Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MFE/k00A3NK9QX8FuS2J0G23V4EOeGk.roa
File:                     k00A3NK9QX8FuS2J0G23V4EOeGk.roa (raw, json)
Hash identifier:          hnhcwIOcEj8X76ZvC1POc+g6WNVnxrHR2JZKPoSGXI4=
Subject key identifier:   93:4D:00:DC:D2:BD:41:7F:05:B9:2D:89:D0:6D:B7:57:81:0E:78:69
Certificate issuer:       /CN=AB0CB3B24069501EB4E8A5C04E0EEC6511C2C91C
Certificate serial:       0C
Authority key identifier: AB:0C:B3:B2:40:69:50:1E:B4:E8:A5:C0:4E:0E:EC:65:11:C2:C9:1C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/qwyzskBpUB606KXATg7sZRHCyRw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/k00A3NK9QX8FuS2J0G23V4EOeGk.roa
Signing time:             Mon 27 Oct 2025 07:03:42 +0000
ROA not before:           Mon 27 Oct 2025 07:03:42 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9677
IP address blocks:        103.117.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/qwyzskBpUB606KXATg7sZRHCyRw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/qwyzskBpUB606KXATg7sZRHCyRw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/qwyzskBpUB606KXATg7sZRHCyRw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 09:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB0CB3B24069501EB4E8A5C04E0EEC6511C2C91C
        Validity
            Not Before: Oct 27 07:03:42 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=934D00DCD2BD417F05B92D89D06DB757810E7869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:71:10:0d:6b:f3:c3:a5:81:5c:9b:be:bc:59:
                    ab:d6:5c:5c:e3:e4:2b:a1:65:9b:e5:e2:94:01:70:
                    58:53:e5:be:78:c6:0e:21:0b:c8:d7:25:5b:37:7b:
                    bf:f1:1e:10:a9:b2:c5:4d:bf:14:66:9d:18:37:f8:
                    9b:dc:5a:34:f6:ce:10:2c:5f:e4:0c:6c:94:4d:26:
                    a1:70:75:40:37:89:b5:0e:96:b7:29:80:4d:eb:00:
                    7c:9e:b3:7f:49:4e:29:dc:83:eb:05:74:4d:8d:b5:
                    0d:37:77:95:da:bb:18:b6:4a:35:97:2a:ff:9f:4a:
                    25:fb:ee:17:65:08:42:98:da:43:7f:ca:b9:79:f9:
                    c9:ba:b7:33:e1:21:9d:d0:06:d0:32:57:d7:d6:c2:
                    2a:a8:88:23:91:17:72:9c:ec:f8:66:f6:c2:52:1a:
                    f2:01:38:7e:92:b4:69:13:0b:48:4b:62:69:e5:80:
                    3e:d1:14:68:6c:be:a6:0d:ec:d8:99:4d:3d:3a:1d:
                    b4:49:18:86:81:91:fd:c2:a7:62:a8:fd:fa:77:3a:
                    d1:b3:17:b5:08:e6:c2:0a:29:5f:24:30:c2:0b:d2:
                    3b:30:6f:fc:c9:5a:cf:62:48:25:fa:26:1b:8b:df:
                    df:e7:d9:9e:28:3b:33:5a:04:9e:e1:f2:02:40:24:
                    51:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4D:00:DC:D2:BD:41:7F:05:B9:2D:89:D0:6D:B7:57:81:0E:78:69
            X509v3 Authority Key Identifier:
                keyid:AB:0C:B3:B2:40:69:50:1E:B4:E8:A5:C0:4E:0E:EC:65:11:C2:C9:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/qwyzskBpUB606KXATg7sZRHCyRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/qwyzskBpUB606KXATg7sZRHCyRw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/k00A3NK9QX8FuS2J0G23V4EOeGk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:85:0e:72:0c:a6:7d:48:66:ab:af:dc:03:d4:58:7a:81:ec:
         ec:86:db:51:46:b9:ff:86:39:26:be:27:39:f7:f5:90:ae:26:
         44:e9:5f:f4:4e:c7:d6:a6:e4:2e:51:e7:a1:ee:38:be:c2:e7:
         81:53:d7:47:0d:49:99:df:b1:96:25:8b:c4:f3:2e:43:5c:94:
         c3:21:0e:27:22:08:63:cd:79:06:f5:fc:c9:d4:9c:09:38:dc:
         1c:3f:b6:59:24:ba:eb:d4:38:71:de:05:63:b6:f9:ff:e3:e9:
         2a:d7:ec:63:88:87:ed:16:81:00:35:72:7c:b5:d0:96:9c:f6:
         79:41:d6:74:5a:44:41:c0:35:ba:d9:3c:4a:22:ad:7e:8e:47:
         29:29:c7:97:d5:75:58:b7:12:dd:e8:54:9a:a9:10:06:32:7b:
         b0:f3:89:f8:8c:5f:36:75:f6:c0:61:ca:64:3c:fb:a7:79:8b:
         d6:c5:28:8e:45:f0:84:5f:1d:31:61:ba:8e:82:a0:fd:29:3d:
         a1:3f:d1:bc:a7:3a:50:71:f2:a9:4f:11:47:5d:c4:ae:34:e9:
         7c:2a:70:8b:d7:7c:2b:fc:32:1d:94:16:4f:b0:e9:21:5d:71:
         7e:af:44:e1:e1:e9:96:48:15:43:a3:76:27:cb:df:dc:d3:3d:
         f3:89:ec:0b
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIBDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQjBD
QjNCMjQwNjk1MDFFQjRFOEE1QzA0RTBFRUM2NTExQzJDOTFDMB4XDTI1MTAyNzA3
MDM0MloXDTI2MDgyMjA4MTQyOFowMzExMC8GA1UEAxMoOTM0RDAwRENEMkJENDE3
RjA1QjkyRDg5RDA2REI3NTc4MTBFNzg2OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMlxEA1r88OlgVybvrxZq9ZcXOPkK6Flm+XilAFwWFPlvnjGDiEL
yNclWzd7v/EeEKmyxU2/FGadGDf4m9xaNPbOECxf5AxslE0moXB1QDeJtQ6WtymA
TesAfJ6zf0lOKdyD6wV0TY21DTd3ldq7GLZKNZcq/59KJfvuF2UIQpjaQ3/KuXn5
ybq3M+EhndAG0DJX19bCKqiII5EXcpzs+Gb2wlIa8gE4fpK0aRMLSEtiaeWAPtEU
aGy+pg3s2JlNPTodtEkYhoGR/cKnYqj9+nc60bMXtQjmwgopXyQwwgvSOzBv/Mla
z2JIJfomG4vf3+fZnig7M1oEnuHyAkAkUbMCAwEAAaOCAegwggHkMB0GA1UdDgQW
BBSTTQDc0r1BfwW5LYnQbbdXgQ54aTAfBgNVHSMEGDAWgBSrDLOyQGlQHrTopcBO
DuxlEcLJHDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGA1UdHwRSMFAwTqBM
oEqGSHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NRkUvcXd5
enNrQnBVQjYwNktYQVRnN3NaUkhDeVJ3LmNybDBgBggrBgEFBQcBAQRUMFIwUAYI
KwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9x
d3l6c2tCcFVCNjA2S1hBVGc3c1pSSEN5UncuY2VyMA4GA1UdDwEB/wQEAwIHgDCB
mQYIKwYBBQUHAQsEgYwwgYkwVAYIKwYBBQUHMAuGSHJzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS9NRkUvazAwQTNOSzlRWDhGdVMySjBHMjNWNEVP
ZUdrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv
bm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWd1hDANBgkq
hkiG9w0BAQsFAAOCAQEAnoUOcgymfUhmq6/cA9RYeoHs7IbbUUa5/4Y5Jr4nOff1
kK4mROlf9E7H1qbkLlHnoe44vsLngVPXRw1Jmd+xliWLxPMuQ1yUwyEOJyIIY815
BvX8ydScCTjcHD+2WSS669Q4cd4FY7b5/+PpKtfsY4iH7RaBADVyfLXQlpz2eUHW
dFpEQcA1utk8SiKtfo5HKSnHl9V1WLcS3ehUmqkQBjJ7sPOJ+IxfNnX2wGHKZDz7
p3mL1sUojkXwhF8dMWG6joKg/Sk9oT/RvKc6UHHyqU8RR13ErjTpfCpwi9d8K/wy
HZQWT7DpIV1xfq9E4eHplkgVQ6N2J8vf3NM984nsCw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 08:39:03 2025 by rpki-client