Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/gu4OE6nLvk4n9xZqqxgI6BiegC8.roa
File:                     gu4OE6nLvk4n9xZqqxgI6BiegC8.roa (raw, json)
Hash identifier:          jM2DeGyWT6neZ0KhbPAKXNrWSsnaQBCyFo79q2j4Ws8=
Subject key identifier:   82:EE:0E:13:A9:CB:BE:4E:27:F7:16:6A:AB:18:08:E8:18:9E:80:2F
Certificate issuer:       /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Certificate serial:       04D7
Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/gu4OE6nLvk4n9xZqqxgI6BiegC8.roa
Signing time:             Fri 22 Aug 2025 08:50:41 +0000
ROA not before:           Fri 22 Aug 2025 08:50:41 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17408
IP address blocks:        160.30.78.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 14:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
        Validity
            Not Before: Aug 22 08:50:41 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=82EE0E13A9CBBE4E27F7166AAB1808E8189E802F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:4e:c8:6b:f2:db:29:a0:77:7c:84:cc:ef:
                    08:b2:f2:6d:67:66:32:39:f9:9a:9c:e9:5b:cb:77:
                    46:d3:dd:33:4e:97:af:51:b6:8f:25:4c:2a:4e:14:
                    e6:43:f7:7a:1a:b3:01:67:5c:89:12:78:69:e5:95:
                    31:b6:e7:26:ea:f8:09:97:91:18:37:23:81:4a:64:
                    8d:e8:0a:2e:7b:fb:82:51:ec:99:27:3f:ea:4f:5a:
                    e1:5e:fc:b5:f4:12:db:dd:c0:51:a5:34:c7:a5:fe:
                    a9:38:d3:58:c4:0e:b2:24:d9:9e:41:0f:fc:d7:24:
                    2a:4a:a6:d3:8b:a7:ab:c2:19:b6:3e:84:3d:93:75:
                    e4:90:46:a4:60:25:bc:61:ce:4a:a3:ed:5e:91:cd:
                    6c:36:97:2a:f0:dc:91:77:ab:0a:12:91:29:d7:99:
                    6d:2f:18:ab:23:73:a8:6e:4e:94:b5:eb:a3:1f:1f:
                    7a:d3:40:e6:69:99:5b:ed:76:0f:5c:ef:e2:86:dd:
                    4d:42:d8:98:84:71:06:42:7d:c3:54:d2:27:f6:a5:
                    88:a3:ad:43:f5:c1:20:f9:5d:2d:ab:57:7e:de:55:
                    55:11:22:33:ba:21:f1:8e:44:76:50:db:b3:3a:1f:
                    eb:7a:47:3c:19:83:e6:b4:d3:fb:cc:10:c5:16:08:
                    e2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EE:0E:13:A9:CB:BE:4E:27:F7:16:6A:AB:18:08:E8:18:9E:80:2F
            X509v3 Authority Key Identifier:
                keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/gu4OE6nLvk4n9xZqqxgI6BiegC8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:c0:24:86:c6:65:e7:53:8a:55:ed:a3:25:0f:28:b6:41:1b:
         42:c6:a7:2a:0e:ed:c9:2d:6a:cd:7a:f0:f2:74:f4:39:b4:25:
         f3:fb:6d:67:09:a6:b1:06:46:f1:04:92:d8:63:bf:fa:a9:a7:
         1a:ed:35:c9:be:af:e4:89:aa:44:d6:c6:d0:b7:eb:f8:ba:a3:
         3f:fd:2b:6e:59:7b:04:71:94:63:6a:87:dd:3e:90:05:c2:2e:
         b2:6e:78:75:39:3d:04:58:1c:68:70:41:32:f4:ef:0a:7e:6d:
         ee:89:51:a2:b6:4a:4a:3d:6b:c0:5f:ec:95:72:40:ff:96:a5:
         e4:a4:26:ff:20:56:d8:8f:9e:51:72:d7:c4:0e:34:3e:c2:de:
         d3:e0:64:1a:2f:04:7b:2a:0c:36:1a:a2:c7:c6:c0:8e:49:4b:
         42:d9:3a:cd:aa:86:7b:a8:66:38:c2:14:b1:12:96:64:fe:f2:
         df:fc:3a:dd:0e:c3:93:a8:ea:dc:33:cb:6f:b8:6b:9f:84:48:
         8c:70:74:cd:47:20:11:5b:e8:8b:66:21:ee:e0:d3:52:02:e5:
         0f:f9:4d:c5:aa:f1:8b:75:ba:74:b5:61:5e:63:dc:09:8c:13:
         03:83:a2:6a:a6:5b:cc:38:22:74:3a:4a:c5:88:eb:80:50:7f:
         73:c2:5e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 11:22:39 2025 by rpki-client