Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/rbboypky_sX2O3HrZBACZRif-y0.roa
File:                     rbboypky_sX2O3HrZBACZRif-y0.roa (raw, json)
Hash identifier:          oUMQLt5r+J6ulr1n+h5XKP3y9HDNH13YjW0/zvwkJ18=
Subject key identifier:   AD:B6:E8:CA:99:32:FE:C5:F6:3B:71:EB:64:10:02:65:18:9F:FB:2D
Certificate issuer:       /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial:       02CF
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/rbboypky_sX2O3HrZBACZRif-y0.roa
Signing time:             Fri 14 Nov 2025 06:51:35 +0000
ROA not before:           Fri 14 Nov 2025 06:51:35 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     215595
IP address blocks:        202.160.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Nov 2025 15:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
        Validity
            Not Before: Nov 14 06:51:35 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=ADB6E8CA9932FEC5F63B71EB64100265189FFB2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:d7:d0:52:f4:10:72:5b:55:79:a6:9d:f0:
                    59:f3:ef:e8:7d:03:bd:cf:7e:f6:35:85:de:2f:22:
                    74:74:e8:bf:e4:dc:da:bc:5e:cf:b0:05:28:44:c1:
                    cd:0d:a4:7b:da:54:b8:9d:2f:6f:7e:10:0d:fd:71:
                    1f:82:7e:14:5e:21:58:95:df:35:b2:a4:f0:3c:59:
                    fa:c9:d0:c5:4e:19:51:5b:33:c0:c6:42:3c:9f:47:
                    4d:9b:c8:3c:ea:43:da:1c:b9:cd:5c:49:bb:3e:fe:
                    d0:4c:4c:86:fb:59:a8:95:fe:ea:17:de:78:de:ec:
                    83:49:d5:4a:59:57:ec:bd:fd:29:8a:05:35:86:02:
                    22:e3:0e:80:38:6f:51:ee:60:ed:8c:42:7b:47:2a:
                    f6:7f:05:a7:19:0a:0a:26:04:6f:26:9b:a4:e6:9e:
                    50:4c:32:46:b0:1d:27:43:19:d8:35:21:7a:bc:e2:
                    7b:67:cc:2a:b4:4c:3b:95:41:c6:d2:b3:c6:0e:f3:
                    05:37:63:b4:44:b4:e5:df:3e:03:13:0d:2d:b1:e7:
                    63:7b:c1:79:84:99:cb:7b:9e:af:4d:44:e3:34:ff:
                    5a:47:fb:7b:13:32:4f:17:fa:4a:12:34:8e:87:9f:
                    7a:70:48:41:04:81:2f:f4:87:24:1e:28:21:41:a2:
                    ed:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B6:E8:CA:99:32:FE:C5:F6:3B:71:EB:64:10:02:65:18:9F:FB:2D
            X509v3 Authority Key Identifier:
                keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/rbboypky_sX2O3HrZBACZRif-y0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:35:0f:fa:a1:55:14:8e:fe:b8:af:60:bc:1d:72:93:37:a8:
         0a:c3:84:e9:78:d0:7e:89:87:8a:3c:d0:e7:8d:88:16:f5:72:
         24:ae:e2:17:51:5d:b6:be:6a:c7:fd:c4:1b:ca:4c:d0:13:56:
         f4:b1:31:9a:51:42:85:18:49:0e:8c:e4:47:d3:fb:47:62:46:
         cf:4a:ab:26:37:f2:ec:29:72:bd:a1:c1:92:7c:82:58:0a:45:
         5d:5c:23:ca:0f:90:cd:3b:51:22:41:ef:3e:ec:32:d3:98:f4:
         37:1d:de:85:c5:98:ba:d0:8e:f8:31:5f:c0:fa:54:f1:35:3d:
         cd:55:ce:93:fb:81:1d:ed:5b:bb:91:99:10:8c:7a:a7:f1:d2:
         b3:7e:c2:ad:ea:c3:93:3f:38:79:51:51:d9:b4:11:f0:48:3b:
         b7:6b:c3:c6:cc:a6:dd:32:63:1e:a6:6f:dc:5e:27:60:01:c7:
         b5:ba:64:7f:b3:5e:14:63:96:32:61:47:5a:f0:b1:29:9f:bc:
         57:50:e1:e0:1b:0e:19:03:04:38:63:0d:07:25:76:51:1a:08:
         f2:5b:69:6e:00:ea:bd:9c:9b:af:1a:a6:ba:cd:28:c3:20:db:
         de:75:8d:7b:08:b4:24:73:50:88:82:57:96:10:2d:fe:b4:1e:
         57:7c:2a:9e
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNE
MkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5QTAeFw0yNTExMTQw
NjUxMzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFEQjZFOENBOTkzMkZF
QzVGNjNCNzFFQjY0MTAwMjY1MTg5RkZCMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5SNfQUvQQcltVeaad8Fnz7+h9A73PfvY1hd4vInR06L/k3Nq8
Xs+wBShEwc0NpHvaVLidL29+EA39cR+CfhReIViV3zWypPA8WfrJ0MVOGVFbM8DG
QjyfR02byDzqQ9ocuc1cSbs+/tBMTIb7WaiV/uoX3nje7INJ1UpZV+y9/SmKBTWG
AiLjDoA4b1HuYO2MQntHKvZ/BacZCgomBG8mm6TmnlBMMkawHSdDGdg1IXq84ntn
zCq0TDuVQcbSs8YO8wU3Y7REtOXfPgMTDS2x52N7wXmEmct7nq9NROM0/1pH+3sT
Mk8X+koSNI6Hn3pwSEEEgS/0hyQeKCFBou2ZAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUrbboypky/sX2O3HrZBACZRif+y0wHwYDVR0jBBgwFoAU7NL9w4Uip0pCLee9
HAJtVeCNnpowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxL
RVJBLzdOTDl3NFVpcDBwQ0xlZTlIQUp0VmVDTm5wby5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvN05MOXc0VWlwMHBDTGVlOUhBSnRWZUNObnBvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJBL3JiYm95cGt5X3NY
Mk8zSHJaQkFDWlJpZi15MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALKoFwwDQYJKoZIhvcNAQELBQADggEBAFY1D/qhVRSO/rivYLwdcpM3qArD
hOl40H6Jh4o80OeNiBb1ciSu4hdRXba+asf9xBvKTNATVvSxMZpRQoUYSQ6M5EfT
+0diRs9KqyY38uwpcr2hwZJ8glgKRV1cI8oPkM07USJB7z7sMtOY9Dcd3oXFmLrQ
jvgxX8D6VPE1Pc1VzpP7gR3tW7uRmRCMeqfx0rN+wq3qw5M/OHlRUdm0EfBIO7dr
w8bMpt0yYx6mb9xeJ2ABx7W6ZH+zXhRjljJhR1rwsSmfvFdQ4eAbDhkDBDhjDQcl
dlEaCPJbaW4A6r2cm68aprrNKMMg2951jXsItCRzUIiCV5YQLf60Hld8Kp4=
-----END CERTIFICATE-----
Generated at Sat Nov 15 11:52:17 2025 by rpki-client