Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/_jcDYm26oykeHcshpzpZHRceENM.roa
File:                     _jcDYm26oykeHcshpzpZHRceENM.roa (raw, json)
Hash identifier:          jL8R7zdWDJ1lHiH+hanKgzQ79OAcCuykBOe/4wzw/LY=
Subject key identifier:   FE:37:03:62:6D:BA:A3:29:1E:1D:CB:21:A7:3A:59:1D:17:1E:10:D3
Certificate issuer:       /CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
Certificate serial:       0D24
Authority key identifier: 33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/_jcDYm26oykeHcshpzpZHRceENM.roa
Signing time:             Fri 22 Aug 2025 09:03:59 +0000
ROA not before:           Fri 22 Aug 2025 09:03:59 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18046
IP address blocks:        103.16.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3364 (0xd24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
        Validity
            Not Before: Aug 22 09:03:59 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=FE3703626DBAA3291E1DCB21A73A591D171E10D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:5e:d4:5f:c4:7d:59:d2:db:88:27:21:d0:
                    95:93:bd:e7:f5:8c:0a:5f:5e:47:83:17:f2:ef:9d:
                    a7:6f:08:bd:d1:20:8b:43:21:3d:52:6f:a9:e1:44:
                    e0:48:b9:7c:bb:d4:99:81:65:06:03:d1:ce:41:2e:
                    f0:7e:75:3b:6c:5e:f7:63:53:e7:34:29:c8:ef:e0:
                    fb:b6:b1:56:f2:a3:df:fd:b4:8c:ab:85:a0:2b:c8:
                    c1:7e:a9:46:a5:31:f7:a3:68:6d:94:05:d1:63:5c:
                    f1:8d:55:c2:2a:59:14:a5:ca:17:b2:30:df:f1:be:
                    20:2f:9b:a9:f9:6f:36:30:a0:5c:18:cc:73:ad:ac:
                    9b:0e:71:bc:12:63:51:6a:7f:9b:54:1e:92:c2:c4:
                    4c:d4:04:f7:9c:ae:9d:06:9f:31:b9:d9:a1:ec:67:
                    17:5c:3c:c8:6f:2e:bb:62:00:f7:fe:8f:96:25:fe:
                    9a:46:70:41:1b:2d:20:26:86:9e:40:1b:e7:29:b7:
                    88:93:c7:a6:c1:73:a7:68:3a:cc:94:bd:ce:32:e4:
                    d8:bf:96:0e:9a:17:7a:8e:a6:87:ec:06:be:f2:ce:
                    cb:ca:38:f5:28:ec:90:60:17:3c:4e:fb:2c:5f:f1:
                    38:0d:84:83:23:6b:a6:68:d4:90:49:06:d8:d5:bb:
                    86:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:37:03:62:6D:BA:A3:29:1E:1D:CB:21:A7:3A:59:1D:17:1E:10:D3
            X509v3 Authority Key Identifier:
                keyid:33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/_jcDYm26oykeHcshpzpZHRceENM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:29:d8:f6:40:fa:56:f3:85:f4:e2:cc:34:38:b5:8c:82:96:
         0d:2c:f2:b7:14:93:16:80:78:e5:b9:22:3c:4d:16:e1:48:53:
         ed:db:63:7e:ad:bb:40:19:fa:4b:88:48:57:07:68:2b:fe:86:
         c4:b0:3d:80:53:c0:55:d2:95:2b:67:ab:09:cd:e5:dc:be:6a:
         d2:19:a1:fc:bf:30:51:7f:e2:75:9e:13:cc:9f:c7:52:99:40:
         69:74:eb:00:66:f2:3e:e3:14:53:59:a3:9f:ee:b8:cc:38:0b:
         c2:54:ad:f2:f2:46:e3:14:57:a8:6a:11:c6:21:2f:05:46:1a:
         e4:13:75:e7:ec:2a:8a:54:0a:de:d1:49:8a:3b:f5:e5:d9:c4:
         f1:34:35:2a:ad:c0:1f:6c:e7:39:08:02:ce:65:20:e6:11:16:
         1f:aa:2b:91:83:c5:49:08:74:51:cf:6b:5a:52:55:9d:ff:d0:
         9f:29:57:d6:a3:17:bf:60:f3:f6:c5:2a:21:e6:1c:7a:09:8d:
         1a:8a:49:f7:67:72:c8:42:91:f5:54:37:a4:a0:4f:cc:0c:d7:
         0f:11:a3:eb:11:9d:77:0f:43:b6:f7:e4:b5:84:4a:de:3e:c0:
         e6:c5:72:1a:ed:64:5c:a8:02:3c:6d:fe:4e:0f:b3:c1:e8:66:
         bf:79:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:26:33 2025 by rpki-client