Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/vYvorumRfYYlkH-5546E8rUu0Gc.roa
File:                     vYvorumRfYYlkH-5546E8rUu0Gc.roa (raw, json)
Hash identifier:          DNQqRM29eKz3sH6M6Zi5Bsse3MHx+oMmQRfSuiGQ0BI=
Subject key identifier:   BD:8B:E8:AE:E9:91:7D:86:25:90:7F:B9:E7:8E:84:F2:B5:2E:D0:67
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       079F
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/vYvorumRfYYlkH-5546E8rUu0Gc.roa
Signing time:             Mon 10 Feb 2025 13:44:36 +0000
ROA not before:           Mon 10 Feb 2025 13:44:36 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     134823
IP address blocks:        103.122.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 13:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951 (0x79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Feb 10 13:44:36 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=BD8BE8AEE9917D8625907FB9E78E84F2B52ED067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dc:80:63:f3:4c:8e:3f:68:6e:77:ad:65:b1:
                    a1:49:75:ac:ee:e9:82:90:3f:24:e1:bf:7b:f7:d8:
                    5d:26:cb:d8:78:3f:41:3f:a3:f4:27:bc:d5:c0:ba:
                    a7:57:26:82:bd:29:be:58:5f:18:ed:a4:36:fd:4e:
                    f8:d2:90:6c:3b:b3:6e:82:dc:c9:b7:69:ca:d3:19:
                    5f:ce:05:d9:f7:2c:b7:cd:4d:7f:f0:8d:fe:90:98:
                    ad:70:b4:69:80:df:59:6e:f4:01:f7:09:76:18:2b:
                    df:0b:dc:22:33:a4:5f:28:45:d4:28:06:26:6e:8b:
                    db:14:4c:66:62:1c:be:62:57:21:ca:fd:69:33:8e:
                    e1:74:07:0e:b0:2b:94:76:3a:3e:66:93:35:ed:0d:
                    7c:00:f7:8e:7f:a5:51:43:f5:f0:8e:bd:4c:d9:ad:
                    17:3a:98:4b:f3:29:ca:76:aa:47:e8:0a:91:d0:c7:
                    95:c8:55:f3:ef:21:44:7d:17:8d:09:5f:d4:a4:00:
                    a9:c0:6a:84:b8:74:13:fd:49:c5:ea:8a:2a:6c:41:
                    5e:15:ba:a9:55:b5:fa:78:7f:33:92:c4:17:97:f3:
                    48:b9:5f:1c:82:6e:3c:6a:94:60:96:d8:81:f0:48:
                    37:c3:06:56:a2:80:5a:43:f5:d2:f4:66:aa:02:70:
                    52:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8B:E8:AE:E9:91:7D:86:25:90:7F:B9:E7:8E:84:F2:B5:2E:D0:67
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/vYvorumRfYYlkH-5546E8rUu0Gc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:11:65:2f:fa:6c:f9:ed:9a:dd:bc:1c:9e:55:4a:fe:7b:e2:
         4b:9c:cf:38:ac:6f:80:53:08:14:35:f1:96:08:68:83:c1:f0:
         7d:0f:ae:b4:5f:06:09:ba:dd:23:4b:31:3e:e4:50:17:b1:41:
         9d:f2:b2:06:5d:42:51:e6:40:90:0a:75:31:6f:49:2c:8e:5c:
         8a:f1:b1:db:03:46:3b:12:44:ce:35:31:62:21:ef:3b:b9:a1:
         6c:2b:89:b0:b3:2d:af:b1:ee:90:fb:50:c1:9e:28:f0:b2:16:
         0c:32:be:05:3b:34:f2:13:63:93:3f:bc:1e:19:61:de:1d:b2:
         57:69:20:0c:5d:93:fe:04:20:3e:96:e4:05:96:c6:a3:18:b6:
         c6:6b:9a:2e:97:3e:c0:f5:16:f4:b3:0c:bf:40:65:6f:95:41:
         f9:74:91:a9:19:7b:ad:f0:6a:a9:54:c2:6f:df:08:db:30:b9:
         c4:0f:9f:c0:6a:b7:ca:5b:2c:c4:32:be:b8:85:aa:36:97:63:
         31:9e:07:56:70:3d:c8:72:43:d7:26:74:f4:49:27:0e:c1:48:
         15:c7:d6:f7:df:c9:97:8b:54:58:74:20:bc:e3:e8:9d:9c:43:
         00:00:ae:d5:d8:9a:30:b8:da:1b:4a:76:e6:59:e9:d6:6c:42:
         e0:55:7b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:34:52 2025 by rpki-client