Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/W75m8ClI26gr6u2_zu3FGxiwYc0.roa
File:                     W75m8ClI26gr6u2_zu3FGxiwYc0.roa (raw, json)
Hash identifier:          rW2O/DwhtBIHzeC1v1EuOht5gYqq1jj3/MARe13l5jU=
Subject key identifier:   5B:BE:66:F0:29:48:DB:A8:2B:EA:ED:BF:CE:ED:C5:1B:18:B0:61:CD
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       147F
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/W75m8ClI26gr6u2_zu3FGxiwYc0.roa
Signing time:             Thu 28 Aug 2025 08:18:01 +0000
ROA not before:           Thu 28 Aug 2025 08:18:01 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131644
IP address blocks:        103.235.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Sep 2025 10:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5247 (0x147f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Aug 28 08:18:01 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5BBE66F02948DBA82BEAEDBFCEEDC51B18B061CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:a4:32:e2:2f:f9:d7:78:3f:38:76:c0:53:
                    4b:4d:19:6f:84:e8:fc:48:9f:65:f6:a8:f7:47:2c:
                    2e:b5:f5:61:5f:39:41:d1:91:1d:15:a6:a9:e9:24:
                    84:aa:37:6d:57:83:a9:c8:83:b4:41:8d:5a:b8:be:
                    b3:b6:25:6f:ed:fb:a2:d3:7b:48:65:25:25:17:5e:
                    cc:85:52:3c:69:18:80:40:9f:68:2d:b7:6e:43:52:
                    b5:27:77:4c:23:ae:04:d5:60:a1:6d:2b:69:ba:e9:
                    54:9d:3a:df:3f:00:6b:be:7a:43:c6:1e:81:f6:da:
                    cf:6a:b0:28:af:2d:92:89:58:4a:93:e0:f4:1e:e0:
                    6f:77:3c:82:3b:7a:0c:3b:f5:7d:3f:3d:81:af:f1:
                    aa:42:49:e1:83:a3:87:fc:6b:81:48:5e:fb:6d:69:
                    7b:f8:c3:d5:98:73:f0:f3:3c:57:9d:14:08:07:86:
                    f2:d0:f1:a5:63:28:2b:b1:27:4a:be:e2:4c:60:46:
                    40:cc:89:aa:3a:43:37:26:cd:c6:42:47:2d:d7:ab:
                    9e:22:7a:f7:22:1d:87:5f:3f:89:bd:1d:5b:63:e3:
                    d5:a1:94:49:9c:62:36:95:7c:f1:56:c6:9d:02:56:
                    bc:a4:8a:60:10:db:29:e1:ef:3f:19:67:2a:1c:04:
                    ee:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BE:66:F0:29:48:DB:A8:2B:EA:ED:BF:CE:ED:C5:1B:18:B0:61:CD
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/W75m8ClI26gr6u2_zu3FGxiwYc0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:9c:76:0d:18:83:eb:76:36:b2:b0:ac:0d:c2:97:f7:23:20:
         75:1b:ab:ed:2a:d8:df:81:55:4e:dd:87:85:76:47:4c:e0:82:
         d6:2f:9f:99:9f:f3:da:37:cd:6f:15:01:f3:8c:4c:f6:59:cf:
         e6:19:47:de:f3:ad:85:d0:06:4e:06:2a:eb:13:ea:55:23:8a:
         36:8f:a1:48:10:ec:02:2c:30:4d:5b:1c:92:6e:1b:ca:25:52:
         bc:77:42:b3:4e:99:4e:2b:4b:75:dc:c5:ba:47:2f:2b:c5:fd:
         e2:ec:8b:17:d8:37:b0:27:40:69:81:d2:28:3d:36:54:28:fd:
         97:d9:1f:f2:f2:5c:34:28:40:39:47:9a:a7:b4:90:83:05:16:
         d4:08:11:db:ce:dc:0c:18:75:c8:98:45:d8:ad:84:21:64:a3:
         ea:79:69:a9:20:a9:90:35:02:b2:b1:ad:55:6f:19:a1:f1:a6:
         eb:5e:ea:99:27:47:e1:22:41:c2:49:c6:28:3a:c9:37:1e:22:
         35:9d:6e:86:2e:20:ce:08:d7:f4:74:f8:10:53:48:72:38:19:
         e1:aa:19:50:a4:15:26:ad:2a:8a:1e:cb:89:f6:bb:67:07:8f:
         87:d3:e7:6f:f7:a2:7b:c1:eb:34:2e:ff:da:fc:cb:31:52:a0:
         26:42:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:07:21 2025 by rpki-client