Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/osM3kfqpqLkJrtr7BJ5Kw1Lx9Eg.roa
File:                     osM3kfqpqLkJrtr7BJ5Kw1Lx9Eg.roa (raw, json)
Hash identifier:          U82csg3YNzGyA5YiFJAXKlcDQhv8oa79lEhKGUw9aqM=
Subject key identifier:   A2:C3:37:91:FA:A9:A8:B9:09:AE:DA:FB:04:9E:4A:C3:52:F1:F4:48
Certificate issuer:       /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Certificate serial:       0D4A
Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/osM3kfqpqLkJrtr7BJ5Kw1Lx9Eg.roa
Signing time:             Tue 11 Mar 2025 07:13:16 +0000
ROA not before:           Tue 11 Mar 2025 07:13:16 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131627
IP address blocks:        103.124.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 17:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3402 (0xd4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
        Validity
            Not Before: Mar 11 07:13:16 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=A2C33791FAA9A8B909AEDAFB049E4AC352F1F448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:00:e7:05:62:f8:32:62:a3:2b:b4:ad:c6:22:
                    dd:02:87:45:e3:d5:51:d0:68:9c:ef:66:d1:bb:74:
                    a9:f3:49:81:01:9a:97:fe:1e:86:83:a9:a1:8f:f0:
                    ea:72:6a:a8:7b:4c:a8:10:b1:0f:30:df:f5:8a:f5:
                    de:ac:83:1c:90:50:b6:15:75:8e:ba:73:b0:36:34:
                    80:69:d4:f5:12:ef:cc:a7:60:b9:92:e4:4a:60:3f:
                    b6:ed:8a:d4:ba:ab:0e:d6:10:04:95:60:3f:20:03:
                    19:fa:2e:3f:92:42:37:14:e3:3c:74:32:ad:9d:60:
                    c6:60:b1:ee:da:2e:f3:3e:92:58:d0:ba:06:af:d4:
                    33:00:61:7e:0c:c9:b1:9b:ed:9f:17:39:9f:44:47:
                    08:0f:f3:16:b5:21:65:20:ad:3a:9c:e8:53:b1:07:
                    ad:9a:80:cb:c1:92:cb:86:47:04:18:63:ab:5d:4a:
                    a6:e5:d7:01:66:cf:28:45:69:11:e5:8f:87:23:69:
                    37:58:0e:62:38:68:d0:fc:fa:4d:15:53:46:5a:56:
                    c3:eb:ed:43:f0:93:2a:e9:e7:61:a7:4b:aa:6b:23:
                    d1:a3:7a:48:80:5a:86:8a:b1:7c:7f:74:1a:3f:36:
                    5f:14:06:59:3b:0e:77:cd:83:67:d5:28:3c:3f:e5:
                    cc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C3:37:91:FA:A9:A8:B9:09:AE:DA:FB:04:9E:4A:C3:52:F1:F4:48
            X509v3 Authority Key Identifier:
                keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/osM3kfqpqLkJrtr7BJ5Kw1Lx9Eg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:7c:48:45:9c:3a:69:55:a1:84:a9:b3:0b:e1:37:d4:9e:5c:
         89:c4:d5:12:dd:63:7c:23:cb:d6:75:c1:25:55:c7:52:cb:33:
         28:da:14:d4:14:09:02:21:ba:24:4b:52:36:7e:59:2d:c4:70:
         d0:cb:94:27:46:1e:f1:94:27:92:85:b6:93:b6:85:0b:9d:9a:
         1c:0b:12:b6:26:90:ce:a2:42:e5:9e:8b:4f:e7:cc:5f:40:fa:
         6a:b0:bf:9f:78:8c:56:08:98:1c:f0:1e:0c:e9:87:44:99:fb:
         40:bb:8b:35:f7:0a:43:5d:07:ef:9c:c5:71:d5:d6:56:35:b6:
         51:8d:dc:51:24:20:b1:23:c1:28:fc:17:06:58:d5:fa:78:50:
         6b:56:60:26:81:76:4c:f3:e9:fe:5b:57:23:c0:2b:d6:5b:f2:
         00:42:25:c4:fc:8b:43:42:94:2c:bc:d2:f6:77:11:8d:4e:93:
         b6:ca:ed:95:57:37:ab:4b:c1:5d:64:49:24:9c:4d:ed:db:41:
         4c:6d:12:6a:64:3b:26:ce:10:74:0f:7c:2e:f6:67:71:2d:46:
         6e:f8:ab:72:ee:80:db:a1:45:85:9f:dd:cf:2f:6e:d6:3b:fc:
         56:28:42:3a:f6:d6:2f:c4:e9:c2:87:f2:df:de:2c:65:e6:9c:
         4a:cd:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:29:02 2025 by rpki-client