Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MFE/RVEN8X9l9vNX850lDI2f6wkt-9w.roa
File:                     RVEN8X9l9vNX850lDI2f6wkt-9w.roa (raw, json)
Hash identifier:          6urRha6Cps62IPudrY4Njtpq6ITPV00Hv2lrefuoNuI=
Subject key identifier:   45:51:0D:F1:7F:65:F6:F3:57:F3:9D:25:0C:8D:9F:EB:09:2D:FB:DC
Certificate issuer:       /CN=AB0CB3B24069501EB4E8A5C04E0EEC6511C2C91C
Certificate serial:       08
Authority key identifier: AB:0C:B3:B2:40:69:50:1E:B4:E8:A5:C0:4E:0E:EC:65:11:C2:C9:1C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/qwyzskBpUB606KXATg7sZRHCyRw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/RVEN8X9l9vNX850lDI2f6wkt-9w.roa
Signing time:             Mon 27 Oct 2025 07:03:17 +0000
ROA not before:           Mon 27 Oct 2025 07:03:17 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     7536
IP address blocks:        103.117.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/qwyzskBpUB606KXATg7sZRHCyRw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/qwyzskBpUB606KXATg7sZRHCyRw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/qwyzskBpUB606KXATg7sZRHCyRw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 09:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB0CB3B24069501EB4E8A5C04E0EEC6511C2C91C
        Validity
            Not Before: Oct 27 07:03:17 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=45510DF17F65F6F357F39D250C8D9FEB092DFBDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:54:d4:18:04:9c:87:ee:55:78:58:65:7a:
                    78:c9:43:b4:65:ac:1f:8d:22:66:e9:ab:68:4d:09:
                    5d:47:da:44:e2:67:cb:53:5d:5b:3f:21:02:61:4f:
                    8f:68:81:dd:ab:e7:94:84:dc:e3:f3:0e:7d:3e:67:
                    36:6f:64:46:65:a7:f0:95:89:69:6e:5f:e1:95:ce:
                    c1:b0:76:5e:fa:d4:39:d2:06:2f:99:68:39:6b:55:
                    7e:f9:74:6d:ff:18:7a:af:54:af:e9:3a:c0:7e:52:
                    3b:82:99:ba:4c:58:1d:30:86:72:39:85:04:3b:aa:
                    d2:91:e8:d9:96:e8:a7:7d:57:45:e7:03:72:63:f6:
                    2b:ac:ef:4d:91:4d:be:e8:4b:db:fa:c5:de:8e:30:
                    61:a1:03:5b:fb:04:4e:ed:2c:a6:c9:49:88:33:fe:
                    6c:bc:1d:e7:70:dd:d1:b1:6d:b6:78:b3:cd:5f:0e:
                    5f:2a:0f:93:2b:16:d2:68:8b:ec:2a:9a:1c:49:3c:
                    08:37:9b:5b:19:cd:38:55:15:31:63:29:d6:37:e5:
                    1e:48:95:7a:d4:2f:72:15:13:f0:39:04:ff:d6:d6:
                    7d:26:f5:49:2a:61:3f:70:98:76:3b:c9:1b:91:99:
                    24:f3:3d:17:b0:58:a6:ea:e5:35:c1:76:d0:84:cc:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:51:0D:F1:7F:65:F6:F3:57:F3:9D:25:0C:8D:9F:EB:09:2D:FB:DC
            X509v3 Authority Key Identifier:
                keyid:AB:0C:B3:B2:40:69:50:1E:B4:E8:A5:C0:4E:0E:EC:65:11:C2:C9:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/qwyzskBpUB606KXATg7sZRHCyRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/qwyzskBpUB606KXATg7sZRHCyRw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/RVEN8X9l9vNX850lDI2f6wkt-9w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:13:e8:65:39:8e:87:7d:c0:f4:03:03:5f:8b:8f:0d:dc:72:
         2b:6a:fd:e8:61:f9:02:96:19:8d:ea:cf:69:46:83:40:c6:3a:
         cb:6d:b5:cb:36:20:af:3e:03:b0:54:fe:b7:e3:37:3f:67:65:
         bd:da:22:51:70:8d:11:40:a8:30:9b:a2:4d:c8:24:76:2b:fa:
         ed:01:a5:b8:b8:40:fe:9c:1b:d1:85:29:97:7b:61:96:2e:19:
         69:c9:0b:76:6b:4d:01:8e:13:04:9a:af:c0:dd:8e:9b:e4:41:
         14:95:5f:4c:46:e9:61:3c:1c:13:14:c6:8f:d9:32:56:e7:bc:
         3e:e8:39:ce:d9:43:d1:18:1c:88:09:ad:c5:e9:e1:4b:17:e5:
         a3:44:c5:ee:44:c6:1b:af:db:0c:1e:87:d6:24:60:25:15:9a:
         db:d6:79:80:a3:05:77:55:33:98:7a:1f:39:49:1f:db:6a:c6:
         b2:5e:df:ea:11:5e:ca:e9:c5:66:ad:c7:32:69:f7:8e:d4:3d:
         42:e0:b9:d1:7a:15:05:09:9a:2c:b0:f9:b2:2d:12:e5:bb:1f:
         42:1d:9e:12:f8:a7:51:7a:35:1c:4b:10:db:25:39:7c:92:a7:
         79:64:cc:bc:af:a1:b6:52:23:24:ee:d4:4c:4b:bc:5a:2e:67:
         86:73:21:4f
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQjBD
QjNCMjQwNjk1MDFFQjRFOEE1QzA0RTBFRUM2NTExQzJDOTFDMB4XDTI1MTAyNzA3
MDMxN1oXDTI2MDgyMjA4MTQyOFowMzExMC8GA1UEAxMoNDU1MTBERjE3RjY1RjZG
MzU3RjM5RDI1MEM4RDlGRUIwOTJERkJEQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKYIVNQYBJyH7lV4WGV6eMlDtGWsH40iZumraE0JXUfaROJny1Nd
Wz8hAmFPj2iB3avnlITc4/MOfT5nNm9kRmWn8JWJaW5f4ZXOwbB2XvrUOdIGL5lo
OWtVfvl0bf8Yeq9Ur+k6wH5SO4KZukxYHTCGcjmFBDuq0pHo2Zbop31XRecDcmP2
K6zvTZFNvuhL2/rF3o4wYaEDW/sETu0spslJiDP+bLwd53Dd0bFttnizzV8OXyoP
kysW0miL7CqaHEk8CDebWxnNOFUVMWMp1jflHkiVetQvchUT8DkE/9bWfSb1SSph
P3CYdjvJG5GZJPM9F7BYpurlNcF20ITMfVkCAwEAAaOCAegwggHkMB0GA1UdDgQW
BBRFUQ3xf2X281fznSUMjZ/rCS373DAfBgNVHSMEGDAWgBSrDLOyQGlQHrTopcBO
DuxlEcLJHDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGA1UdHwRSMFAwTqBM
oEqGSHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NRkUvcXd5
enNrQnBVQjYwNktYQVRnN3NaUkhDeVJ3LmNybDBgBggrBgEFBQcBAQRUMFIwUAYI
KwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9x
d3l6c2tCcFVCNjA2S1hBVGc3c1pSSEN5UncuY2VyMA4GA1UdDwEB/wQEAwIHgDCB
mQYIKwYBBQUHAQsEgYwwgYkwVAYIKwYBBQUHMAuGSHJzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS9NRkUvUlZFTjhYOWw5dk5YODUwbERJMmY2d2t0
LTl3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv
bm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWd1hDANBgkq
hkiG9w0BAQsFAAOCAQEArRPoZTmOh33A9AMDX4uPDdxyK2r96GH5ApYZjerPaUaD
QMY6y221yzYgrz4DsFT+t+M3P2dlvdoiUXCNEUCoMJuiTcgkdiv67QGluLhA/pwb
0YUpl3thli4ZackLdmtNAY4TBJqvwN2Om+RBFJVfTEbpYTwcExTGj9kyVue8Pug5
ztlD0RgciAmtxenhSxflo0TF7kTGG6/bDB6H1iRgJRWa29Z5gKMFd1UzmHofOUkf
22rGsl7f6hFeyunFZq3HMmn3jtQ9QuC50XoVBQmaLLD5si0S5bsfQh2eEvinUXo1
HEsQ2yU5fJKneWTMvK+htlIjJO7UTEu8Wi5nhnMhTw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 08:39:02 2025 by rpki-client