Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/WowuEzxa6KpnMabHzASa_NV6gwY.roa
File:                     WowuEzxa6KpnMabHzASa_NV6gwY.roa (raw, json)
Hash identifier:          bBqdpu118McoS3hYMU2HnUQwZyRfIJAXV/oGtSBAExU=
Subject key identifier:   5A:8C:2E:13:3C:5A:E8:AA:67:31:A6:C7:CC:04:9A:FC:D5:7A:83:06
Certificate issuer:       /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Certificate serial:       03E0
Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/WowuEzxa6KpnMabHzASa_NV6gwY.roa
Signing time:             Mon 10 Feb 2025 14:00:19 +0000
ROA not before:           Mon 10 Feb 2025 14:00:19 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     10133
IP address blocks:        160.30.78.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 14:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 992 (0x3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
        Validity
            Not Before: Feb 10 14:00:19 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=5A8C2E133C5AE8AA6731A6C7CC049AFCD57A8306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ae:e4:27:6a:8a:c9:f3:9c:4e:fc:65:b6:da:
                    32:3f:6e:65:29:13:e4:0c:9c:04:44:34:df:e1:48:
                    61:a5:4c:ca:d8:22:c4:47:e2:bb:3c:ce:f5:05:ad:
                    7c:4b:bc:a8:f3:fe:d4:a4:96:18:32:14:9b:0a:a2:
                    12:9f:ad:d7:bb:cd:b1:f9:71:65:1e:b4:04:a3:ad:
                    c2:0a:17:1d:e0:15:f7:b2:b3:55:f7:a4:fb:fd:ea:
                    ad:46:33:ce:ae:22:f4:91:d7:00:dd:dd:90:58:1b:
                    e2:27:77:fd:eb:2b:00:a1:a8:03:cb:11:7b:e8:84:
                    f4:39:b8:29:b4:32:70:f8:06:21:d4:f2:dc:19:3d:
                    dc:7c:2c:6c:48:53:f0:f1:ab:6c:f4:67:bc:dd:05:
                    a8:b6:70:ec:c7:d5:d0:ba:e4:1c:47:06:e9:17:a0:
                    d9:3e:34:c8:5f:09:19:34:79:da:42:4b:6f:6e:39:
                    05:a6:df:15:e4:d3:77:f2:c3:f1:5b:43:0b:b8:87:
                    33:71:af:19:21:9f:6e:b9:fe:37:80:a0:fa:a6:dc:
                    ef:b2:fa:e3:ec:cc:0e:13:d8:07:aa:31:b2:48:9f:
                    0a:3e:45:58:9a:13:65:e4:98:6d:77:77:51:d7:e7:
                    5b:6c:2b:f4:62:09:29:e1:de:cc:c4:93:df:7a:0f:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8C:2E:13:3C:5A:E8:AA:67:31:A6:C7:CC:04:9A:FC:D5:7A:83:06
            X509v3 Authority Key Identifier:
                keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/WowuEzxa6KpnMabHzASa_NV6gwY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:b4:fe:e9:e1:2d:37:b8:46:e3:92:f3:a0:fc:bd:83:c5:bf:
         de:fe:3a:f1:0a:1b:3e:64:cd:53:88:bb:fe:b8:d7:15:28:4a:
         58:b8:9b:16:73:c5:ff:b6:b6:5e:cd:0f:4b:ba:81:48:66:c1:
         6c:42:db:10:fe:68:a0:b4:5e:c2:d4:50:36:5d:5f:0b:dc:f9:
         35:ac:9c:87:42:c9:bf:35:0d:d7:22:47:4c:80:88:02:81:6e:
         6a:41:e0:b2:4f:5e:f3:aa:e9:38:a1:ba:4d:02:08:12:e8:a6:
         65:e6:9d:94:a6:60:9c:1f:51:54:5b:d8:5f:2e:9b:ce:6c:4d:
         10:37:3a:11:e6:78:b2:8a:9d:f8:7c:e7:9f:ee:b1:2c:fd:32:
         97:be:68:62:69:81:8b:f5:0f:86:5f:33:46:ce:69:aa:27:ef:
         b0:f0:3a:b4:2b:45:3d:c4:66:b6:23:72:fd:cf:d4:17:01:03:
         2c:16:a5:7e:4f:d1:c9:84:5b:8d:eb:e9:85:f4:8b:dc:99:5d:
         cd:26:36:bb:57:35:f9:2e:7d:af:97:71:df:6f:3c:3b:23:5b:
         05:d5:5d:e5:71:5d:fe:ee:07:4a:7b:39:0d:6c:eb:74:09:18:
         6e:da:b3:72:85:99:89:66:a8:03:f8:ad:8d:ed:06:9e:55:3c:
         bf:9b:07:98
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDRG
OERDRjY2QjI1QjcxOTA1NkQxRUQ2NUMxNkVBOTI1N0U1NTUzRDAeFw0yNTAyMTAx
NDAwMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBOEMyRTEzM0M1QUU4
QUE2NzMxQTZDN0NDMDQ5QUZDRDU3QTgzMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcruQnaorJ85xO/GW22jI/bmUpE+QMnARENN/hSGGlTMrYIsRH
4rs8zvUFrXxLvKjz/tSklhgyFJsKohKfrde7zbH5cWUetASjrcIKFx3gFfeys1X3
pPv96q1GM86uIvSR1wDd3ZBYG+Ind/3rKwChqAPLEXvohPQ5uCm0MnD4BiHU8twZ
Pdx8LGxIU/Dxq2z0Z7zdBai2cOzH1dC65BxHBukXoNk+NMhfCRk0edpCS29uOQWm
3xXk03fyw/FbQwu4hzNxrxkhn265/jeAoPqm3O+y+uPszA4T2AeqMbJInwo+RVia
E2XkmG13d1HX51tsK/RiCSnh3szEk996D2rlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWowuEzxa6KpnMabHzASa/NV6gwYwHwYDVR0jBBgwFoAURPjc9msltxkFbR7W
XBbqklflVT0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVJRE9V
L1JQamM5bXNsdHhrRmJSN1dYQmJxa2xmbFZUMC5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvUlBqYzltc2x0eGtGYlI3V1hCYnFrbGZsVlQwLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVJRE9VL1dvd3VFenhhNktwbk1hYkh6
QVNhX05WNmd3WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg
Hk4wDQYJKoZIhvcNAQELBQADggEBAFq0/unhLTe4RuOS86D8vYPFv97+OvEKGz5k
zVOIu/641xUoSli4mxZzxf+2tl7ND0u6gUhmwWxC2xD+aKC0XsLUUDZdXwvc+TWs
nIdCyb81DdciR0yAiAKBbmpB4LJPXvOq6Tihuk0CCBLopmXmnZSmYJwfUVRb2F8u
m85sTRA3OhHmeLKKnfh855/usSz9Mpe+aGJpgYv1D4ZfM0bOaaon77DwOrQrRT3E
ZrYjcv3P1BcBAywWpX5P0cmEW43r6YX0i9yZXc0mNrtXNfkufa+Xcd9vPDsjWwXV
XeVxXf7uB0p7OQ1s63QJGG7as3KFmYlmqAP4rY3tBp5VPL+bB5g=
-----END CERTIFICATE-----
Generated at Wed Apr 16 12:33:22 2025 by rpki-client