM6U+7gFFIreD7
q0ppokma1nGOheZP/EnWHLopu221FLsvCgwtDCXtrGr0QmbsrEPYeLVNSmSm7sCg
9VkdPJhRs3wrwaWlyUbMxYDdXiUk0mG+j+WjL48lmBhqVAnm30PdBoCML0DzMaaX
Lt8ZFu6q9hmQjvXmKcANJ0BJGTxrpjgOgQ2dAgMBAAGjggH6MIIB9jAdBgNVHQ4E
FgQUzvx1USsK3b4G6ipC56ATK+hoOXkwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL3p2eDFV
U3NLM2I0RzZpcEM1NkFUSy1ob09Yay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBATKkNAwDQYJKoZIhvcNAQELBQADggEBAIiaxF/QxnwUQsmV6jfA
2qlYlYaDLFnINiTtE7yLQNSzMDqSBc0676IPf7qRaV22Yvh9a+AqXIwbHSg4BQuJ
akEMbPq9NleXMe+zwCkFhMZDcP9yb7w+aipGQQYVOUGYRu1nQo75ymhUF/yFpctH
jOe/AphDEtp0xHRxovBUSC4kvejjDj6DP2/haciGDqDDOF3VYZovzcg0vrwbpB2b
MRc/hKdMNXZUxsU1dJJCUdn9SdIPCKZAlUYD9Td/LeEHMPWiMYUFuJL/eEYI0mHv
LLIk7Bjisz9BENoaSO8/cTwBM6v+Yac/zeUIqAcOxQ7VVbKCXMFrjyjyTCD5l8xh
UWM=
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:42:12 2025 by rpki-client