Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/8yhXZpgl7Hx0UEoymqDtVSH37O4.roa
File:                     8yhXZpgl7Hx0UEoymqDtVSH37O4.roa (raw, json)
Hash identifier:          XFuBoY1szJ/skMvjXIm5QmWUOGF7+5AvsZd0biT4n78=
Subject key identifier:   F3:28:57:66:98:25:EC:7C:74:50:4A:32:9A:A0:ED:55:21:F7:EC:EE
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0E13
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/8yhXZpgl7Hx0UEoymqDtVSH37O4.roa
Signing time:             Mon 10 Feb 2025 14:22:08 +0000
ROA not before:           Mon 10 Feb 2025 14:22:08 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18424
IP address blocks:        103.30.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 03:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3603 (0xe13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb 10 14:22:08 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F32857669825EC7C74504A329AA0ED5521F7ECEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:8b:3f:24:bc:7f:2c:25:31:9a:eb:0b:65:
                    da:7c:35:83:a6:07:aa:41:49:91:27:a5:5a:28:1e:
                    6e:7d:ba:3c:47:db:03:58:09:85:f1:aa:47:98:e1:
                    d6:4b:e2:fe:90:37:43:0d:9b:00:32:63:a9:3b:ae:
                    3e:8b:4c:47:e6:eb:15:32:d8:a6:0b:8d:9f:29:33:
                    9e:dd:56:fc:1a:b2:a5:3c:13:fd:99:24:3c:33:fb:
                    2f:65:25:43:ce:e5:ac:a6:5c:9e:85:b2:5a:e6:39:
                    45:21:36:a0:e2:66:e2:9f:de:fd:26:fb:79:9f:d3:
                    18:0e:a4:0d:d8:5f:cd:72:ee:d7:e2:c0:7d:4d:1e:
                    bc:05:7c:32:aa:37:0a:71:4d:41:48:71:b4:7c:7e:
                    ed:72:dc:c1:10:9e:59:c5:c1:a6:e6:c7:9d:7a:fb:
                    69:48:b8:85:2b:d7:49:f0:ce:89:29:fa:75:48:7f:
                    2d:e2:2a:1d:ea:d3:bd:51:57:a9:45:83:82:1a:36:
                    64:24:44:55:90:dc:a6:13:35:70:6a:37:36:4e:f5:
                    a8:54:76:35:7c:4f:c0:51:34:e7:40:0b:a4:8b:34:
                    1a:f8:02:5a:25:10:87:07:6c:f7:e0:19:ef:89:4b:
                    fb:78:9f:f6:c3:90:cb:f5:44:59:30:4d:ae:fe:a4:
                    0b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:28:57:66:98:25:EC:7C:74:50:4A:32:9A:A0:ED:55:21:F7:EC:EE
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/8yhXZpgl7Hx0UEoymqDtVSH37O4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:ae:5f:44:06:68:e4:34:1e:9d:55:92:ab:11:84:77:71:98:
         3c:b3:59:95:52:c9:72:79:74:2c:9c:6e:77:57:0d:30:d5:a4:
         67:f4:dc:52:4d:33:b3:7f:bf:fc:fc:7a:62:34:78:eb:ca:78:
         31:ef:58:83:26:cb:a9:b7:b5:c4:18:f8:ec:de:6c:c3:b2:69:
         56:a4:b4:91:26:dc:75:26:3e:25:23:f9:5b:27:41:53:09:e3:
         86:5f:fd:a9:69:d0:9d:c6:2a:5e:b8:1c:1b:f6:b1:6b:f5:84:
         33:2f:10:ea:ec:b2:4e:65:40:90:90:a5:c9:13:57:52:01:ea:
         a6:6a:5b:1d:23:08:d7:f9:fd:91:d9:3f:41:9c:cd:70:44:27:
         93:69:3b:3c:d6:b9:3a:12:ec:a0:09:31:c5:d2:36:b4:af:35:
         86:55:ad:47:fd:ef:03:eb:9b:32:e8:d1:a1:72:7b:a5:cf:b6:
         5a:76:0b:b9:ed:fb:db:04:e1:92:7c:42:fc:c9:8e:f1:4f:dd:
         82:c3:18:62:8d:b6:81:fb:d2:0c:88:78:5c:e2:0d:ac:2b:18:
         92:c3:ec:e2:9b:cb:1a:99:49:5a:7d:6b:d0:53:a9:bf:98:4e:
         b6:7f:78:b9:ef:ad:db:ff:25:42:4a:de:2a:fa:b4:6d:4f:e3:
         31:ce:fc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:05:51 2025 by rpki-client