Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TSMC/ts9bpAAhFi81vgAlhGfsvhSD_30.roa
File:                     ts9bpAAhFi81vgAlhGfsvhSD_30.roa (raw, json)
Hash identifier:          PIFH4+hSONmV+GJVSp+1MaV9uVQYz8MB8Cuyln/d2C8=
Subject key identifier:   B6:CF:5B:A4:00:21:16:2F:35:BE:00:25:84:67:EC:BE:14:83:FF:7D
Certificate issuer:       /CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337
Certificate serial:       13F8
Authority key identifier: 3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/ts9bpAAhFi81vgAlhGfsvhSD_30.roa
Signing time:             Fri 22 Aug 2025 09:01:36 +0000
ROA not before:           Fri 22 Aug 2025 09:01:36 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     3462
IP address blocks:        103.132.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5112 (0x13f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337
        Validity
            Not Before: Aug 22 09:01:36 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B6CF5BA40021162F35BE00258467ECBE1483FF7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2d:5a:f4:e6:f3:41:0a:11:84:16:c7:61:1c:
                    18:12:3b:6a:e4:b0:9d:50:64:4d:b8:03:2e:16:f3:
                    24:81:d9:92:c2:ba:80:b9:10:40:a6:de:30:8c:63:
                    d3:68:68:a0:22:9c:d2:79:8e:85:80:05:08:c4:c0:
                    86:ff:bb:c9:be:54:c9:a6:ce:7f:ad:c1:ef:56:77:
                    3a:01:4a:f1:65:57:a2:39:1a:8b:bb:e5:8d:a1:3e:
                    16:25:17:a6:1d:17:23:f8:a7:7e:92:bb:f0:41:1d:
                    e7:be:cf:57:f0:a1:e5:30:24:69:86:04:a6:b9:d3:
                    a2:48:bf:ad:ce:0b:2f:8b:0b:bd:0c:c4:88:85:f2:
                    f6:66:7f:75:79:9b:1d:9e:0a:b5:ae:2b:75:6a:d3:
                    9a:fa:eb:95:10:c6:db:fb:d4:1a:64:0c:d4:38:1d:
                    e0:df:aa:26:36:be:e5:87:27:a2:d3:17:5b:38:4a:
                    42:1a:76:95:51:86:6d:5e:8c:35:2a:53:f4:31:66:
                    0a:54:64:29:87:ea:c6:d6:c5:b3:55:10:a8:b2:0f:
                    c9:f2:f3:0e:5a:f0:d5:12:09:b7:eb:e7:40:89:11:
                    1b:fb:42:dd:d3:f5:94:72:a8:cd:ec:74:58:26:39:
                    21:46:58:0c:11:b3:b8:88:6e:a6:0b:60:23:0e:3d:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CF:5B:A4:00:21:16:2F:35:BE:00:25:84:67:EC:BE:14:83:FF:7D
            X509v3 Authority Key Identifier:
                keyid:3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/ts9bpAAhFi81vgAlhGfsvhSD_30.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:07:6f:6d:67:28:3b:75:b0:cf:b5:3c:99:ec:a3:94:8c:be:
         d4:f4:36:3e:17:99:7b:20:a5:ae:65:88:71:96:59:77:52:5c:
         53:ca:c1:d9:c5:2b:36:b4:8a:0f:93:42:3f:40:12:a9:7a:30:
         6d:57:4a:87:e6:c9:f5:4e:c7:ca:c4:69:28:ff:a5:d8:b3:be:
         5e:14:57:58:9f:bb:5a:a3:55:d3:79:a1:e5:22:a6:bd:0f:5d:
         7f:de:3e:11:7f:15:61:81:6e:42:61:24:a6:d3:60:63:7b:94:
         c1:13:82:f2:b5:fa:15:0f:45:16:eb:3d:71:10:78:8b:a6:36:
         1b:37:c5:e2:e3:4f:2a:0f:f7:c3:e6:23:db:71:ae:66:07:47:
         89:a7:44:ff:c9:38:b2:a5:74:1c:cf:53:b8:c4:61:60:2a:2c:
         6b:fc:9c:8e:a4:f2:9b:a1:8d:70:74:5b:af:d0:39:75:a7:6f:
         2b:c6:35:7a:e9:6b:98:37:2d:0f:96:7b:c6:73:9d:98:1e:7f:
         99:d0:b2:72:7e:bd:c8:2c:a1:90:94:62:f1:42:8a:43:d7:65:
         9d:5f:96:88:ea:30:2a:05:87:c0:88:4b:cd:fd:db:5a:a1:68:
         e8:08:9f:11:93:1a:35:a4:f7:35:ca:57:f6:86:d3:9b:73:d4:
         c9:b2:84:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:19:46 2025 by rpki-client