Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/dapMTUOnNldbr7jB7eR4773cJxE.roa
File:                     dapMTUOnNldbr7jB7eR4773cJxE.roa (raw, json)
Hash identifier:          5HTWlrc3rN3jS0ulXQJCcfOBIBFDw1+/MQMXZfOpSA8=
Subject key identifier:   75:AA:4C:4D:43:A7:36:57:5B:AF:B8:C1:ED:E4:78:EF:BD:DC:27:11
Certificate issuer:       /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Certificate serial:       0DD0
Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/dapMTUOnNldbr7jB7eR4773cJxE.roa
Signing time:             Fri 22 Aug 2025 08:55:21 +0000
ROA not before:           Fri 22 Aug 2025 08:55:21 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17408
IP address blocks:        103.123.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Sep 2025 19:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3536 (0xdd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
        Validity
            Not Before: Aug 22 08:55:21 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=75AA4C4D43A736575BAFB8C1EDE478EFBDDC2711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:29:e5:ff:3d:f3:67:15:58:6e:95:31:b4:
                    6f:46:ca:9f:ed:2d:73:a4:98:83:e4:c1:c7:98:99:
                    13:f1:32:5d:d3:37:02:ce:91:f0:46:19:2f:30:ad:
                    26:6c:5c:c7:3b:17:12:38:e8:70:05:14:67:8a:7b:
                    41:ab:0d:76:fd:f1:9a:e1:e2:0d:f9:1c:d9:1a:bb:
                    78:cb:29:6d:24:96:ec:91:77:2a:a2:2d:6b:c6:03:
                    92:13:3f:c4:50:b9:ad:b8:94:bf:e2:df:b7:f4:c8:
                    5c:5f:ea:7b:09:b4:70:c3:5b:44:97:ca:99:ee:9a:
                    38:2c:a3:69:8d:d5:e1:96:25:97:dd:af:02:8a:9d:
                    bc:6a:02:bb:e1:2c:74:b6:87:89:0e:28:68:26:59:
                    69:51:9d:41:34:a1:e9:05:61:72:be:8f:f8:e5:40:
                    a8:22:58:34:bc:9d:88:ae:da:b0:f7:cb:4d:d7:cf:
                    05:d3:bc:52:91:3c:fe:d3:bf:fa:a9:45:e0:a8:aa:
                    b2:9b:bd:86:0c:65:2e:4f:29:56:9f:71:b5:fa:80:
                    d3:8e:66:2e:b6:a9:ce:c1:52:06:15:80:12:f6:ee:
                    26:47:1e:2b:59:bb:0b:39:ac:ef:c8:ca:ef:c7:65:
                    12:5e:be:66:21:09:f6:5c:12:3f:34:9d:bd:b4:9e:
                    a8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AA:4C:4D:43:A7:36:57:5B:AF:B8:C1:ED:E4:78:EF:BD:DC:27:11
            X509v3 Authority Key Identifier:
                keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/dapMTUOnNldbr7jB7eR4773cJxE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:bb:93:29:52:61:8d:fd:9d:d8:3c:af:d7:47:8a:df:3c:76:
         9b:3b:61:70:73:f6:af:30:3c:2a:b2:ee:cd:3a:f0:8f:e8:63:
         88:f5:e5:cf:99:6e:b2:8c:44:32:4b:d0:5e:ab:13:09:7c:0d:
         c1:8d:ac:94:6e:7d:9a:de:da:5b:93:5c:d0:5d:7d:d0:69:86:
         dc:99:b4:0f:f4:b7:62:a1:34:01:c0:28:83:4e:ab:a8:9b:9a:
         b7:9c:dd:2e:af:5a:dc:76:29:78:5e:46:25:d1:e9:dc:2f:e5:
         00:f6:a6:07:67:87:2b:59:ee:d9:73:c3:be:a8:3c:33:ad:bc:
         df:32:6e:48:6d:62:6e:09:62:01:7d:9e:a7:a9:db:c1:8e:9e:
         a4:96:0e:76:45:49:1b:e7:26:53:ec:85:90:51:6a:6a:f0:ad:
         08:cb:f9:3f:36:b6:a3:42:36:dd:6a:92:19:02:8c:73:21:50:
         0f:d5:8c:7c:01:f1:7f:8c:ea:3e:1e:8f:14:1c:95:de:24:20:
         2b:2a:b1:ac:f1:00:fa:b6:12:19:ce:15:5b:56:1c:bf:ab:07:
         40:86:03:03:59:7e:8e:03:ea:56:90:b9:2a:ff:cc:eb:24:c7:
         6f:af:bf:e8:25:96:18:e2:96:39:50:96:59:2e:eb:1c:80:24:
         97:f0:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 17:01:48 2025 by rpki-client