Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PM3wIjcEy8mKnIpHziHr0MUF74c.roa
File:                     PM3wIjcEy8mKnIpHziHr0MUF74c.roa (raw, json)
Hash identifier:          5e2f+y01Uqv4880rVhH9X9VAZ+DY30f0V3FIMPPtsxU=
Subject key identifier:   3C:CD:F0:22:37:04:CB:C9:8A:9C:8A:47:CE:21:EB:D0:C5:05:EF:87
Certificate issuer:       /CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
Certificate serial:       0310
Authority key identifier: 3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PM3wIjcEy8mKnIpHziHr0MUF74c.roa
Signing time:             Mon 21 Jul 2025 07:49:01 +0000
ROA not before:           Mon 21 Jul 2025 07:49:01 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     7538
IP address blocks:        103.24.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 22:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 784 (0x310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
        Validity
            Not Before: Jul 21 07:49:01 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=3CCDF0223704CBC98A9C8A47CE21EBD0C505EF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:d6:95:9f:8b:c8:47:e7:b2:ed:ef:1f:bd:
                    30:5e:f8:78:33:79:14:83:23:00:f4:c8:28:0e:c0:
                    73:f8:9f:f6:a5:51:41:f8:f4:9b:a0:ca:1b:5d:c5:
                    4b:72:4e:27:43:ee:72:29:77:79:c3:55:ed:e8:35:
                    bd:0c:5f:e7:03:b0:c1:07:14:21:be:c5:f4:e1:04:
                    bf:05:ef:d4:9e:5d:e4:96:5e:45:8f:ad:df:f4:18:
                    8e:85:11:98:64:5b:0f:7f:d8:38:dd:c9:c5:2d:5c:
                    7f:72:7b:a7:be:27:71:9b:02:cc:75:8a:fa:8d:4d:
                    57:6c:11:e6:12:69:d8:f5:13:6c:75:32:80:8c:64:
                    f2:64:6b:dc:be:11:fb:51:92:fe:3e:e7:23:4a:f6:
                    1f:49:b2:98:74:5e:40:f5:eb:a8:75:f8:fe:41:c7:
                    78:0e:57:06:cf:69:98:1a:78:ee:3b:38:1d:5f:1b:
                    26:2c:5b:cf:72:3b:5a:8c:3e:d8:f3:d4:af:7d:2b:
                    55:23:f5:80:aa:84:91:03:eb:04:2e:13:14:2a:e5:
                    0d:5d:51:ed:e4:21:78:c9:df:f0:76:54:19:b5:1d:
                    96:1d:64:b4:7c:c5:92:9d:1d:9b:d8:6a:f2:9c:5a:
                    25:b7:bb:ea:98:31:5f:3b:10:57:38:1e:a7:30:f3:
                    19:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CD:F0:22:37:04:CB:C9:8A:9C:8A:47:CE:21:EB:D0:C5:05:EF:87
            X509v3 Authority Key Identifier:
                keyid:3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PM3wIjcEy8mKnIpHziHr0MUF74c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:79:f6:db:4f:0b:82:dc:99:74:56:de:e5:e4:6e:84:9e:52:
         c5:aa:82:87:fe:ae:79:a7:dd:f7:10:a8:4e:7d:37:58:f0:30:
         de:a8:e0:be:35:0a:2f:58:80:bc:47:ac:5d:14:e3:95:8f:50:
         0b:6a:12:52:4e:78:67:8d:37:87:f7:cf:9b:08:c8:16:07:00:
         bb:2b:f8:69:ec:37:d8:4d:7b:01:e7:ac:dd:4b:c0:1e:0f:41:
         db:75:a8:14:42:b2:10:3b:e5:76:44:e1:62:e2:fb:c4:bd:eb:
         e7:c8:c3:0f:01:64:f8:93:c8:97:9f:f5:d7:20:b7:4b:97:b5:
         f3:00:76:98:56:be:b9:ed:2b:a5:d8:9f:1f:f6:67:56:d2:4b:
         78:29:af:4e:68:19:29:1d:f8:d4:0b:3e:67:43:7e:3b:d2:63:
         e0:88:8c:36:0b:dc:48:d8:be:42:d0:ce:a2:53:3e:ed:6c:4c:
         1a:ba:95:2c:cf:66:ca:08:40:95:e6:e5:80:c4:7b:b4:8d:a6:
         32:ff:c5:81:66:1a:ee:3b:96:0e:98:3e:23:36:97:42:d8:17:
         c7:22:75:5f:94:70:fb:e6:d0:cb:18:bd:57:29:bb:56:b4:10:
         ba:28:32:98:bb:f0:ec:c4:e4:07:58:5a:1f:cd:df:bb:9c:9d:
         6a:15:ab:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:37:12 2025 by rpki-client