Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/d2M_1V24Us_z9EnELgmEV_7l_aw.roa
File:                     d2M_1V24Us_z9EnELgmEV_7l_aw.roa (raw, json)
Hash identifier:          pv6zyoZubn54bdfQi+gSNpZIELKKvcMot5DmzNJojLo=
Subject key identifier:   77:63:3F:D5:5D:B8:52:CF:F3:F4:49:C4:2E:09:84:57:FE:E5:FD:AC
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       107A
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/d2M_1V24Us_z9EnELgmEV_7l_aw.roa
Signing time:             Fri 22 Aug 2025 08:55:31 +0000
ROA not before:           Fri 22 Aug 2025 08:55:31 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        120.110.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4218 (0x107a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Aug 22 08:55:31 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=77633FD55DB852CFF3F449C42E098457FEE5FDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:12:e6:a8:0b:05:b3:83:86:a9:ad:0b:22:
                    55:79:35:4e:ce:22:eb:19:51:0d:a0:87:68:a6:8d:
                    5a:1e:d6:13:cd:6d:41:e1:2b:5d:b4:6f:2f:59:fd:
                    77:1b:7e:9a:6a:6e:0b:ac:c8:97:d2:06:02:bf:58:
                    33:16:4f:ac:f6:7f:a4:1e:b1:09:3f:0a:7b:e7:8d:
                    dd:f4:dd:91:41:1a:41:c2:07:f4:2a:12:ab:81:a8:
                    d1:39:f6:ba:d7:7b:22:e1:51:a7:07:78:8a:fd:94:
                    0e:6e:05:b4:3d:d6:37:d0:26:57:12:86:09:46:39:
                    ba:9c:a3:5d:d7:65:6e:98:83:21:d6:2f:1b:64:59:
                    8e:31:a8:40:c1:b0:71:55:57:ed:35:26:f9:b0:6f:
                    dd:0f:b5:59:0a:a6:9b:39:6d:b4:ba:b2:c4:aa:29:
                    48:35:30:14:c3:f1:b8:58:a0:c8:02:04:26:f1:6e:
                    59:b9:1c:38:3a:61:95:5e:9c:f6:c6:87:97:c1:bd:
                    72:bc:e5:d5:4c:70:37:b9:26:53:ec:50:cb:89:67:
                    78:b4:5d:84:84:ed:a7:39:df:d3:54:c3:d8:4b:9e:
                    2c:24:61:07:6e:ca:d9:7b:98:f3:92:b6:46:cc:d5:
                    0f:31:1c:d6:b8:f7:41:4a:8c:99:05:45:3d:3c:45:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:63:3F:D5:5D:B8:52:CF:F3:F4:49:C4:2E:09:84:57:FE:E5:FD:AC
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/d2M_1V24Us_z9EnELgmEV_7l_aw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:05:47:92:0e:2c:21:06:09:30:9a:5b:ca:52:44:92:04:
         e1:1b:f8:33:82:6b:22:e2:be:ba:92:28:85:ae:a0:31:45:cb:
         f0:1d:4c:f0:ac:fc:39:be:ac:09:ca:41:cd:a3:f8:af:97:77:
         36:f0:f9:0d:e6:60:ac:94:4f:43:6b:4f:a6:ec:b5:a1:bf:59:
         e9:4e:ee:09:3a:b5:57:1c:be:7a:e6:dc:3e:33:30:e4:0d:cd:
         ea:d0:c3:76:fa:b8:9a:92:05:a6:d8:71:95:b1:05:5a:c8:0c:
         23:9e:ea:5b:4a:e9:a8:42:1f:7e:5e:6c:cc:d2:4b:4d:a1:0c:
         a4:9b:31:61:74:d5:7e:2e:86:97:a3:43:32:df:91:93:bb:40:
         06:3c:0c:73:58:d0:43:00:0b:4e:34:81:26:5f:a2:f6:06:0b:
         ec:03:26:35:2e:47:b1:77:17:bf:e9:fc:8b:54:61:80:71:ef:
         14:62:bf:25:ee:ce:ad:ac:8a:bd:17:b3:b8:68:24:2f:4b:a4:
         0a:10:00:b8:6d:77:74:5a:a2:fe:32:20:49:98:c8:79:1a:b7:
         4f:a8:1d:05:c1:2d:51:e9:da:86:7d:0d:3b:54:06:2b:69:14:
         4b:63:c2:83:1b:e9:93:4d:f5:5a:96:ec:e6:3a:4c:ab:ea:2b:
         1e:12:a9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:57:19 2025 by rpki-client