Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/jFOAcEZVumM_2ehoJfHlpaXcShA.roa
File:                     jFOAcEZVumM_2ehoJfHlpaXcShA.roa (raw, json)
Hash identifier:          oxuZmH4tmCWLw8FxgYK0anKKOf7pIls25q1O8EEoeqI=
Subject key identifier:   8C:53:80:70:46:55:BA:63:3F:D9:E8:68:25:F1:E5:A5:A5:DC:4A:10
Certificate issuer:       /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Certificate serial:       0FAD
Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/jFOAcEZVumM_2ehoJfHlpaXcShA.roa
Signing time:             Mon 10 Feb 2025 13:48:57 +0000
ROA not before:           Mon 10 Feb 2025 13:48:57 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     134823
IP address blocks:        103.134.80.0/22 maxlen: 30
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 13:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4013 (0xfad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
        Validity
            Not Before: Feb 10 13:48:57 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8C5380704655BA633FD9E86825F1E5A5A5DC4A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:0d:3b:bc:56:65:81:61:0c:3e:a6:8f:18:
                    64:b5:80:93:8b:52:08:ee:a8:10:14:67:c6:d2:bf:
                    19:57:0b:b1:47:fc:db:1e:35:32:fa:47:22:38:b1:
                    da:52:eb:23:42:e8:1e:e0:86:ba:08:cd:90:2a:52:
                    8f:ef:88:67:19:ce:40:98:c8:f3:7d:31:f8:59:62:
                    ec:eb:e6:4d:04:ef:2e:44:25:5a:83:3e:87:96:91:
                    f2:22:6c:31:70:37:d5:38:5b:64:2b:29:8d:91:ad:
                    28:1a:ab:de:03:fd:18:94:e1:fd:e2:8c:70:1b:05:
                    e1:7c:ee:ef:84:89:71:f7:b0:87:79:b2:34:f0:04:
                    5c:c2:e1:15:16:99:24:49:99:5a:54:b5:46:7e:52:
                    d0:3f:2d:41:18:ed:1e:be:fb:9a:25:4d:cd:19:d8:
                    9c:1e:e5:b6:8e:f5:b4:ef:52:fe:42:11:13:69:c0:
                    92:d0:b6:ee:74:b1:e8:45:93:cc:55:9d:f8:a6:ca:
                    cf:88:52:7f:e2:3d:d8:cf:9b:b3:98:65:8a:d1:42:
                    0b:67:93:1d:19:d5:fb:10:1a:a6:c9:d6:c0:cb:40:
                    be:dc:d2:cb:11:6b:37:2d:13:1f:78:23:bf:0c:a9:
                    99:78:7c:b2:da:12:92:63:83:f3:3a:db:a0:68:e4:
                    25:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:53:80:70:46:55:BA:63:3F:D9:E8:68:25:F1:E5:A5:A5:DC:4A:10
            X509v3 Authority Key Identifier:
                keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/jFOAcEZVumM_2ehoJfHlpaXcShA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:6e:db:bb:99:39:97:f6:0e:c6:20:e7:68:c5:cf:e5:52:85:
         9e:e2:ca:57:b9:3e:ca:2c:98:94:d4:c3:45:da:f7:1d:2e:54:
         01:44:80:dc:b4:d3:cf:63:bc:4a:82:9b:a7:b1:2a:63:1e:17:
         b6:d1:1e:a0:5c:b2:39:a9:ae:db:1d:59:50:57:73:8b:00:39:
         93:5c:a4:0f:88:cd:9e:d3:1d:3e:e0:72:2e:c0:46:86:9b:60:
         a2:9e:76:35:f0:a6:74:ac:eb:35:ad:66:7b:06:1b:41:87:b5:
         80:09:d4:34:55:7b:3b:c3:b6:4e:10:19:da:f8:71:52:fc:95:
         62:88:41:46:85:02:a0:b5:60:fd:47:31:96:1f:21:c3:24:14:
         a8:6e:e2:c6:1f:12:c8:81:aa:57:9d:89:01:e5:98:ca:c1:5a:
         ec:0f:a5:b4:31:59:bd:ba:67:2a:a4:83:26:a0:cb:91:97:c9:
         8b:4d:93:6e:81:fa:bb:15:02:16:d4:28:81:6e:ac:f0:9f:7d:
         e3:e7:e7:a4:4f:f9:35:7f:3e:9c:0c:8e:fe:b5:af:5b:55:0c:
         13:ba:66:1d:30:04:e4:94:97:38:8d:28:39:28:19:e7:35:f9:
         59:e4:e5:5a:bd:22:ca:8b:f8:9d:aa:e7:65:34:7e:cd:d7:b0:
         47:df:7e:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:34:54 2025 by rpki-client