Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WISTRON/92ya2HAEtksonPTMXYpkFAqpfjU.roa
File:                     92ya2HAEtksonPTMXYpkFAqpfjU.roa (raw, json)
Hash identifier:          YD+KmS2ykCOOl0iyh2sL17zDhgQH959X/HFE3cNdy10=
Subject key identifier:   F7:6C:9A:D8:70:04:B6:4B:28:9C:F4:CC:5D:8A:64:14:0A:A9:7E:35
Certificate issuer:       /CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
Certificate serial:       0C32
Authority key identifier: 53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/92ya2HAEtksonPTMXYpkFAqpfjU.roa
Signing time:             Mon 10 Feb 2025 14:05:52 +0000
ROA not before:           Mon 10 Feb 2025 14:05:52 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131599
IP address blocks:        103.200.0.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3122 (0xc32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
        Validity
            Not Before: Feb 10 14:05:52 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F76C9AD87004B64B289CF4CC5D8A64140AA97E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:20:d7:e2:ea:b7:99:4a:bc:4a:47:8c:39:
                    13:39:fc:57:dc:77:a0:a6:c1:bb:5c:c9:7a:6e:8d:
                    17:fd:25:b3:aa:ba:44:f7:4f:e2:1f:0c:e8:31:93:
                    2d:d0:29:aa:d5:a0:10:87:87:3a:34:39:05:9b:70:
                    83:fa:e2:db:dd:1f:e7:7e:cb:fe:6b:32:18:2e:62:
                    e3:28:d0:8e:80:64:61:a0:d5:23:05:68:72:da:bd:
                    4a:ee:5e:97:f5:5a:39:cb:18:a6:00:01:6e:20:c8:
                    ef:2c:22:9a:84:20:cc:12:7c:ae:44:2d:f4:06:cb:
                    33:36:cd:fa:b8:f7:f1:58:84:4c:38:32:83:cb:bb:
                    0f:27:f8:67:a3:bd:9e:cf:76:df:91:89:0b:56:f9:
                    45:f2:38:d3:ad:df:ab:47:f6:75:10:52:4c:ae:ac:
                    a0:a9:43:1b:dd:46:31:ec:fb:88:38:d3:0f:46:ae:
                    8b:37:84:16:c4:29:6a:f9:da:bd:c3:c1:86:13:4b:
                    e7:0e:fe:c9:f6:5d:57:3b:dc:84:61:78:78:ea:e4:
                    42:6d:2e:34:db:29:72:1c:36:ec:b5:4a:6f:e5:c8:
                    a3:2e:58:26:98:b1:4e:de:d1:23:1d:3d:7c:ad:38:
                    ee:8f:e3:1a:1a:ac:cb:6d:9a:6a:6a:79:84:54:81:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6C:9A:D8:70:04:B6:4B:28:9C:F4:CC:5D:8A:64:14:0A:A9:7E:35
            X509v3 Authority Key Identifier:
                keyid:53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/92ya2HAEtksonPTMXYpkFAqpfjU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:0d:64:cc:4f:c6:5b:f8:cf:8a:44:48:86:17:3f:c9:7c:9c:
         a9:7e:8d:89:71:dd:eb:a3:5f:0e:64:4e:8f:75:f6:61:03:ab:
         70:cf:2a:8e:99:6b:cb:9e:bb:02:55:bf:9a:41:32:58:93:18:
         0a:8a:98:9c:65:22:8f:b4:fa:0a:40:3f:2a:a6:7a:00:91:0f:
         84:45:fa:1b:05:54:eb:9c:7d:09:c2:8a:58:24:ca:32:7f:f2:
         a4:ce:45:70:b9:1a:ff:db:85:70:fd:38:62:44:a9:5d:7f:d1:
         e1:5a:cb:e1:63:bf:7a:bd:d2:5a:36:db:3e:52:8c:c9:c6:5c:
         64:8b:1f:0b:da:24:61:6a:57:de:8f:c3:ef:c4:f4:5a:91:50:
         28:47:7f:f6:65:b8:21:21:33:68:84:65:98:af:f1:3d:03:0a:
         1e:30:27:33:12:29:86:40:17:84:40:27:61:59:99:35:7b:cc:
         40:0d:35:4d:bc:ea:d8:3c:01:81:7a:88:a3:4f:93:96:a5:b9:
         22:6a:b4:15:b0:98:8d:e1:fb:5d:db:78:20:aa:d2:a2:8d:27:
         52:d9:02:14:90:6c:d6:15:a3:45:ad:46:10:ab:c3:d7:08:ee:
         fd:ca:96:09:6a:b3:19:25:28:ac:18:f3:44:45:a8:7b:7e:b0:
         88:48:de:36
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTND
QjdCMTdGNEY3RDI1MERDOUJBMkNERDYxQTc0MkRCQTM3RkMxMDAeFw0yNTAyMTAx
NDA1NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY3NkM5QUQ4NzAwNEI2
NEIyODlDRjRDQzVEOEE2NDE0MEFBOTdFMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYWiDX4uq3mUq8SkeMORM5/Ffcd6CmwbtcyXpujRf9JbOqukT3
T+IfDOgxky3QKarVoBCHhzo0OQWbcIP64tvdH+d+y/5rMhguYuMo0I6AZGGg1SMF
aHLavUruXpf1WjnLGKYAAW4gyO8sIpqEIMwSfK5ELfQGyzM2zfq49/FYhEw4MoPL
uw8n+GejvZ7Pdt+RiQtW+UXyONOt36tH9nUQUkyurKCpQxvdRjHs+4g40w9Gros3
hBbEKWr52r3DwYYTS+cO/sn2XVc73IRheHjq5EJtLjTbKXIcNuy1Sm/lyKMuWCaY
sU7e0SMdPXytOO6P4xoarMttmmpqeYRUgaU3AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU92ya2HAEtksonPTMXYpkFAqpfjUwHwYDVR0jBBgwFoAUU8t7F/T30lDcm6LN
1hp0Lbo3/BAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0lTVFJP
Ti9VOHQ3Rl9UMzBsRGNtNkxOMWhwMExibzNfQkEuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1U4dDdGX1QzMGxEY202TE4xaHAwTGJvM19CQS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1dJU1RST04vOTJ5YTJIQUV0a3NvblBU
TVhZcGtGQXFwZmpVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AmfIADANBgkqhkiG9w0BAQsFAAOCAQEAMQ1kzE/GW/jPikRIhhc/yXycqX6NiXHd
66NfDmROj3X2YQOrcM8qjplry567AlW/mkEyWJMYCoqYnGUij7T6CkA/KqZ6AJEP
hEX6GwVU65x9CcKKWCTKMn/ypM5FcLka/9uFcP04YkSpXX/R4VrL4WO/er3SWjbb
PlKMycZcZIsfC9okYWpX3o/D78T0WpFQKEd/9mW4ISEzaIRlmK/xPQMKHjAnMxIp
hkAXhEAnYVmZNXvMQA01Tbzq2DwBgXqIo0+TlqW5Imq0FbCYjeH7Xdt4IKrSoo0n
UtkCFJBs1hWjRa1GEKvD1wju/cqWCWqzGSUorBjzREWoe36wiEjeNg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:24 2025 by rpki-client