Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/-dosedtCnQ4kG26bv81bEcSr2zQ.roa
File:                     -dosedtCnQ4kG26bv81bEcSr2zQ.roa (raw, json)
Hash identifier:          +dA1Gtdd8VDpZBSNi8RqXhiwmwQOXobLPHd8x+CvRME=
Subject key identifier:   F9:DA:2C:79:DB:42:9D:0E:24:1B:6E:9B:BF:CD:5B:11:C4:AB:DB:34
Certificate issuer:       /CN=8D9CD775ACA4F221429B7CD15BF48760D8168543
Certificate serial:       0EAA
Authority key identifier: 8D:9C:D7:75:AC:A4:F2:21:42:9B:7C:D1:5B:F4:87:60:D8:16:85:43
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jZzXdayk8iFCm3zRW_SHYNgWhUM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/-dosedtCnQ4kG26bv81bEcSr2zQ.roa
Signing time:             Mon 07 Jul 2025 06:56:16 +0000
ROA not before:           Mon 07 Jul 2025 06:56:16 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131651
IP address blocks:        103.139.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/jZzXdayk8iFCm3zRW_SHYNgWhUM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/jZzXdayk8iFCm3zRW_SHYNgWhUM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/jZzXdayk8iFCm3zRW_SHYNgWhUM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 20:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3754 (0xeaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D9CD775ACA4F221429B7CD15BF48760D8168543
        Validity
            Not Before: Jul  7 06:56:16 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F9DA2C79DB429D0E241B6E9BBFCD5B11C4ABDB34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:e0:64:f0:ba:0a:23:f4:4d:76:fa:8c:c4:
                    0a:d2:65:9e:0f:a4:6c:ae:86:47:ab:72:5c:47:04:
                    2d:0b:6a:d0:62:69:18:88:ac:ba:33:92:f4:63:9d:
                    61:9a:d7:bd:2d:45:2e:fa:e0:90:b9:86:5a:9a:01:
                    91:50:da:ea:c0:4e:5f:2e:9c:56:9a:5f:5b:6e:e3:
                    20:86:7e:9a:8b:70:0b:47:78:37:de:b5:75:40:b2:
                    76:80:72:13:2f:75:26:35:22:c4:29:1e:d3:56:c1:
                    21:95:cb:a0:14:17:51:5d:0e:5f:80:dc:e1:d6:d4:
                    f7:4b:a0:47:49:b9:67:b7:fb:93:ec:d2:7a:4b:eb:
                    e6:ff:7d:4b:bb:a0:98:3d:1c:8a:79:33:36:ee:9d:
                    11:8a:ab:da:3b:7e:8d:0f:56:dd:02:ca:9a:dd:c4:
                    b5:c7:a8:1b:3c:77:a2:35:53:05:89:6c:94:05:82:
                    3c:8e:5a:87:94:23:86:9e:91:d0:06:a7:a5:f5:67:
                    7b:6d:bf:f7:b7:fb:d2:2d:88:de:cf:78:92:c5:e2:
                    ad:e8:1f:22:74:96:ec:26:e3:83:2c:84:10:f9:50:
                    ce:bc:0a:4f:aa:34:9a:43:81:ee:66:2f:e6:1d:80:
                    e4:17:03:40:69:8e:09:c2:cb:09:1e:41:bb:96:60:
                    b7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DA:2C:79:DB:42:9D:0E:24:1B:6E:9B:BF:CD:5B:11:C4:AB:DB:34
            X509v3 Authority Key Identifier:
                keyid:8D:9C:D7:75:AC:A4:F2:21:42:9B:7C:D1:5B:F4:87:60:D8:16:85:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/jZzXdayk8iFCm3zRW_SHYNgWhUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jZzXdayk8iFCm3zRW_SHYNgWhUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/-dosedtCnQ4kG26bv81bEcSr2zQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:e3:e0:98:70:69:41:4e:86:9c:ac:cb:57:ac:d6:84:72:c4:
         ea:ea:e4:34:0b:06:f2:99:be:c7:75:51:5f:4a:d4:cd:86:d8:
         44:b3:3e:16:fd:16:62:37:ce:a8:fd:83:be:ba:ed:fb:02:4e:
         c0:db:a7:75:51:da:26:6b:2d:d6:48:01:a8:e6:57:7e:06:ae:
         af:65:aa:a7:df:d6:e4:28:13:f9:92:2d:c9:95:c2:c5:9a:26:
         89:97:3b:2b:2a:53:a1:d6:78:42:cd:f9:ed:51:8a:c7:55:64:
         e2:79:58:ba:a4:b9:71:69:d6:ac:6e:c7:10:07:d5:d4:55:a8:
         62:8a:80:dd:06:e5:45:a9:44:d4:c0:5b:d4:64:e1:3c:e2:6a:
         ac:57:85:ea:b2:49:09:50:ad:c3:7d:37:32:24:da:f0:6a:84:
         43:71:a9:92:06:3e:43:20:14:33:c2:b9:d9:91:87:00:3b:64:
         81:ef:89:be:91:9f:51:cc:55:8f:77:7f:ba:0b:66:5b:21:17:
         e0:0b:9d:2d:35:61:25:c1:b2:9d:18:70:a2:a3:7e:15:d2:9f:
         1c:f0:e4:1d:1d:e1:cb:8e:11:f8:cc:82:70:ab:da:63:18:4c:
         e9:ee:30:73:13:8f:c7:b5:70:f4:ad:f5:08:d7:31:ac:4b:ef:
         4b:b0:e2:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:31:55 2025 by rpki-client