Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ETIME/06-N9zJelx74HEfL7Ei5fa4SyLo.roa
File:                     06-N9zJelx74HEfL7Ei5fa4SyLo.roa (raw, json)
Hash identifier:          98WGPwDA3DqXSYpG3Z7mZY72fqjQa+RIEQGyyq55Gg4=
Subject key identifier:   D3:AF:8D:F7:32:5E:97:1E:F8:1C:47:CB:EC:48:B9:7D:AE:12:C8:BA
Certificate issuer:       /CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Certificate serial:       053D
Authority key identifier: E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/06-N9zJelx74HEfL7Ei5fa4SyLo.roa
Signing time:             Fri 24 Oct 2025 03:53:01 +0000
ROA not before:           Fri 24 Oct 2025 03:53:01 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     46559
IP address blocks:        103.227.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 02:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
        Validity
            Not Before: Oct 24 03:53:01 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D3AF8DF7325E971EF81C47CBEC48B97DAE12C8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:69:4a:a2:4a:6f:ee:09:72:0d:77:0a:88:a5:
                    d5:62:ee:da:09:c2:7d:a6:90:bb:09:9b:95:68:63:
                    df:24:52:a3:06:8d:1c:40:c2:f3:b8:47:d7:64:1a:
                    78:d0:e3:5d:9c:b1:eb:96:b9:72:45:cf:10:5d:17:
                    64:ed:79:11:7d:2a:5d:8f:95:40:3b:f9:2b:7e:b3:
                    8d:14:03:4c:94:50:b2:3f:31:60:9d:9f:0e:fd:97:
                    c8:13:7a:7a:00:40:ba:1b:3e:45:e8:a7:84:cf:76:
                    3e:95:66:3f:00:11:c0:8a:3a:a7:e3:02:95:e4:49:
                    e3:02:71:c1:ba:cf:f7:e9:f3:09:4c:9d:60:3a:d3:
                    d3:d0:e5:34:08:5b:b4:c4:f9:23:72:2e:fb:da:e8:
                    2a:65:d6:70:14:a9:e9:2f:4e:81:a3:f6:57:ee:18:
                    63:3e:12:4e:66:48:54:8b:dc:41:01:a4:7a:db:c2:
                    cd:9a:9c:6c:b1:63:02:31:fb:8b:81:04:f0:8c:ff:
                    65:a6:1e:0a:89:da:45:58:e6:3f:08:be:0a:f2:90:
                    9f:8f:c6:ab:7d:cc:e8:34:57:c6:de:4b:33:da:a9:
                    2f:c7:3c:3d:c7:a9:48:01:21:fd:07:c9:44:01:f0:
                    2a:fb:37:67:c3:ce:66:a0:90:fc:96:a8:ce:06:99:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AF:8D:F7:32:5E:97:1E:F8:1C:47:CB:EC:48:B9:7D:AE:12:C8:BA
            X509v3 Authority Key Identifier:
                keyid:E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/06-N9zJelx74HEfL7Ei5fa4SyLo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:c4:ae:23:89:9e:81:a6:e2:41:eb:02:56:26:fa:4a:12:cc:
         96:43:c9:b0:f7:63:70:62:2d:a3:0f:18:3d:03:b5:9e:4d:9a:
         5a:d3:f9:6c:12:8b:3e:c8:b1:27:d0:ba:34:70:d3:1c:96:b4:
         00:33:f7:43:47:7d:9f:06:7f:29:e8:39:87:2e:04:56:c5:b3:
         f8:32:3d:8d:16:ea:b3:67:ae:7a:2a:66:74:ba:6b:99:ec:52:
         2d:00:ff:21:10:59:00:b1:d8:b2:11:a7:4b:c4:4a:b6:35:60:
         db:85:bb:16:d1:ed:c0:cf:56:a3:a0:9c:ec:d2:8a:70:5f:27:
         b6:29:99:67:18:9b:f5:ac:7c:9c:c0:b1:38:a9:9e:23:5a:35:
         4d:d5:cb:08:15:4f:00:fc:0b:ec:9f:1d:9c:98:bd:8a:67:a9:
         50:fc:e6:9a:55:c7:ee:0c:9b:87:8d:45:70:87:5c:8f:df:ad:
         7c:98:0b:76:2f:f2:f8:96:7d:78:e6:30:30:31:da:2f:52:0a:
         62:83:26:f5:ac:d5:d7:4a:7d:84:b7:4e:4c:8b:48:c2:2c:96:
         5d:fc:2d:75:88:dd:23:5f:7c:f2:56:ec:1d:1e:e1:0f:cf:d5:
         3e:e6:76:28:9b:30:77:d9:1c:8f:34:7b:9b:93:17:6a:d3:9f:
         81:49:ef:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 00:12:49 2025 by rpki-client