Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/-ZBrfRMm4v8VfLQFkvcfzyZtOJw.roa
File:                     -ZBrfRMm4v8VfLQFkvcfzyZtOJw.roa (raw, json)
Hash identifier:          V5YKCbM5iwuqSIaVHYQ4thcE/hQiYbqjkZXAR6IZzuk=
Subject key identifier:   F9:90:6B:7D:13:26:E2:FF:15:7C:B4:05:92:F7:1F:CF:26:6D:38:9C
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       05D6
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/-ZBrfRMm4v8VfLQFkvcfzyZtOJw.roa
Signing time:             Mon 10 Feb 2025 13:57:52 +0000
ROA not before:           Mon 10 Feb 2025 13:57:52 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     56850
IP address blocks:        103.156.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 02:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1494 (0x5d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Feb 10 13:57:52 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F9906B7D1326E2FF157CB40592F71FCF266D389C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:7e:74:f3:c8:54:80:10:da:03:03:5b:6f:
                    8d:7d:a2:3a:00:88:62:53:4f:00:83:4f:68:97:2e:
                    95:c7:cb:2d:02:63:7c:9a:27:12:ad:dd:9f:4b:75:
                    04:88:0b:99:cf:0f:44:55:66:09:27:9e:86:42:53:
                    d9:e7:80:85:54:f6:ad:2f:92:74:4b:25:60:6a:05:
                    e0:bc:2e:d7:19:ad:1c:c9:fc:b9:7a:9e:dd:fe:35:
                    70:05:d9:e2:2c:59:6c:40:15:ac:ee:53:fc:59:c9:
                    18:17:08:a9:0f:d4:b1:4d:96:e9:f8:c0:26:74:76:
                    82:01:86:29:b9:64:aa:0c:3d:bb:ca:36:eb:83:1d:
                    ed:48:28:9e:9c:76:e3:be:a0:ba:62:9d:7a:d7:e6:
                    5b:c7:72:e1:9e:06:15:ee:27:fe:87:77:f6:01:70:
                    db:48:39:9c:e3:d8:31:6c:95:1b:4e:53:b5:eb:e7:
                    36:38:2f:a0:c8:38:70:78:75:4d:62:6a:d8:30:6a:
                    2d:a7:cf:65:2c:11:7c:87:dd:7e:64:9c:b5:ed:7d:
                    0d:69:9c:a6:99:10:67:96:07:e6:ff:84:82:49:9f:
                    c7:e0:c5:8a:9e:c9:bf:b8:30:2a:2a:7e:71:f5:1c:
                    7b:51:34:d3:d1:86:4a:4d:d4:d4:be:6b:b9:22:e7:
                    c4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:90:6B:7D:13:26:E2:FF:15:7C:B4:05:92:F7:1F:CF:26:6D:38:9C
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/-ZBrfRMm4v8VfLQFkvcfzyZtOJw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:b3:ac:b7:7f:40:81:d9:d5:78:f9:c3:d5:f6:37:3f:ef:00:
         95:2f:3c:30:ec:7c:a0:ad:66:a0:bb:cd:25:c4:bd:bc:a6:83:
         c4:f1:ef:50:18:04:cc:70:2b:48:13:33:64:b8:1f:74:98:10:
         87:4e:55:5b:fd:e8:4c:bd:c3:8b:01:4c:13:c7:d9:c9:53:34:
         4a:73:d4:63:43:63:4c:6c:ec:a1:8d:99:81:bd:ed:6b:98:38:
         55:6d:fe:4a:0e:c5:02:83:a7:ec:24:dd:92:37:d8:58:da:26:
         7f:b3:e6:2d:a8:43:7e:ba:c4:8b:36:7c:67:c4:a3:f6:fc:71:
         01:43:9e:12:04:3a:3e:97:03:82:2f:86:b4:38:69:f2:63:9a:
         5c:a0:55:1a:ab:87:76:cc:0a:43:25:1c:70:a8:d7:83:d9:63:
         c7:56:8e:25:be:6f:81:e0:68:01:a0:d9:eb:fc:8d:38:76:b9:
         29:db:6f:2b:39:98:7b:d5:ce:3e:33:e0:b0:29:1a:52:02:64:
         2a:c8:5f:51:f4:2d:1b:76:a6:57:57:ed:97:98:ff:26:00:e8:
         2f:bd:8b:64:4f:2f:eb:95:5a:bc:ba:34:ec:7d:74:0c:e0:de:
         3e:63:e5:41:94:bf:00:3b:76:3d:b7:af:d1:bc:e6:1e:b4:d1:
         e0:f5:23:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:15:51 2025 by rpki-client