Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/v1i-v_Nqcda4oPXQlwfk6IU88AY.roa
File:                     v1i-v_Nqcda4oPXQlwfk6IU88AY.roa (raw, json)
Hash identifier:          loDbYEbGKt/gkT3xkbqQdCsx/pc0iOglbr3mNGHk6aA=
Subject key identifier:   BF:58:BE:BF:F3:6A:71:D6:B8:A0:F5:D0:97:07:E4:E8:85:3C:F0:06
Certificate issuer:       /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Certificate serial:       03DE
Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/v1i-v_Nqcda4oPXQlwfk6IU88AY.roa
Signing time:             Mon 10 Feb 2025 14:00:19 +0000
ROA not before:           Mon 10 Feb 2025 14:00:19 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     174
IP address blocks:        160.30.78.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 13:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 990 (0x3de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
        Validity
            Not Before: Feb 10 14:00:19 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=BF58BEBFF36A71D6B8A0F5D09707E4E8853CF006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8d:3c:2f:51:a3:2f:09:8f:e3:b9:f3:8e:39:
                    1b:c9:c6:d5:7d:93:89:08:c1:20:2f:31:d6:96:f0:
                    48:b8:5e:a6:90:7a:63:f3:40:41:0d:cd:87:be:73:
                    d4:dd:86:26:b6:e9:d8:c6:f1:29:6e:e9:fd:7b:d0:
                    52:c5:86:e3:63:bc:07:40:2a:84:61:a5:fd:8b:16:
                    c4:f9:d3:13:00:87:0d:43:04:4a:8c:fa:2f:22:ed:
                    3f:d9:f9:3b:de:7a:8d:40:31:8f:8c:a6:6a:a8:d9:
                    2f:66:c3:e1:fb:20:8b:9d:6a:a8:4e:26:3b:97:af:
                    2b:3b:74:51:20:d2:b2:b9:e5:9b:c1:d2:b0:2f:6b:
                    fc:df:3a:de:93:32:6b:9a:fd:f2:37:7a:fb:d6:e6:
                    c9:91:29:88:08:2c:32:f8:dc:bf:22:e2:24:c3:51:
                    f6:d3:c5:aa:a7:f4:63:8f:84:a0:d4:70:7c:ea:7e:
                    c6:b7:e8:03:76:ec:70:04:17:49:5f:a6:eb:7d:33:
                    8b:bc:dd:3b:06:25:af:5b:0a:bc:0a:23:eb:29:3a:
                    79:cd:4a:c4:7f:4c:97:5f:9a:6e:c4:cd:ed:b6:68:
                    91:a9:b5:41:08:54:94:aa:f3:cb:b9:cf:99:03:04:
                    69:52:24:6f:ce:63:21:b6:c9:e5:ab:2e:dd:71:1c:
                    4b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:58:BE:BF:F3:6A:71:D6:B8:A0:F5:D0:97:07:E4:E8:85:3C:F0:06
            X509v3 Authority Key Identifier:
                keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/v1i-v_Nqcda4oPXQlwfk6IU88AY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:a2:c9:59:8e:0f:62:bd:7b:1d:08:fa:c4:06:7c:ba:05:57:
         f9:70:0d:24:cd:68:e9:86:e0:25:4d:a3:6e:d8:cb:e0:b2:75:
         d2:f4:ba:31:fb:d5:8f:31:62:8d:cf:33:c6:8d:b4:36:41:e8:
         6a:93:26:ec:36:9b:a4:ea:69:52:8d:04:0a:05:df:cd:65:33:
         a3:cb:ee:d8:64:54:1a:15:a2:4b:a3:12:fe:09:85:14:8a:e0:
         8a:08:78:45:51:79:d2:86:16:ac:97:d3:c6:c1:c0:f6:ea:dc:
         a1:10:9a:9f:53:e7:fe:6d:53:19:be:de:f8:84:0c:b7:dd:1a:
         59:f7:85:b5:8d:eb:c7:91:24:2b:c0:7f:73:7e:03:b3:e1:8b:
         19:e7:29:ee:06:a1:c0:fc:5d:83:b7:a9:2d:55:7e:d6:6b:d3:
         dd:b8:4e:b3:64:36:1d:16:d7:9e:88:4e:22:fe:ac:8d:8c:1e:
         9a:7d:ba:eb:91:0c:bb:ec:d4:1d:4f:b1:26:3c:94:de:30:fe:
         36:fc:92:35:26:15:f4:31:09:33:ed:1f:87:14:63:c0:48:37:
         7a:5c:78:1a:8e:3b:9d:0d:44:0e:04:55:79:9a:1a:e5:90:30:
         66:8f:d3:b9:0f:e7:f0:95:82:90:69:8f:ec:6b:59:95:ae:ce:
         57:fb:95:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:27:16 2025 by rpki-client