Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/v_gyuObMHrRnypuJf_MWTILhCJk.roa
File:                     v_gyuObMHrRnypuJf_MWTILhCJk.roa (raw, json)
Hash identifier:          JvgF0Wg85+mc8pS9g9zYsshv/dsZpDh1/eRnQY3mu5c=
Subject key identifier:   BF:F8:32:B8:E6:CC:1E:B4:67:CA:9B:89:7F:F3:16:4C:82:E1:08:99
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0CD3
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/v_gyuObMHrRnypuJf_MWTILhCJk.roa
Signing time:             Mon 10 Feb 2025 14:02:55 +0000
ROA not before:           Mon 10 Feb 2025 14:02:55 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131593
IP address blocks:        103.42.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 03:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3283 (0xcd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Feb 10 14:02:55 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=BFF832B8E6CC1EB467CA9B897FF3164C82E10899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:e0:b2:85:43:ab:87:a4:73:94:d2:72:b8:
                    79:d6:ed:90:91:e5:21:36:0d:0e:71:4d:6a:18:3a:
                    de:dd:54:26:1c:78:55:04:b2:26:ba:d7:53:18:f1:
                    42:d8:c2:d5:7a:a9:49:ba:70:e0:fa:1a:58:ce:56:
                    8c:1a:fc:aa:7e:6f:79:93:59:f7:55:00:45:f3:36:
                    30:20:c3:a2:b4:1d:87:82:3c:84:29:1b:85:16:30:
                    c1:7b:c7:df:4d:e3:37:bf:5f:24:52:26:d8:e1:26:
                    16:71:e3:c3:7d:19:09:42:ba:c4:bf:5a:97:9b:73:
                    9e:2a:20:4e:4d:cc:09:0b:99:72:6c:db:50:90:d3:
                    0f:cb:84:2c:0d:d5:36:77:51:3f:34:9c:54:bd:53:
                    e9:05:80:91:4c:e7:38:85:c5:15:61:96:5d:c3:3e:
                    eb:08:76:4d:78:57:8f:67:bb:04:85:3d:5c:26:63:
                    42:80:be:2b:72:20:69:e2:c5:55:74:58:85:e1:d8:
                    3b:b1:e3:44:a8:33:bd:8d:b4:5d:63:0e:61:29:64:
                    21:8a:55:34:d8:e9:0a:23:b0:a6:6b:3c:2d:b7:24:
                    1f:40:d0:0f:96:2e:4b:91:9c:45:73:e3:1f:db:3e:
                    c3:41:f9:66:0f:09:47:90:3a:73:e7:36:e1:32:af:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F8:32:B8:E6:CC:1E:B4:67:CA:9B:89:7F:F3:16:4C:82:E1:08:99
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/v_gyuObMHrRnypuJf_MWTILhCJk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:db:11:52:20:58:a4:b7:c3:55:87:aa:05:bf:3c:c9:7c:4b:
         5d:59:72:1a:f3:56:02:5d:92:f1:b5:b7:bf:7f:36:aa:8a:fe:
         62:a9:86:9f:db:71:6b:2f:2b:28:8f:33:df:80:c4:ed:d0:37:
         b2:a9:71:ae:1f:3f:99:f4:5c:81:4f:d1:61:31:e5:51:c2:2b:
         f1:ad:85:91:e4:2c:70:02:aa:e1:72:70:2b:ae:75:7d:1a:92:
         16:27:b9:95:22:8a:35:73:bb:ed:ce:fc:33:86:4e:8f:a1:99:
         5e:47:f4:00:5e:f6:7f:c2:89:6d:71:27:d4:47:a7:08:64:c3:
         d6:b1:46:81:98:30:8b:63:13:43:b6:32:33:13:e7:7f:42:c4:
         00:cf:dd:d7:c8:72:cb:78:e5:f5:39:6b:66:2d:36:20:ef:44:
         b1:c8:f6:13:71:77:6e:b4:fd:f2:a9:25:e0:df:14:6a:c7:61:
         1f:7a:9f:14:7c:b7:a4:4f:ce:b7:b3:48:9b:0b:25:0b:e0:a4:
         9c:20:99:96:0d:57:00:79:9a:74:ea:ca:93:f0:ef:e2:15:b6:
         8c:ba:e9:74:20:22:a8:88:c4:c2:f5:e3:21:c2:c1:c0:2f:e1:
         47:83:f7:f3:7c:74:d6:10:6e:29:36:ba:2e:78:5f:bc:5a:f6:
         e1:42:63:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:41:16 2025 by rpki-client