Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/YnYPDDJoRoUq4BqL-qCafGwtamg.roa
File:                     YnYPDDJoRoUq4BqL-qCafGwtamg.roa (raw, json)
Hash identifier:          kyz5wprmISfeqfdkLnLfuKnjQc/OVUkX2P5d/2CqSJs=
Subject key identifier:   62:76:0F:0C:32:68:46:85:2A:E0:1A:8B:FA:A0:9A:7C:6C:2D:6A:68
Certificate issuer:       /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial:       049A
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/YnYPDDJoRoUq4BqL-qCafGwtamg.roa
Signing time:             Fri 22 Aug 2025 09:01:41 +0000
ROA not before:           Fri 22 Aug 2025 09:01:41 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     138997
IP address blocks:        103.169.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178 (0x49a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
        Validity
            Not Before: Aug 22 09:01:41 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=62760F0C326846852AE01A8BFAA09A7C6C2D6A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:ef:57:12:06:83:61:de:8a:30:dd:23:cf:
                    54:c7:61:48:7d:c3:37:67:79:5d:89:aa:b5:0f:42:
                    40:9d:dd:d7:cf:cc:60:87:30:2d:6c:1f:90:1b:db:
                    fe:0d:71:24:3b:e3:f5:23:be:15:e2:ac:a0:f3:f5:
                    7e:15:1c:b4:b3:a2:9d:f9:4c:7f:de:91:8b:3c:4b:
                    01:a9:de:cf:bf:61:dd:6b:8c:33:e2:95:db:85:e4:
                    07:13:16:5d:41:6d:0b:cd:17:9c:a5:c6:b6:ee:40:
                    c1:ce:f4:ae:a1:57:0c:cb:3d:de:43:4d:f8:26:62:
                    64:c0:f4:12:73:2e:93:23:8b:c5:6f:31:c5:fa:93:
                    2c:4b:6b:a0:bd:18:14:d4:6c:f3:a5:ad:96:c8:2a:
                    15:e5:ff:f2:ec:c8:02:05:28:90:b0:03:86:98:a8:
                    1f:6f:97:12:63:13:21:cc:3a:81:c0:57:42:d7:9a:
                    55:14:49:e6:ac:84:bc:d2:47:6f:c0:ea:bf:90:13:
                    54:31:bf:0a:dc:72:c7:6a:4b:44:2c:02:a7:25:64:
                    e6:3d:41:76:d5:de:22:cf:0b:cc:2b:2d:06:80:f4:
                    2f:c2:4c:af:81:0f:d7:75:fd:18:e2:a1:e4:23:2b:
                    7c:22:68:f1:d9:12:6e:93:9a:d3:fd:34:60:fc:19:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:76:0F:0C:32:68:46:85:2A:E0:1A:8B:FA:A0:9A:7C:6C:2D:6A:68
            X509v3 Authority Key Identifier:
                keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/YnYPDDJoRoUq4BqL-qCafGwtamg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:0a:02:07:31:04:bc:6f:2e:ce:79:77:17:15:f4:17:83:3a:
         4f:f1:76:07:3d:9c:6b:4e:fd:3b:b9:40:16:d0:19:b5:1d:79:
         81:01:71:86:13:9b:0b:b3:bd:91:24:9d:5e:76:3b:64:e0:ee:
         d6:b9:c7:b9:1d:26:29:44:e4:91:dc:15:ac:03:ec:c2:29:34:
         2d:ea:f2:f1:e9:47:e5:39:e0:04:ce:8a:09:3b:85:54:49:73:
         fd:01:11:9b:49:30:1c:6f:57:a4:fd:10:8a:ec:74:0b:e6:42:
         b3:6f:9f:b1:6e:db:7a:38:9e:13:13:69:25:80:28:e1:52:a9:
         3e:e7:e6:56:b9:a2:1e:19:9f:aa:4c:2d:83:fc:9d:f4:e6:7c:
         f9:36:59:ed:27:c9:4e:b8:d5:00:84:79:8d:6c:60:e4:18:30:
         87:be:16:0e:70:3a:d1:e7:5a:1d:79:93:dc:c7:b2:11:fd:0f:
         e0:ac:4b:c8:60:94:a7:e7:22:f3:df:df:b2:38:a5:7b:4e:e2:
         fb:09:35:f8:4f:cc:18:d7:18:c5:c6:a0:99:04:e7:12:73:ce:
         74:d7:74:5b:1b:e3:48:25:79:3a:14:dc:10:85:16:e2:d2:05:
         b5:ba:49:78:e7:f4:33:02:4b:2f:10:f0:98:50:d5:c4:0a:1d:
         d7:75:dd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:47:06 2025 by rpki-client