Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/qzfC8xXw13QoZvAeirHoMoMjF_w.roa
File:                     qzfC8xXw13QoZvAeirHoMoMjF_w.roa (raw, json)
Hash identifier:          +hd+V4pZkluuElVHK+JxYxJyAfdrWEVCrNirnInG1o8=
Subject key identifier:   AB:37:C2:F3:15:F0:D7:74:28:66:F0:1E:8A:B1:E8:32:83:23:17:FC
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0F12
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/qzfC8xXw13QoZvAeirHoMoMjF_w.roa
Signing time:             Fri 22 Aug 2025 08:50:06 +0000
ROA not before:           Fri 22 Aug 2025 08:50:06 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18424
IP address blocks:        103.30.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3858 (0xf12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Aug 22 08:50:06 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=AB37C2F315F0D7742866F01E8AB1E832832317FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6a:6a:bc:74:51:19:a3:a6:cd:c2:d1:e3:1e:
                    40:a0:4c:64:42:8d:8f:db:29:98:c0:8d:d1:42:b5:
                    5e:e3:7b:20:b2:80:9d:00:8c:0e:86:cf:ff:e9:a2:
                    5b:28:25:77:19:78:8b:95:9e:25:6a:e4:66:0b:62:
                    33:4b:24:0b:fe:b1:ca:cc:33:5f:2a:c3:22:74:7c:
                    7f:dd:4c:ca:1c:fc:b0:0b:d0:48:03:ac:58:87:38:
                    8a:ee:ce:4e:b6:ac:18:de:4a:c6:c6:4f:d5:4a:03:
                    49:2e:e6:ae:00:64:ff:20:c1:21:3c:96:5e:88:c3:
                    c2:11:45:fe:9c:74:2c:30:8e:1f:04:f4:c9:de:93:
                    73:fa:e3:a9:84:13:9a:5f:cf:63:c8:9e:53:0f:20:
                    8f:35:2c:d8:44:2e:e8:bf:a2:fa:80:2b:04:c3:61:
                    8d:32:94:45:e0:54:27:b6:71:86:b9:a3:fc:f4:4b:
                    3d:9f:9c:2f:f2:8d:9b:3d:8d:08:c6:5d:9c:f0:ae:
                    bf:32:ff:c7:49:6d:cd:35:c6:ef:fc:6f:b5:cf:5e:
                    81:13:04:50:ec:92:d6:62:f8:29:00:e8:52:5b:b3:
                    1c:94:c8:19:50:77:f0:e5:46:65:33:a5:57:3c:d0:
                    13:b6:b3:52:46:1e:a2:11:1c:1a:70:78:0a:16:b7:
                    e2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:37:C2:F3:15:F0:D7:74:28:66:F0:1E:8A:B1:E8:32:83:23:17:FC
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/qzfC8xXw13QoZvAeirHoMoMjF_w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:94:d6:0d:38:d7:c7:bd:50:2e:8a:ea:88:c3:c7:f1:63:e1:
         e8:e2:fc:de:6c:24:1a:14:f1:e9:5c:46:7a:61:52:63:cf:0b:
         83:85:48:15:fe:a4:dc:25:6f:b1:c8:37:5c:5d:28:bd:11:8a:
         4a:de:d7:c2:98:e4:30:be:1c:4a:24:39:83:dc:62:21:41:da:
         61:25:2b:cf:98:33:44:70:aa:8f:fe:f3:42:83:37:74:a1:8c:
         f9:8f:49:dd:18:0e:45:47:4b:6d:5c:0f:4f:86:81:46:e6:44:
         3a:95:1a:da:04:f9:f5:84:81:df:27:6a:09:0e:40:3a:5c:2b:
         4c:83:7a:08:4a:87:02:79:ee:9b:66:38:85:71:5f:60:57:e4:
         83:c5:7a:fd:3a:e3:63:49:fd:2d:be:28:6c:79:d8:91:91:78:
         24:cb:06:1d:be:2c:8c:93:f6:19:50:4b:21:c0:ed:8b:a1:9f:
         c6:59:27:b2:78:1b:18:70:a4:11:9b:33:b2:b8:e1:88:13:30:
         48:00:54:bc:37:18:78:13:e0:c1:5d:8b:95:b0:f6:4d:19:4c:
         37:c2:e2:7b:ee:91:3f:cf:59:c9:ea:89:ae:bc:8d:8f:94:51:
         25:3c:2a:5a:07:e9:49:e9:4a:cd:9e:fa:45:2c:51:f1:35:81:
         8b:87:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:42:07 2025 by rpki-client