Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Im31FTFfq7IOcudn-2_HewXDFWk.roa
File:                     Im31FTFfq7IOcudn-2_HewXDFWk.roa (raw, json)
Hash identifier:          zmCRMqPOYjEc5y0kRvM2blLF0CnRGLncQ1XjOYcj8Tw=
Subject key identifier:   22:6D:F5:15:31:5F:AB:B2:0E:72:E7:67:FB:6F:C7:7B:05:C3:15:69
Certificate issuer:       /CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD
Certificate serial:       0571
Authority key identifier: B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Im31FTFfq7IOcudn-2_HewXDFWk.roa
Signing time:             Wed 05 Nov 2025 08:25:43 +0000
ROA not before:           Wed 05 Nov 2025 08:25:43 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     14618
IP address blocks:        103.196.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Nov 2025 11:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1393 (0x571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD
        Validity
            Not Before: Nov  5 08:25:43 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=226DF515315FABB20E72E767FB6FC77B05C31569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:02:65:0e:06:02:7f:63:63:15:35:4b:ee:4c:
                    7b:27:ed:dd:e2:a5:9f:32:7b:47:f3:6c:31:63:48:
                    61:cf:cc:8f:b6:33:af:5e:c8:a9:0c:ae:d0:2c:eb:
                    89:38:6c:47:d4:2f:d5:7b:35:b7:03:24:11:aa:54:
                    95:23:e6:6d:94:7c:2a:dd:00:3c:3d:ae:b3:e0:4e:
                    b6:b0:9c:c1:3f:ea:ec:75:5a:dd:0b:07:73:34:a0:
                    df:d1:b9:25:ff:53:b0:44:6c:2b:73:08:43:26:8e:
                    be:dd:d6:b4:bc:3e:40:da:cc:4a:32:09:b1:a1:b0:
                    a9:8f:9e:03:5d:59:7a:74:39:2b:05:8b:07:4f:ec:
                    ec:ca:21:5c:20:09:39:ac:fa:e4:a0:d8:a1:a4:93:
                    8c:38:99:96:e2:a5:03:e2:05:89:9b:62:3e:8e:34:
                    b2:e0:ae:f4:35:3d:d3:47:20:dd:e3:57:37:e9:7f:
                    2d:5d:7b:36:3c:b9:71:16:f1:39:87:6f:59:f5:6e:
                    ac:8d:7a:7d:19:34:97:ae:09:82:15:9d:7c:7d:74:
                    62:d5:12:19:92:1a:6d:db:7d:02:31:c0:ed:45:26:
                    22:85:44:8e:dc:34:b1:05:0f:bf:c3:12:c3:01:36:
                    14:d0:42:ea:cf:48:86:88:45:64:26:b3:64:6c:51:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6D:F5:15:31:5F:AB:B2:0E:72:E7:67:FB:6F:C7:7B:05:C3:15:69
            X509v3 Authority Key Identifier:
                keyid:B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Im31FTFfq7IOcudn-2_HewXDFWk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:bc:7d:08:5a:22:71:f3:c0:e1:ad:59:43:12:83:56:ba:fb:
         94:79:a2:0d:92:54:8e:e3:f4:24:ab:82:38:59:e9:5c:f6:9f:
         9a:fd:a5:e0:9c:21:f6:d2:da:df:b6:f9:49:ff:d0:3f:f4:4a:
         e4:2d:3d:cb:15:61:93:4b:79:6b:98:ef:fd:64:10:e6:d8:57:
         cb:3e:20:01:e4:ba:f2:b0:07:96:87:e5:23:c5:83:16:c7:75:
         21:6a:27:2c:8e:40:96:b4:7f:1a:34:28:6a:c6:3e:ad:e4:f3:
         f0:55:e8:5b:1b:ac:49:7c:bd:8b:98:ab:87:9a:ee:8e:7d:29:
         86:d5:7e:33:9f:36:c9:68:b1:e2:cf:07:42:75:70:03:fa:27:
         e6:45:03:d3:85:8d:93:88:83:8f:fe:7f:b3:e3:b3:cd:22:b3:
         00:ab:f3:2c:11:43:18:a2:5e:fc:82:df:73:f9:9d:42:a1:0f:
         96:7f:fc:16:b3:09:79:45:38:79:af:47:4f:11:a7:34:47:26:
         20:7b:63:03:cd:9e:75:48:83:3b:0d:95:1d:fb:59:8c:fe:00:
         e5:90:b5:0e:28:21:d4:cb:33:d2:ec:7b:63:9c:ad:b8:ae:e8:
         7a:8c:b0:7e:8d:be:e9:f6:f5:75:50:24:bb:ca:33:14:69:7f:
         e7:10:83:d4
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjYz
MDlGODM3NUFDNkQ4NjdDRjE0Qzk1RjI3QTc0RTREMkRGMTlCRDAeFw0yNTExMDUw
ODI1NDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIyNkRGNTE1MzE1RkFC
QjIwRTcyRTc2N0ZCNkZDNzdCMDVDMzE1NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKAmUOBgJ/Y2MVNUvuTHsn7d3ipZ8ye0fzbDFjSGHPzI+2M69e
yKkMrtAs64k4bEfUL9V7NbcDJBGqVJUj5m2UfCrdADw9rrPgTrawnME/6ux1Wt0L
B3M0oN/RuSX/U7BEbCtzCEMmjr7d1rS8PkDazEoyCbGhsKmPngNdWXp0OSsFiwdP
7OzKIVwgCTms+uSg2KGkk4w4mZbipQPiBYmbYj6ONLLgrvQ1PdNHIN3jVzfpfy1d
ezY8uXEW8TmHb1n1bqyNen0ZNJeuCYIVnXx9dGLVEhmSGm3bfQIxwO1FJiKFRI7c
NLEFD7/DEsMBNhTQQurPSIaIRWQms2RsUUhFAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUIm31FTFfq7IOcudn+2/HewXDFWkwHwYDVR0jBBgwFoAUtjCfg3WsbYZ88UyV
8np05NLfGb0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRF
Q0gvdGpDZmczV3NiWVo4OFV5VjhucDA1TkxmR2IwLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS90akNmZzNXc2JZWjg4VXlWOG5wMDVOTGZHYjAuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS0lQVEVDSC9JbTMxRlRGZnE3SU9j
dWRuLTJfSGV3WERGV2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ8SvMA0GCSqGSIb3DQEBCwUAA4IBAQBevH0IWiJx88DhrVlDEoNWuvuUeaIN
klSO4/Qkq4I4Welc9p+a/aXgnCH20trftvlJ/9A/9ErkLT3LFWGTS3lrmO/9ZBDm
2FfLPiAB5LrysAeWh+UjxYMWx3UhaicsjkCWtH8aNChqxj6t5PPwVehbG6xJfL2L
mKuHmu6OfSmG1X4znzbJaLHizwdCdXAD+ifmRQPThY2TiIOP/n+z47PNIrMAq/Ms
EUMYol78gt9z+Z1CoQ+Wf/wWswl5RTh5r0dPEac0RyYge2MDzZ51SIM7DZUd+1mM
/gDlkLUOKCHUyzPS7HtjnK24ruh6jLB+jb7p9vV1UCS7yjMUaX/nEIPU
-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:09 2025 by rpki-client