Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/y_1Noo8NgLvvdz1RNh2uETC7t0E.roa
File:                     y_1Noo8NgLvvdz1RNh2uETC7t0E.roa (raw, json)
Hash identifier:          6yV2F/G0L0I5DQmnCAUPAD1FsBQEqtvhtwyEgMq5oiU=
Subject key identifier:   CB:FD:4D:A2:8F:0D:80:BB:EF:77:3D:51:36:1D:AE:11:30:BB:B7:41
Certificate issuer:       /CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D
Certificate serial:       0468
Authority key identifier: 0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/y_1Noo8NgLvvdz1RNh2uETC7t0E.roa
Signing time:             Wed 17 Sep 2025 09:51:40 +0000
ROA not before:           Wed 17 Sep 2025 09:51:40 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     396982
IP address blocks:        160.30.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Sep 2025 20:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1128 (0x468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D
        Validity
            Not Before: Sep 17 09:51:40 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=CBFD4DA28F0D80BBEF773D51361DAE1130BBB741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:99:0f:2b:41:df:11:b4:68:cd:14:53:72:
                    c7:62:f0:7d:58:49:0e:1b:44:f7:05:05:05:ee:66:
                    7e:f9:c6:d6:ef:fd:d7:dd:be:d1:78:99:77:22:98:
                    e4:73:b2:3c:db:ce:52:44:f2:5d:94:1b:82:7f:13:
                    3c:19:02:5e:6b:56:f5:44:5b:45:fb:a8:02:29:a9:
                    42:6e:7f:9b:e5:20:86:05:e7:7f:ee:51:08:61:b4:
                    4f:8c:33:e2:ec:66:b5:72:2f:8a:f2:76:36:6c:81:
                    c2:05:4b:9b:8b:b6:ca:ef:07:3c:27:1b:85:0e:90:
                    13:8e:5c:d7:da:a7:ba:9d:31:d6:4d:43:cc:ee:5c:
                    92:9e:ec:5b:ce:d0:a5:92:aa:b2:e0:db:b3:07:87:
                    84:81:c7:5a:68:39:c2:54:bb:aa:0d:b9:9c:75:18:
                    27:5c:37:c5:17:a3:8c:d7:6b:68:64:6e:93:97:2e:
                    83:73:6a:ac:14:76:82:cd:4b:a5:1e:8b:2f:4f:65:
                    36:a0:f9:00:dd:bc:e1:d3:50:67:d4:ef:a7:18:f1:
                    c7:ec:69:01:49:74:19:41:f0:f2:94:3e:7f:54:51:
                    ac:1d:7c:53:19:72:be:88:44:40:28:d5:c5:a0:3c:
                    4b:8e:79:a8:17:10:aa:8d:8c:01:29:1c:45:63:67:
                    04:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FD:4D:A2:8F:0D:80:BB:EF:77:3D:51:36:1D:AE:11:30:BB:B7:41
            X509v3 Authority Key Identifier:
                keyid:0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/y_1Noo8NgLvvdz1RNh2uETC7t0E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:1d:10:7c:a5:d5:59:15:7f:36:d0:9e:8a:d9:b4:55:47:18:
         b7:bb:d5:ad:62:8e:b8:08:64:6a:5b:09:bd:db:83:21:08:9b:
         07:43:35:2b:ba:76:f2:9f:86:8b:c1:13:34:74:3a:07:be:f4:
         46:69:09:77:82:53:5f:72:c8:b2:ad:96:2c:76:b0:1a:33:04:
         22:4a:68:01:9e:37:50:55:8f:5b:cd:95:f9:ec:1f:5d:b9:13:
         90:7e:30:a7:9c:59:71:28:0c:7a:0a:fd:88:97:96:4e:81:aa:
         ee:b7:83:78:67:ca:a8:51:fc:1d:46:9b:d5:db:5d:13:64:a2:
         10:06:05:20:eb:af:66:37:1f:e8:2b:c7:bd:29:c7:b3:1e:3f:
         0f:1e:30:03:4c:37:df:55:0a:6f:f8:27:be:62:2b:95:6b:da:
         38:c4:be:d2:d0:7c:57:ee:d1:aa:4f:4a:d2:59:ef:84:b2:d8:
         7c:4c:fb:bd:bb:c5:ac:ff:8d:c4:26:0d:fa:d2:c8:59:84:b1:
         d6:70:8b:24:e1:0a:44:4b:71:c2:1e:23:78:09:76:ef:20:cf:
         fc:36:8b:34:9d:9c:ae:2e:ae:c3:73:cb:d1:b5:1c:f6:ea:d2:
         13:69:79:46:d6:26:2c:9d:10:7a:96:28:0a:43:43:4a:58:16:
         56:73:8d:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 18 19:29:11 2025 by rpki-client