Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/49KbUvYCnSnm001JhRWAhKr4RrM.roa
File:                     49KbUvYCnSnm001JhRWAhKr4RrM.roa (raw, json)
Hash identifier:          D6iQ6G5LQqlGzBUICZf8uLb4CfcFuD/vIjW+po32MdU=
Subject key identifier:   E3:D2:9B:52:F6:02:9D:29:E6:D3:4D:49:85:15:80:84:AA:F8:46:B3
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0E05
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/49KbUvYCnSnm001JhRWAhKr4RrM.roa
Signing time:             Mon 10 Feb 2025 14:22:04 +0000
ROA not before:           Mon 10 Feb 2025 14:22:04 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24168
IP address blocks:        103.30.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Apr 2025 16:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3589 (0xe05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb 10 14:22:04 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E3D29B52F6029D29E6D34D4985158084AAF846B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:4a:8d:e8:16:8c:41:01:3c:c5:aa:df:4d:
                    23:78:68:13:7f:09:5a:fb:66:33:70:8e:4e:87:08:
                    7a:34:af:a9:a1:03:70:4a:93:cc:8a:fe:df:f2:f4:
                    a7:f6:9f:a1:f1:b0:7c:5a:c6:1c:bf:43:06:26:92:
                    00:19:85:5f:73:ee:6e:11:66:40:48:3e:a3:66:4a:
                    17:83:93:0e:a3:3f:d9:19:2d:22:4f:b7:35:b2:bb:
                    eb:5d:39:cc:21:85:ca:13:84:5e:e5:71:57:78:e4:
                    86:70:f1:44:f5:cb:57:5d:48:53:72:2d:1a:42:68:
                    59:d2:ee:cd:c1:23:f0:a1:51:b4:a1:35:62:b2:02:
                    35:70:68:2a:67:05:a7:88:66:6f:2a:dd:4e:49:cf:
                    01:1d:2c:93:0c:99:83:a9:f5:26:15:e0:8e:a1:9d:
                    37:0f:5d:63:eb:92:6b:de:6c:69:af:17:81:4f:f6:
                    c4:f7:9d:14:b0:90:1c:22:ec:58:8b:f5:4e:43:35:
                    28:00:2e:64:24:7d:6a:35:94:f0:35:4c:59:ac:8a:
                    ef:41:b1:4f:85:5b:8b:59:62:c8:34:9e:82:42:53:
                    ac:79:f4:32:63:2e:b2:cb:bc:c9:88:a5:9e:38:42:
                    1a:d9:76:84:e5:fc:39:c0:11:ff:80:9a:fc:f2:13:
                    60:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D2:9B:52:F6:02:9D:29:E6:D3:4D:49:85:15:80:84:AA:F8:46:B3
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/49KbUvYCnSnm001JhRWAhKr4RrM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:55:92:85:d0:1b:ff:b5:d8:5b:75:b3:5b:96:2b:cd:46:1c:
         91:b2:f2:0b:5a:cf:c6:24:cb:4c:c8:30:55:bf:2a:dd:dd:be:
         cf:f1:fb:ef:a0:7e:c2:ea:46:38:2d:35:89:f2:e9:e9:25:03:
         8b:62:6c:76:3f:cb:9f:a3:92:86:ab:34:90:01:42:c5:bb:59:
         c3:8a:d0:9e:ab:77:ee:ec:50:ec:50:8b:43:49:fe:d0:db:97:
         02:56:4f:1d:fa:59:41:85:93:ec:ef:ea:46:45:f0:4a:68:7b:
         8d:19:a3:08:e8:76:90:80:83:2e:fe:b2:75:32:6e:0d:d3:64:
         43:e4:50:d0:fd:d9:e0:db:97:61:4c:94:7a:98:65:fb:ae:4c:
         9d:10:3a:14:6c:d2:99:72:c5:6a:b0:e5:af:58:9c:e4:2b:a0:
         f9:e5:87:20:cd:f6:41:01:3f:32:71:90:74:26:2f:f3:98:42:
         9c:2d:eb:7d:cb:90:1b:c9:1d:a4:e3:d3:c8:dd:b0:59:fa:21:
         ed:b7:ac:4b:85:f2:9a:65:89:3d:41:54:47:f6:1b:76:a4:66:
         9d:6d:e7:6a:2e:18:2a:d4:af:2c:e6:ba:5d:38:19:11:b1:82:
         5c:13:cf:d1:ca:fe:fc:12:bd:80:fe:82:b7:79:2e:9a:d6:28:
         b3:bd:11:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:02:06 2025 by rpki-client