Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/irvd03j4xVQIldmSkYpJq2J7eD0.roa
File:                     irvd03j4xVQIldmSkYpJq2J7eD0.roa (raw, json)
Hash identifier:          S5tGQkJDn1Ohc+JG9utUPEpyBIHDYSDtJ9hQQVealtE=
Subject key identifier:   8A:BB:DD:D3:78:F8:C5:54:08:95:D9:92:91:8A:49:AB:62:7B:78:3D
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0D5E
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/irvd03j4xVQIldmSkYpJq2J7eD0.roa
Signing time:             Mon 10 Feb 2025 13:58:38 +0000
ROA not before:           Mon 10 Feb 2025 13:58:38 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24158
IP address blocks:        2402:7500:600::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 19:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3422 (0xd5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Feb 10 13:58:38 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8ABBDDD378F8C5540895D992918A49AB627B783D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a6:f6:38:69:4a:58:d7:fe:4c:13:94:74:6b:
                    9f:6f:2a:ef:ac:a7:fd:ef:81:ec:e6:67:3d:1f:cf:
                    71:22:02:d3:8b:73:78:93:56:51:89:9b:b9:32:c0:
                    d1:74:30:ed:d4:de:56:fd:da:1d:ae:c6:ea:55:de:
                    52:fe:a8:55:04:6a:9a:2b:1a:0c:77:55:a2:1b:a1:
                    1c:90:85:8f:e2:e8:88:00:b0:4f:af:07:0f:93:b5:
                    d1:eb:cf:cf:0b:ff:16:c2:cf:f7:e8:09:51:ae:b0:
                    e6:10:4b:5f:b9:f8:e2:62:65:a1:63:25:16:7e:4e:
                    26:a4:a2:9c:93:89:f6:de:f1:1f:94:b1:52:68:17:
                    35:b8:15:eb:26:65:13:16:a2:93:18:f9:ad:10:ed:
                    89:33:b8:d5:c0:33:b6:f4:3d:c5:1b:2b:f6:52:53:
                    95:14:be:0c:1f:e1:88:eb:55:c6:9c:f6:05:7a:71:
                    0f:4a:d6:7f:c8:ec:f6:5f:51:41:31:96:dd:fe:28:
                    b9:da:57:5c:9b:71:0c:d6:b4:84:6a:6f:d5:9e:2e:
                    0a:6d:88:f8:cd:07:97:b7:c4:96:bb:90:bb:cb:d8:
                    71:25:3f:d3:74:31:a3:ce:01:8b:76:7a:a7:7c:6b:
                    0f:a3:8f:2f:ed:45:68:71:98:6a:81:a5:39:01:ae:
                    59:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BB:DD:D3:78:F8:C5:54:08:95:D9:92:91:8A:49:AB:62:7B:78:3D
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/irvd03j4xVQIldmSkYpJq2J7eD0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7500:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:73:4b:69:12:de:74:c2:87:fc:f9:1f:cd:48:3c:fa:fb:1b:
         84:fb:d3:7c:59:02:f0:41:7c:99:a7:c8:ec:7b:b5:44:39:ea:
         5e:16:2e:a0:f7:5f:07:68:67:af:cb:84:6a:b4:b2:f1:bd:2a:
         16:dc:40:68:76:1c:a5:9e:2c:6c:fa:0f:ec:e9:35:01:2c:89:
         9e:a9:dc:d1:77:e1:8e:e5:af:4e:06:3c:b9:c2:7b:5f:2b:90:
         bf:af:cd:4b:ea:c8:14:f3:7f:9c:66:26:21:f9:68:ed:97:e8:
         66:49:d4:55:95:fd:eb:a1:a9:87:6a:2b:05:c9:07:39:5e:16:
         f0:fd:98:48:fe:01:c4:a1:e9:e7:62:60:bd:1e:cf:d6:13:08:
         44:ab:5b:5d:12:8e:90:4a:99:be:46:bc:45:4c:db:1f:fb:d6:
         04:3b:f7:b3:b6:42:e5:12:74:83:77:b3:c9:ff:9b:dd:2f:4b:
         b2:a0:9d:ce:e2:e1:42:0b:5e:66:8c:9c:f7:bc:68:cb:52:af:
         89:27:46:f4:25:3f:5d:d0:f9:b3:6d:8e:be:95:77:ec:21:48:
         f1:13:86:b5:dc:bd:ad:d3:60:1b:ce:5b:24:7b:c0:8d:c0:86:
         43:2a:f3:71:9b:50:db:dd:0f:81:30:ea:36:4f:e9:eb:2f:99:
         5c:e5:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:12:11 2025 by rpki-client