Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYVC/5sEBGA5UNyDWq595jcmAvKyqcHo.roa
File:                     5sEBGA5UNyDWq595jcmAvKyqcHo.roa (raw, json)
Hash identifier:          OxRglRhGUO6CzGNVHxk9YzyhGj893M4Zk7rWRQYFhP4=
Subject key identifier:   E6:C1:01:18:0E:54:37:20:D6:AB:9F:79:8D:C9:80:BC:AC:AA:70:7A
Certificate issuer:       /CN=7448D66FF329D2945C52EA01A567578B50026717
Certificate serial:       02D3
Authority key identifier: 74:48:D6:6F:F3:29:D2:94:5C:52:EA:01:A5:67:57:8B:50:02:67:17
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SYVC/5sEBGA5UNyDWq595jcmAvKyqcHo.roa
Signing time:             Mon 10 Feb 2025 14:20:31 +0000
ROA not before:           Mon 10 Feb 2025 14:20:31 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     7483
IP address blocks:        103.183.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SYVC/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SYVC/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 03:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7448D66FF329D2945C52EA01A567578B50026717
        Validity
            Not Before: Feb 10 14:20:31 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E6C101180E543720D6AB9F798DC980BCACAA707A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:98:6f:d9:60:64:51:74:88:58:1c:b4:94:
                    45:56:30:bd:74:3f:09:72:5f:87:59:63:55:78:97:
                    08:03:bf:4d:5d:d2:36:e1:df:3a:00:53:9e:5c:13:
                    53:99:6a:fd:50:3f:fc:ed:f9:cd:e4:5e:4c:c2:09:
                    0c:50:eb:9d:3a:76:d0:ea:7f:b8:31:7d:d0:d4:e1:
                    bf:c3:15:d3:cf:95:d8:f1:75:20:98:d9:5b:98:f5:
                    d0:3c:25:be:f5:67:8c:37:c3:ff:91:73:ee:46:3b:
                    6d:3f:b3:20:49:39:58:e8:f2:49:8e:6f:88:29:2d:
                    df:0f:e0:2b:29:f4:9a:cd:6a:33:d9:8f:08:12:13:
                    ee:90:1b:cf:05:eb:dd:a0:d1:45:bf:36:1a:6c:7c:
                    fe:15:54:67:f2:48:f0:6a:18:90:df:b2:62:cc:48:
                    60:54:fa:85:6a:fd:82:8d:72:f4:27:72:4c:c5:54:
                    2f:b8:e3:88:fe:1e:75:42:97:15:9b:c1:94:b5:a1:
                    94:cb:ce:41:72:36:2a:f1:00:0e:1f:31:84:a4:5d:
                    00:b1:37:1f:25:c6:e6:1f:23:c3:5e:bf:24:c6:07:
                    ba:0c:03:6d:6a:2b:31:c8:b5:7c:c8:aa:eb:bc:6f:
                    cd:85:94:42:24:f4:27:bb:76:2e:8e:60:e2:fe:44:
                    f6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C1:01:18:0E:54:37:20:D6:AB:9F:79:8D:C9:80:BC:AC:AA:70:7A
            X509v3 Authority Key Identifier:
                keyid:74:48:D6:6F:F3:29:D2:94:5C:52:EA:01:A5:67:57:8B:50:02:67:17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYVC/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYVC/5sEBGA5UNyDWq595jcmAvKyqcHo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:96:26:d4:46:0a:57:a5:0d:f5:1b:ac:80:c8:65:c3:d5:9b:
         d8:53:99:59:4f:a1:57:70:d7:0c:f9:c1:48:e3:78:32:47:48:
         ec:cf:59:3d:68:a3:69:2d:e9:20:23:1d:41:68:fc:ca:80:f6:
         a1:2e:57:2f:60:5d:7a:3c:8f:71:9c:66:bf:42:0a:25:60:0b:
         09:36:1f:3e:8e:45:7e:3b:18:de:7b:77:63:34:0c:fe:26:76:
         69:d2:8e:f9:5b:8b:5a:64:be:72:e5:19:9a:f7:88:5d:cb:1e:
         53:09:89:2f:28:cc:02:f6:21:ba:01:1c:32:e5:74:0e:67:87:
         bf:60:ad:b1:26:81:e8:91:a4:14:82:56:2b:22:c4:0e:49:10:
         39:8f:bd:ad:a7:db:94:6f:fb:b7:33:95:5c:d1:58:7d:18:fb:
         3b:ce:66:bd:62:ce:b5:ad:16:87:11:3e:af:f3:f3:8d:59:e2:
         a0:3b:ab:8c:bd:d3:f9:2c:97:d6:b3:46:23:47:09:98:28:bb:
         23:d3:f1:a7:a1:cc:a0:19:43:b0:9e:9a:c9:a2:62:dc:c1:a7:
         30:4e:9c:ff:8c:dc:2a:c2:08:77:d1:ba:3d:84:2d:a8:9d:99:
         5a:41:bc:41:0e:c4:7b:bc:c2:2a:49:e2:dd:c8:0e:a5:53:a9:
         31:59:0c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:56:34 2025 by rpki-client