Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/QnbZxZEwqM6ziIt-mQFZQ4zM0JQ.roa
File:                     QnbZxZEwqM6ziIt-mQFZQ4zM0JQ.roa (raw, json)
Hash identifier:          JzQSsZcMvEppU/f5rucAx5quZqByscEC6XSBvfqgwDo=
Subject key identifier:   42:76:D9:C5:91:30:A8:CE:B3:88:8B:7E:99:01:59:43:8C:CC:D0:94
Certificate issuer:       /CN=8D9CD775ACA4F221429B7CD15BF48760D8168543
Certificate serial:       0EA8
Authority key identifier: 8D:9C:D7:75:AC:A4:F2:21:42:9B:7C:D1:5B:F4:87:60:D8:16:85:43
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jZzXdayk8iFCm3zRW_SHYNgWhUM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/QnbZxZEwqM6ziIt-mQFZQ4zM0JQ.roa
Signing time:             Mon 07 Jul 2025 06:19:42 +0000
ROA not before:           Mon 07 Jul 2025 06:19:42 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131651
IP address blocks:        103.139.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/jZzXdayk8iFCm3zRW_SHYNgWhUM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/jZzXdayk8iFCm3zRW_SHYNgWhUM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/jZzXdayk8iFCm3zRW_SHYNgWhUM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 20:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3752 (0xea8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D9CD775ACA4F221429B7CD15BF48760D8168543
        Validity
            Not Before: Jul  7 06:19:42 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=4276D9C59130A8CEB3888B7E990159438CCCD094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d1:b1:c0:65:3f:29:b9:e2:e4:48:a9:dd:93:
                    5d:b2:d6:fe:a7:d0:82:cb:7e:8e:f6:88:15:a5:bb:
                    0e:4a:4a:05:c7:73:da:da:50:d3:42:2e:cf:76:0e:
                    f2:5c:81:50:d4:85:94:ce:13:71:7f:64:b2:d7:0f:
                    bb:71:4a:e2:52:dd:1c:ad:1a:0c:59:a5:d0:db:fd:
                    61:4e:b2:dc:68:d6:b4:b2:56:5e:50:f5:84:b5:7f:
                    8b:8c:78:b8:06:c4:c8:fc:ba:33:f0:25:0b:70:80:
                    3b:3a:07:9e:e3:d7:81:f2:35:df:f5:7e:3f:ce:8f:
                    ea:72:f1:70:a0:96:5f:24:a7:40:b9:92:16:48:ca:
                    7e:ce:d8:1c:e8:22:8e:cc:e7:fb:4d:a0:a2:8f:2c:
                    f6:19:6c:fa:90:8c:57:0d:d7:53:ee:b0:ea:d1:12:
                    c1:e7:88:6b:11:15:81:61:22:2f:9a:a6:38:72:63:
                    b4:bf:a0:e4:44:eb:58:a7:5f:c9:38:99:79:5c:35:
                    0a:37:2e:84:c8:72:d7:6b:33:e5:b8:b1:a7:24:d0:
                    28:32:98:34:62:03:89:0c:38:26:58:a6:2b:55:5c:
                    7e:12:28:02:14:0f:9a:39:fa:a5:11:5c:aa:e2:98:
                    85:ae:2e:91:29:c0:cf:39:2b:75:ea:39:12:13:6b:
                    87:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:76:D9:C5:91:30:A8:CE:B3:88:8B:7E:99:01:59:43:8C:CC:D0:94
            X509v3 Authority Key Identifier:
                keyid:8D:9C:D7:75:AC:A4:F2:21:42:9B:7C:D1:5B:F4:87:60:D8:16:85:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/jZzXdayk8iFCm3zRW_SHYNgWhUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jZzXdayk8iFCm3zRW_SHYNgWhUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LOONGAMING/QnbZxZEwqM6ziIt-mQFZQ4zM0JQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:6b:b3:84:f7:09:01:bc:6b:9a:45:5c:c3:7e:13:bc:52:bf:
         7f:d6:de:61:3d:99:d6:c3:2e:10:46:6e:d1:f0:e8:d6:8f:c0:
         18:b6:9a:70:90:2f:c4:55:5f:44:bc:e6:50:63:85:07:58:60:
         32:27:be:69:cc:e1:fe:a8:d4:33:27:a0:55:4d:58:d6:74:96:
         e5:37:b4:ca:d2:81:f0:d6:a5:6a:1f:99:06:13:14:39:d4:a0:
         91:7d:14:62:b8:27:db:62:f0:7c:5f:39:83:72:fd:e9:38:06:
         c0:58:ed:40:71:cc:4b:3d:cd:4f:ce:89:31:36:30:c6:53:3f:
         cb:a7:3b:6a:b8:8e:53:d1:46:28:b1:e7:e5:a1:e0:02:90:c8:
         32:8f:12:57:da:58:0d:83:b8:04:45:66:7e:e2:a4:ef:4f:a3:
         15:e0:88:4f:d5:a3:b6:c2:0b:9f:50:5e:3c:a7:6d:d7:47:e0:
         ca:c5:9e:1e:89:a9:38:93:2d:82:69:49:f6:f9:ad:93:70:9b:
         32:cd:57:5b:f0:c8:e3:28:fa:85:0a:ce:d4:e2:f6:82:78:08:
         72:06:f6:48:db:2b:88:8d:57:0d:d7:1e:5d:88:63:c7:3b:53:
         33:3e:83:db:f3:2d:45:84:96:7c:fe:e2:1c:c1:48:25:ba:b5:
         b5:8f:66:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:21:19 2025 by rpki-client