Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/I92FI40ZSz_8Woj3VvD4JfGU-LI.roa
File:                     I92FI40ZSz_8Woj3VvD4JfGU-LI.roa (raw, json)
Hash identifier:          w9U7beKAPWdi96OvqFDsw9XljntWBGxTsgcfX8tKVmY=
Subject key identifier:   23:DD:85:23:8D:19:4B:3F:FC:5A:88:F7:56:F0:F8:25:F1:94:F8:B2
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1083
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/I92FI40ZSz_8Woj3VvD4JfGU-LI.roa
Signing time:             Fri 22 Aug 2025 08:55:34 +0000
ROA not before:           Fri 22 Aug 2025 08:55:34 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        120.96.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 17:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4227 (0x1083)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Aug 22 08:55:34 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=23DD85238D194B3FFC5A88F756F0F825F194F8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:0a:eb:bd:5a:51:c7:07:38:79:13:4c:e0:
                    5a:f2:ef:2b:60:74:3e:a6:eb:5b:5e:3f:d9:03:5a:
                    90:e6:7e:7e:e3:22:c3:4c:02:2d:dc:db:d7:81:62:
                    66:0d:a9:f4:76:d3:96:b7:59:9f:8e:e8:02:b7:13:
                    8f:ff:7b:16:5f:7e:0c:d3:56:8d:d2:d0:23:ba:eb:
                    7d:be:05:0d:23:cb:20:e0:15:cb:57:4f:d4:90:dd:
                    69:24:77:87:6a:87:e8:ea:c2:a9:7f:e0:64:c0:33:
                    2c:54:5c:e4:50:cc:97:a3:71:f9:8c:8f:26:06:29:
                    0b:a5:2a:1d:58:5a:d5:bb:73:67:86:c1:33:f0:e7:
                    d7:d3:72:2f:c5:75:70:5d:be:57:4e:85:55:35:10:
                    cb:f3:55:d3:77:34:87:cb:bd:76:cd:a8:37:77:78:
                    3e:e3:ec:97:40:e4:26:71:d3:aa:fd:4e:50:a4:db:
                    dc:02:0f:72:cb:df:a8:cf:fe:41:b5:d4:ba:9f:6f:
                    90:18:1b:16:ae:f8:ef:42:b2:76:87:3d:e6:c1:5b:
                    04:4a:c4:f8:81:07:67:7b:3e:0a:15:07:a3:79:66:
                    a2:df:65:bd:55:41:49:27:ae:61:30:4a:ee:54:04:
                    5b:21:e5:df:fb:74:d4:31:15:76:0f:82:42:b9:71:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DD:85:23:8D:19:4B:3F:FC:5A:88:F7:56:F0:F8:25:F1:94:F8:B2
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/I92FI40ZSz_8Woj3VvD4JfGU-LI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.96.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9a:f3:89:43:ef:65:55:d4:c3:8f:21:11:2e:48:b2:fb:e1:3c:
         97:cd:c8:b4:0d:71:61:f3:1d:bf:a1:f0:a7:c1:48:2c:83:e4:
         2d:ed:35:da:1a:50:61:e6:9b:f4:f4:9a:e3:bc:bb:71:56:0d:
         03:78:68:eb:ec:0c:8c:74:12:9a:b7:50:b5:64:fc:fa:60:e0:
         d1:8c:09:87:49:35:1f:25:36:87:f2:cc:47:0e:20:75:84:b2:
         3a:f3:14:6b:b3:1a:8a:e9:6f:be:4e:d8:1a:78:db:e2:bb:f7:
         f6:8c:81:90:6e:b4:57:0c:6a:61:60:14:6c:ba:55:76:f8:f5:
         3f:33:e8:18:54:d7:37:33:03:81:99:4a:5f:a7:ea:66:12:77:
         d2:58:94:0a:01:f4:35:33:ba:23:70:22:34:2d:80:0b:7f:02:
         98:6f:92:40:e5:e3:11:73:aa:a1:a0:49:78:88:c5:c4:2f:00:
         63:85:33:ff:c5:b6:0d:05:e0:f1:f0:89:93:ec:8a:a2:95:b3:
         82:e3:0c:9d:d4:c9:88:03:82:29:7f:0a:bd:bc:e0:ba:04:9e:
         30:d6:08:fc:da:eb:e2:67:d2:d6:ea:85:b0:6a:85:7b:98:74:
         87:58:d1:0a:4b:15:74:e2:72:c0:68:ad:ed:d9:5e:97:62:8b:
         fa:e8:ce:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:36:49 2025 by rpki-client