Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/uWwCVMAobLD8sfFZ8f2tC_Sxu5k.roa
File:                     uWwCVMAobLD8sfFZ8f2tC_Sxu5k.roa (raw, json)
Hash identifier:          t1tQCBaRlIyohvjX9egKGWwEEYRaenkEn6rtw3mVDAg=
Subject key identifier:   B9:6C:02:54:C0:28:6C:B0:FC:B1:F1:59:F1:FD:AD:0B:F4:B1:BB:99
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0F0E
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/uWwCVMAobLD8sfFZ8f2tC_Sxu5k.roa
Signing time:             Fri 22 Aug 2025 08:50:05 +0000
ROA not before:           Fri 22 Aug 2025 08:50:05 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24168
IP address blocks:        103.30.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3854 (0xf0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Aug 22 08:50:05 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B96C0254C0286CB0FCB1F159F1FDAD0BF4B1BB99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:89:7a:0a:ec:12:c2:d7:a8:c1:29:de:82:
                    fe:e0:46:08:50:1d:19:a3:03:50:d2:32:9a:e9:03:
                    4e:0e:99:9a:69:05:e4:e0:d0:cb:c7:42:de:a0:34:
                    53:05:c8:aa:49:73:dc:03:e3:39:ae:6b:00:bc:49:
                    39:98:26:10:81:7a:4c:73:6e:97:9f:72:cd:ca:5f:
                    fa:9a:c1:a9:08:ff:2a:cf:5c:2b:7e:cd:89:a5:59:
                    73:fa:bc:d8:b2:4e:37:fc:83:85:05:78:df:62:c1:
                    11:ce:88:f1:93:41:1b:c7:9b:0e:8d:58:78:5a:2f:
                    5f:3d:02:10:0a:7a:8e:2e:65:44:15:75:5c:ca:27:
                    32:04:f4:8b:75:d6:4d:4d:b2:71:0c:7f:bc:db:98:
                    71:24:2a:d4:40:3e:5b:95:6c:d0:4b:70:b1:de:fd:
                    7a:fe:57:bd:2c:79:a9:d1:19:22:bb:e9:7e:36:f5:
                    58:51:a8:92:da:dd:a2:de:f7:f4:82:0f:e2:35:4b:
                    aa:a3:d2:2b:40:e2:3b:f1:12:92:f7:2b:70:96:6a:
                    4c:46:6b:bd:7d:d7:e5:91:65:44:35:a5:f9:2c:9f:
                    5a:ba:49:02:64:bf:d7:58:1c:21:de:db:40:5b:65:
                    03:46:7e:1b:5a:ec:ff:cd:fb:fa:e6:f6:86:26:09:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6C:02:54:C0:28:6C:B0:FC:B1:F1:59:F1:FD:AD:0B:F4:B1:BB:99
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/uWwCVMAobLD8sfFZ8f2tC_Sxu5k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:0e:68:8b:ce:cc:80:95:3c:ef:f1:9b:88:fe:54:e0:c2:56:
         89:1a:1e:02:9d:a0:f8:e5:a2:01:70:66:39:ca:70:b1:67:2a:
         9c:24:9e:6f:6e:70:7f:3c:e7:8b:fe:96:ef:5c:cc:60:cc:50:
         76:c9:53:91:d4:b9:07:99:8b:70:19:17:18:e3:ff:c1:17:0e:
         0f:04:a8:6d:4b:83:aa:5a:f2:c1:fe:1b:84:37:9f:c4:0e:32:
         2d:cc:4b:bf:63:1d:f7:9e:14:8b:69:fc:e2:17:0c:67:c9:83:
         22:a0:40:16:33:26:15:c9:cf:f1:ee:2d:c0:2f:a0:cf:80:66:
         7a:b8:5f:ce:9f:91:08:45:33:ed:1a:d9:ff:71:64:db:dd:0c:
         da:f3:31:98:ca:75:5b:50:76:2c:1d:9a:09:db:24:e6:07:46:
         86:62:9a:4b:29:4f:b1:69:ea:84:53:7f:9e:3b:35:f5:eb:51:
         44:66:70:df:1f:1a:ee:05:7b:b5:3d:7a:8a:37:9c:a1:d8:b3:
         ac:ef:ca:79:23:90:9f:b6:fb:85:e9:b8:3a:6b:a8:c5:d4:db:
         3d:45:1b:ac:e6:0d:56:2b:9f:8d:73:f5:b7:1c:19:10:93:a1:
         96:9d:5a:fa:6d:d5:c1:4b:b1:d0:56:44:a6:e2:34:9e:ab:cb:
         04:b4:1f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:41:56 2025 by rpki-client