Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/stLc07GKNS5105vjUYQdqR6xcm0.roa
File:                     stLc07GKNS5105vjUYQdqR6xcm0.roa (raw, json)
Hash identifier:          D0cs52jrCErhRYYwMcFCByQlPlhcQ6qmM7wcQUMgK9g=
Subject key identifier:   B2:D2:DC:D3:B1:8A:35:2E:75:D3:9B:E3:51:84:1D:A9:1E:B1:72:6D
Certificate issuer:       /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial:       02C9
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/stLc07GKNS5105vjUYQdqR6xcm0.roa
Signing time:             Fri 14 Nov 2025 06:47:59 +0000
ROA not before:           Fri 14 Nov 2025 06:47:59 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     215595
IP address blocks:        202.160.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Nov 2025 15:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
        Validity
            Not Before: Nov 14 06:47:59 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B2D2DCD3B18A352E75D39BE351841DA91EB1726D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:36:ce:64:d6:8f:13:5c:95:c9:a2:84:5b:
                    37:f6:6f:96:b2:dd:e4:0b:7a:41:bf:8a:a4:2c:be:
                    ae:39:65:97:d6:3b:8c:fd:ec:38:ec:3d:76:7b:72:
                    77:c5:bc:2e:bf:1c:60:eb:8a:58:35:0c:0f:34:2b:
                    d7:75:bd:48:80:95:f0:a0:de:93:10:b0:21:01:96:
                    8c:56:a9:a6:67:a9:46:5c:89:b7:9b:27:6b:9b:8a:
                    c2:3c:71:d4:75:80:5f:8f:36:cb:07:aa:b7:c0:8c:
                    8a:ba:5d:ed:94:d2:02:81:3b:d4:55:00:00:cf:6e:
                    f5:bd:74:35:5f:cd:71:19:df:27:50:93:b2:f3:7a:
                    71:cc:93:41:81:45:88:0a:19:6e:5d:e3:0c:fa:34:
                    1b:e6:ee:19:2d:2d:4e:e6:03:06:6f:49:35:91:34:
                    ea:86:c3:b4:0a:b8:19:a5:a4:b7:cb:4f:b8:4c:65:
                    4a:79:cb:4a:22:fe:93:0b:92:09:7d:2a:7e:19:a0:
                    c1:d5:56:46:d1:d6:5a:42:7c:07:d4:df:b3:2d:62:
                    a7:a5:de:1e:de:04:35:70:30:3e:7c:ac:33:81:38:
                    58:71:29:97:52:68:63:10:1a:de:0c:fb:01:61:31:
                    c0:73:45:89:12:60:7a:76:ea:a0:2d:2d:c0:c2:10:
                    6e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D2:DC:D3:B1:8A:35:2E:75:D3:9B:E3:51:84:1D:A9:1E:B1:72:6D
            X509v3 Authority Key Identifier:
                keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/stLc07GKNS5105vjUYQdqR6xcm0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:2c:d4:c1:67:52:3b:b1:25:dd:8a:32:d1:e4:bb:e7:a4:15:
         87:43:ee:1a:fc:f8:fc:49:bf:fd:4d:50:60:15:88:85:11:d9:
         01:4b:0c:91:0c:5c:9f:cc:3c:e3:03:83:71:59:c0:1b:c6:e2:
         2d:f7:28:a3:a4:c2:9c:2c:ff:a0:04:a7:a4:aa:75:07:19:6c:
         10:ff:83:0e:4d:4c:0f:f6:5c:f6:9a:58:4e:e5:d8:63:4c:f0:
         58:61:78:ce:51:ce:61:65:fc:0b:2e:07:f2:36:c5:50:3b:38:
         62:c7:d6:5a:f0:df:59:90:e3:de:0e:f9:cf:58:fa:70:78:7c:
         8c:c6:c4:53:56:16:f0:31:a6:2e:09:51:21:6c:95:26:48:c4:
         2e:54:f1:7a:9a:a1:55:ec:3e:51:c5:dc:2c:a6:04:39:39:f1:
         96:74:50:9f:74:fd:f9:bb:55:5e:2c:16:18:92:6c:53:5d:9a:
         f9:05:db:a9:23:74:de:38:02:b1:c3:65:a4:76:8a:f6:22:e2:
         b9:e0:01:28:6f:db:dd:db:7a:f3:80:b8:60:59:b6:04:d3:d4:
         7a:5f:a7:e1:4e:8d:93:ff:2c:a6:9a:33:42:7b:09:a8:69:48:
         b0:47:63:94:39:4c:8a:1c:3d:28:93:bd:a0:43:53:2f:b4:31:
         ff:4b:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 15 11:53:51 2025 by rpki-client