Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/5Pn21OjQyjknKq49z8DXpYDqPWw.roa
File:                     5Pn21OjQyjknKq49z8DXpYDqPWw.roa (raw, json)
Hash identifier:          azrwXlNSFeRpWi5xvXmvqP3XDF+Ni1yDtsezyrSkgpA=
Subject key identifier:   E4:F9:F6:D4:E8:D0:CA:39:27:2A:AE:3D:CF:C0:D7:A5:80:EA:3D:6C
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0E04
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/5Pn21OjQyjknKq49z8DXpYDqPWw.roa
Signing time:             Mon 10 Feb 2025 14:22:04 +0000
ROA not before:           Mon 10 Feb 2025 14:22:04 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24168
IP address blocks:        103.30.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Apr 2025 16:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3588 (0xe04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb 10 14:22:04 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E4F9F6D4E8D0CA39272AAE3DCFC0D7A580EA3D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:c7:cf:de:27:e0:76:4e:11:e0:b1:5c:0c:
                    fa:60:d1:a6:bf:2e:7a:43:54:43:0c:33:15:37:73:
                    cd:e2:ff:88:02:da:63:78:f3:35:dc:2c:75:4d:10:
                    f1:6a:14:08:78:12:7b:22:12:56:f1:95:75:55:a7:
                    8a:06:5e:e0:ea:c0:e3:cf:1e:e1:c1:8c:4c:98:dc:
                    02:e2:8a:54:2d:14:aa:6e:f1:29:8f:f7:75:fd:1d:
                    49:8d:65:08:8c:b2:67:5a:65:df:ce:f9:08:d2:f7:
                    6a:d0:ef:20:24:81:11:55:f1:12:a1:78:dc:e1:59:
                    fa:de:fb:b3:67:e6:53:4f:5b:39:f2:d8:4a:0a:3c:
                    22:fc:d3:4e:92:66:0c:53:82:cf:9f:3f:46:5f:39:
                    4d:91:93:67:aa:85:1e:df:0a:9d:26:4d:00:ee:68:
                    b2:6c:d8:06:5a:b9:1f:f8:84:11:af:3f:9f:29:eb:
                    f1:2c:66:5c:35:9f:2b:bf:f1:b5:98:a6:f3:6b:b8:
                    56:f9:1c:db:a7:82:31:e4:31:42:a6:30:d1:83:2c:
                    c3:34:bc:53:1b:c0:da:aa:57:97:49:90:af:66:00:
                    1a:71:8e:1e:5f:48:30:86:9c:bd:41:a0:85:0c:e8:
                    be:de:90:ff:9e:67:2b:0d:b0:b9:d4:4f:bf:db:e4:
                    89:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F9:F6:D4:E8:D0:CA:39:27:2A:AE:3D:CF:C0:D7:A5:80:EA:3D:6C
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/5Pn21OjQyjknKq49z8DXpYDqPWw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:08:1d:20:84:77:c4:b6:3a:73:fd:eb:25:b7:73:ed:d5:c4:
         6e:23:bb:a1:7b:8d:e2:8b:2b:fb:12:2f:8a:38:df:10:20:5f:
         b7:36:73:7e:20:1a:b7:4f:79:e9:ec:91:91:09:17:a0:22:5b:
         31:03:f5:d6:eb:67:45:04:d1:8b:58:bb:71:58:7f:fd:72:46:
         dd:7e:66:7b:f4:b4:14:d8:52:7d:f4:60:c3:e9:47:6a:5c:dd:
         22:af:5f:a7:66:d6:8b:9f:1d:6c:f3:63:19:5a:e0:09:02:21:
         55:44:38:ba:72:53:a3:be:7f:bb:f4:d2:c5:68:05:b8:2d:df:
         b2:cf:42:95:c6:f9:77:a9:c2:d1:37:38:51:75:99:0f:90:a6:
         ab:89:d5:38:33:b6:c5:60:0d:9b:29:ca:30:4e:f1:94:40:5d:
         1f:c1:0c:14:c3:40:37:2e:fc:e4:1a:95:0c:02:f0:7d:c0:ae:
         e2:8c:86:bf:fe:9d:30:67:f6:3e:fc:b8:5f:3a:60:28:8a:ab:
         f0:df:65:8f:8d:88:8e:b9:8f:ec:58:ad:b4:d4:ff:17:69:55:
         99:69:47:fd:bc:55:50:25:7a:fc:46:ec:8a:bf:0f:1e:6e:ab:
         b8:6c:47:42:b1:ea:80:02:07:33:da:85:53:c7:cc:f1:ad:2f:
         ce:d7:28:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:07:29 2025 by rpki-client