Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/EyH8tc3Eeg5V4X_o0jzVO7j-kPw.roa
File:                     EyH8tc3Eeg5V4X_o0jzVO7j-kPw.roa (raw, json)
Hash identifier:          3y8wuAdlPg2RCjhobqe/8iJ1QKhsh/Q99dT5uO6xQDc=
Subject key identifier:   13:21:FC:B5:CD:C4:7A:0E:55:E1:7F:E8:D2:3C:D5:3B:B8:FE:90:FC
Certificate issuer:       /CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68
Certificate serial:       0B
Authority key identifier: 92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/EyH8tc3Eeg5V4X_o0jzVO7j-kPw.roa
Signing time:             Wed 26 Feb 2025 03:01:39 +0000
ROA not before:           Wed 26 Feb 2025 03:01:39 +0000
ROA not after:            Fri 13 Feb 2026 15:30:28 +0000
asID:                     134823
IP address blocks:        163.61.124.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 13:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68
        Validity
            Not Before: Feb 26 03:01:39 2025 GMT
            Not After : Feb 13 15:30:28 2026 GMT
        Subject: CN=1321FCB5CDC47A0E55E17FE8D23CD53BB8FE90FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:96:49:3a:ae:34:69:ba:bb:7a:3a:d1:4d:6c:
                    8e:35:d8:20:e2:69:37:27:e6:ed:cc:5e:fe:69:4f:
                    86:c9:a7:ae:d9:58:4d:2a:9c:9f:a0:c3:d3:c8:9b:
                    a4:0a:7e:a4:00:07:e5:1a:c0:13:66:45:39:95:c8:
                    5c:26:a6:f4:db:19:15:b8:6b:b5:3b:d1:90:ed:92:
                    1d:ba:f8:58:a6:71:7e:87:41:db:d1:95:21:d7:4d:
                    db:64:8d:2e:de:bd:7e:46:aa:ba:50:d5:9d:34:be:
                    dd:24:99:77:01:4c:36:7d:10:f6:72:86:a5:d3:0d:
                    5d:6a:80:78:40:a0:d9:ef:93:c9:c0:05:68:ca:92:
                    9e:b3:1d:b8:fc:62:45:f6:a6:aa:3d:56:06:e4:13:
                    98:56:6a:c4:bf:2a:3b:b6:cd:68:92:21:88:28:ae:
                    c1:c8:70:17:f1:fc:3e:ee:47:04:d0:70:55:37:b5:
                    4d:c2:3b:f2:a7:ae:c2:b6:a7:75:3c:47:76:50:28:
                    f9:7c:ee:28:58:8a:fd:be:a6:dc:0e:41:3e:b7:62:
                    2c:5c:5d:b8:6b:95:70:c4:fc:75:8a:f0:46:63:17:
                    7d:59:80:ac:f4:7a:fb:c9:7c:43:20:41:b8:38:a0:
                    e9:ab:1c:65:1a:6f:58:35:3d:63:13:fa:bf:48:ae:
                    b5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:21:FC:B5:CD:C4:7A:0E:55:E1:7F:E8:D2:3C:D5:3B:B8:FE:90:FC
            X509v3 Authority Key Identifier:
                keyid:92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/EyH8tc3Eeg5V4X_o0jzVO7j-kPw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:a7:0a:df:3e:0d:2b:cf:c2:77:19:62:e1:c3:c1:04:6b:c1:
         2a:5f:3e:63:b3:7f:96:94:23:52:08:08:35:b4:cf:82:e0:3c:
         b4:b8:36:b3:c6:20:8a:73:25:57:92:10:b4:d2:de:c1:19:65:
         92:1c:0e:6e:2e:1f:bc:88:0f:2c:a1:de:0d:a7:9c:af:63:01:
         42:8b:bd:db:7c:62:b4:fb:c4:c4:78:8f:e0:94:a1:2d:73:f3:
         7b:f7:b2:1c:6c:43:5e:f3:46:a4:90:a2:43:c8:56:a6:17:aa:
         d5:58:f5:e5:5d:cc:bf:32:ed:52:7d:84:d9:6f:9c:d5:7e:30:
         50:57:a0:f7:6d:0c:88:17:75:97:f3:bc:a8:b4:b4:e7:74:e4:
         f2:46:8d:fb:d3:6f:c2:18:46:83:43:eb:68:bf:80:73:56:10:
         01:94:80:cb:3c:46:be:91:14:09:db:b2:0c:27:07:3b:35:0e:
         39:f8:9f:ea:5c:08:53:0f:9c:a6:46:9b:16:69:e7:a5:3a:0f:
         f8:08:d2:5d:e2:c5:4c:c1:5b:0f:0a:66:1a:83:4d:67:f8:cd:
         84:58:80:44:a7:48:e5:bb:84:74:74:1b:01:92:67:45:f3:af:
         a3:bf:52:b9:c1:99:0b:60:d0:51:12:20:22:08:0f:4d:33:64:
         37:32:64:c8
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MjMw
M0NFNjM2MkI1QTZGMUU3RTE2RDI1OEMxQzk2RkJCNjc0RDY4MB4XDTI1MDIyNjAz
MDEzOVoXDTI2MDIxMzE1MzAyOFowMzExMC8GA1UEAxMoMTMyMUZDQjVDREM0N0Ew
RTU1RTE3RkU4RDIzQ0Q1M0JCOEZFOTBGQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN2WSTquNGm6u3o60U1sjjXYIOJpNyfm7cxe/mlPhsmnrtlYTSqc
n6DD08ibpAp+pAAH5RrAE2ZFOZXIXCam9NsZFbhrtTvRkO2SHbr4WKZxfodB29GV
IddN22SNLt69fkaqulDVnTS+3SSZdwFMNn0Q9nKGpdMNXWqAeECg2e+TycAFaMqS
nrMduPxiRfamqj1WBuQTmFZqxL8qO7bNaJIhiCiuwchwF/H8Pu5HBNBwVTe1TcI7
8qeuwrandTxHdlAo+XzuKFiK/b6m3A5BPrdiLFxduGuVcMT8dYrwRmMXfVmArPR6
+8l8QyBBuDig6ascZRpvWDU9YxP6v0iutXMCAwEAAaOCAfQwggHwMB0GA1UdDgQW
BBQTIfy1zcR6DlXhf+jSPNU7uP6Q/DAfBgNVHSMEGDAWgBSSMDzmNitabx5+FtJY
wclvu2dNaDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GA1UdHwRYMFYwVKBS
oFCGTnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NT1JOTUFQ
TEUva2pBODVqWXJXbThlZmhiU1dNSEpiN3RuVFdnLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9rakE4NWpZcldtOGVmaGJTV01ISmI3dG5UV2cuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnwYIKwYBBQUHAQsEgZIwgY8wWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NT1JOTUFQTEUvRXlIOHRjM0VlZzVW
NFhfbzBqelZPN2ota1B3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3
bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAaM9fDANBgkqhkiG9w0BAQsFAAOCAQEAR6cK3z4NK8/Cdxli4cPBBGvBKl8+
Y7N/lpQjUggINbTPguA8tLg2s8YginMlV5IQtNLewRllkhwObi4fvIgPLKHeDaec
r2MBQou923xitPvExHiP4JShLXPze/eyHGxDXvNGpJCiQ8hWpheq1Vj15V3MvzLt
Un2E2W+c1X4wUFeg920MiBd1l/O8qLS053Tk8kaN+9NvwhhGg0PraL+Ac1YQAZSA
yzxGvpEUCduyDCcHOzUOOfif6lwIUw+cpkabFmnnpToP+AjSXeLFTMFbDwpmGoNN
Z/jNhFiARKdI5buEdHQbAZJnRfOvo79SucGZC2DQURIgIggPTTNkNzJkyA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:33 2025 by rpki-client