Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WISTRON/mCHvVHpGfKuhmttRNl9HHQHBTAI.roa
File:                     mCHvVHpGfKuhmttRNl9HHQHBTAI.roa (raw, json)
Hash identifier:          hn0Bq3ZnhNo3VNrymOZK60+U8Y38hEilSnlLyRNaQmA=
Subject key identifier:   98:21:EF:54:7A:46:7C:AB:A1:9A:DB:51:36:5F:47:1D:01:C1:4C:02
Certificate issuer:       /CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
Certificate serial:       0D21
Authority key identifier: 53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/mCHvVHpGfKuhmttRNl9HHQHBTAI.roa
Signing time:             Fri 22 Aug 2025 08:52:47 +0000
ROA not before:           Fri 22 Aug 2025 08:52:47 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131599
IP address blocks:        103.200.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3361 (0xd21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
        Validity
            Not Before: Aug 22 08:52:47 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=9821EF547A467CABA19ADB51365F471D01C14C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1e:96:1d:5f:be:00:a8:a5:a5:df:c3:f4:8d:
                    db:15:34:d0:29:c5:2b:c4:97:70:af:f6:d3:45:7d:
                    96:10:8e:aa:38:b9:73:2f:d7:40:11:e9:f9:84:3e:
                    6e:a2:6f:ba:c4:6e:ed:9c:90:c2:dc:c2:4c:e0:0f:
                    c8:34:3f:2f:42:73:ec:90:fb:c9:14:e5:cb:b4:ed:
                    68:7b:65:17:84:85:cd:50:d5:e1:68:33:32:58:e1:
                    7b:3a:f5:21:01:27:a1:19:a9:c5:86:28:03:41:bf:
                    47:a9:73:88:8f:1f:f8:7b:8d:80:03:a1:88:7f:35:
                    c9:91:f9:10:90:41:52:21:2d:4f:db:2c:3f:dd:8a:
                    b4:a6:fa:40:99:e1:6d:b2:8c:c7:65:7e:7a:5c:83:
                    74:10:b1:2c:fe:84:65:7f:5b:05:7c:bb:8e:b5:bc:
                    19:fe:ff:ce:23:1a:82:4b:29:f9:2a:4f:c3:e9:6a:
                    c8:8d:15:66:a4:94:d3:48:9e:50:62:ff:98:af:a5:
                    4a:93:b0:30:91:11:6f:e1:fd:66:be:17:58:95:99:
                    8d:2c:55:b6:65:f4:cf:2e:55:ca:e2:d6:f7:ad:63:
                    9a:f6:75:20:be:57:7f:9b:05:5d:22:46:02:6a:32:
                    3d:cd:72:b2:37:86:7d:20:4b:92:31:1e:03:d8:2a:
                    62:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:21:EF:54:7A:46:7C:AB:A1:9A:DB:51:36:5F:47:1D:01:C1:4C:02
            X509v3 Authority Key Identifier:
                keyid:53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/mCHvVHpGfKuhmttRNl9HHQHBTAI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:53:d8:f6:bd:dc:fe:99:26:98:c2:32:f8:37:2f:2e:10:92:
         c4:53:99:7d:45:df:0a:7c:f9:b2:e3:3c:b6:66:60:20:f9:bd:
         f9:de:f3:fd:c5:c1:a6:e9:2f:8d:70:88:c6:6f:82:d1:a4:7d:
         01:48:c8:5c:46:c7:77:7c:a4:98:56:a7:02:9c:4e:8e:fb:c2:
         9f:6b:1e:cc:25:d6:d1:18:fa:20:9e:c4:2e:9b:1b:4a:dd:7e:
         bc:3a:d2:d1:19:c0:97:20:3d:5a:0a:ff:90:c7:b7:3b:aa:95:
         b7:50:dc:89:17:8f:27:4f:f0:eb:b9:e1:d6:f9:a8:f9:51:c0:
         c7:7c:89:b9:32:c9:38:82:7b:37:21:9c:d1:6f:d3:4b:1d:a1:
         13:f9:91:6b:a0:af:0b:8d:92:94:00:1b:3d:37:55:49:bd:cc:
         dc:c1:ba:95:ac:f8:d0:ac:11:2d:db:8d:0e:93:54:32:79:b9:
         70:91:17:66:54:d2:10:92:82:53:c5:4e:ab:94:07:39:46:51:
         e1:96:36:f7:9f:b6:87:b5:88:fc:fa:3c:9c:f8:45:b2:1f:af:
         04:f2:f5:20:d6:0d:6e:6e:ac:2b:ef:0c:e9:e0:a1:20:15:e5:
         ae:c3:bf:24:8a:7e:1c:b3:8b:10:66:69:08:57:44:c2:f0:1f:
         3b:56:4a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:52:28 2025 by rpki-client