Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/U_7X9NLUkedQiXhY1uHlG_cO9BE.roa
File:                     U_7X9NLUkedQiXhY1uHlG_cO9BE.roa (raw, json)
Hash identifier:          dilZGRgKYO6KrBN7E/JFQ95A5wyoY0DlQymDeCLsFf4=
Subject key identifier:   53:FE:D7:F4:D2:D4:91:E7:50:89:78:58:D6:E1:E5:1B:F7:0E:F4:11
Certificate issuer:       /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Certificate serial:       04DE
Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/U_7X9NLUkedQiXhY1uHlG_cO9BE.roa
Signing time:             Fri 22 Aug 2025 08:50:42 +0000
ROA not before:           Fri 22 Aug 2025 08:50:42 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     152611
IP address blocks:        160.30.78.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 14:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1246 (0x4de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
        Validity
            Not Before: Aug 22 08:50:42 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=53FED7F4D2D491E750897858D6E1E51BF70EF411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1b:41:8d:4e:bc:c7:6e:1a:42:27:09:94:d8:
                    48:e9:aa:65:69:3d:eb:24:a1:6e:9f:de:4a:94:33:
                    cf:2c:f8:e8:56:db:a1:14:89:3f:9a:40:e4:dc:5f:
                    d3:cd:49:31:41:5f:8f:9a:a1:77:e7:31:a5:71:a1:
                    31:ec:ee:8a:30:65:0f:ba:7b:34:e9:91:58:5f:fc:
                    51:8e:17:74:01:63:f0:15:79:df:29:c1:b1:ab:1e:
                    8c:b4:d2:8b:ca:a1:b3:37:e5:06:dc:7d:ed:ce:2e:
                    e8:ca:fe:9e:45:a6:f9:5d:b6:b4:44:d8:03:e5:29:
                    76:76:84:fe:16:bf:08:e0:25:0b:22:6e:01:2b:b9:
                    60:c0:06:b3:09:65:de:26:8e:4a:9c:8b:0f:3d:2a:
                    5d:e2:ba:6b:bd:b3:55:de:5b:89:cb:de:9a:1c:a2:
                    bc:02:47:e8:9b:f7:a4:f6:7b:17:b4:b2:c7:52:92:
                    05:a6:d3:89:61:d6:bd:dd:6e:91:2b:74:0e:a5:77:
                    b5:61:4a:a9:79:87:45:1e:2b:c5:a7:af:a6:ff:c4:
                    e4:2f:d3:21:91:de:da:ae:02:b4:ae:da:bf:b6:9c:
                    43:12:63:43:25:44:4b:15:07:34:0b:4f:4d:c7:1d:
                    3b:7d:10:b6:79:6e:da:94:23:6e:78:33:eb:11:ba:
                    ef:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FE:D7:F4:D2:D4:91:E7:50:89:78:58:D6:E1:E5:1B:F7:0E:F4:11
            X509v3 Authority Key Identifier:
                keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/U_7X9NLUkedQiXhY1uHlG_cO9BE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:b5:f5:9c:fa:d2:ed:fd:1c:03:ad:25:cc:fd:ad:24:08:61:
         5c:f1:76:d6:60:b0:50:e4:cf:6d:69:10:87:07:ff:09:5a:3e:
         d5:5d:9e:d7:ea:af:2f:f7:d8:49:32:35:df:ab:33:3f:11:1d:
         cd:6c:26:bf:14:ce:df:8c:83:dc:92:62:be:5f:79:25:2c:67:
         cd:9d:a3:a4:89:34:ab:31:43:fa:c5:77:fa:4f:81:83:5e:a8:
         35:88:e1:25:ca:33:5c:0d:2a:e8:37:9d:fb:f5:9a:91:b2:9e:
         9d:dd:9f:26:59:49:b6:dc:ca:eb:93:92:ee:bd:db:dd:c5:c8:
         48:dc:f2:67:a8:9b:f9:20:6c:f7:ca:02:45:16:f8:33:8b:67:
         3c:7f:3f:56:1a:ee:52:21:61:c3:0f:9a:c1:07:8d:4f:47:9a:
         72:f6:c9:73:e8:9a:8c:3c:91:46:79:2e:df:d7:7b:4a:0e:3a:
         9d:eb:08:94:e4:ce:35:17:7a:7f:a9:c7:b9:df:45:50:d0:ac:
         3f:2e:da:dc:a9:e4:fc:9f:6d:42:c0:08:93:65:80:e2:ba:d4:
         dd:22:8e:9e:8d:e7:d2:c1:66:f8:a4:66:af:85:08:34:04:05:
         59:c5:cf:5e:55:3e:c8:3e:2a:26:39:c3:3b:41:dc:d4:aa:36:
         ee:c4:75:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 11:22:42 2025 by rpki-client