Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/6qB6_wMykO5o1tfxEpJ8ARkHHBM.roa
File:                     6qB6_wMykO5o1tfxEpJ8ARkHHBM.roa (raw, json)
Hash identifier:          EouIhjJAL1chO6R63dwlaz0ML4qykw1pbso17mpbGbk=
Subject key identifier:   EA:A0:7A:FF:03:32:90:EE:68:D6:D7:F1:12:92:7C:01:19:07:1C:13
Certificate issuer:       /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Certificate serial:       0487
Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/6qB6_wMykO5o1tfxEpJ8ARkHHBM.roa
Signing time:             Thu 08 May 2025 08:53:25 +0000
ROA not before:           Thu 08 May 2025 08:53:25 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     134823
IP address blocks:        160.30.78.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 21:51:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159 (0x487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
        Validity
            Not Before: May  8 08:53:25 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=EAA07AFF033290EE68D6D7F112927C0119071C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:93:7b:0a:8e:ba:66:c4:e1:62:1a:38:16:
                    80:27:93:01:f4:95:7e:51:bc:01:50:e5:b4:8b:f2:
                    27:e1:0e:aa:64:1b:ef:d2:8c:f4:ef:e1:30:d9:bc:
                    84:fb:25:ed:03:00:27:43:62:fe:e6:2a:a7:c6:94:
                    6f:75:b2:f0:a4:11:69:20:65:87:02:74:f5:46:c3:
                    ea:36:05:bf:07:13:1b:e7:de:6c:14:c6:a2:a4:b8:
                    0b:aa:1c:35:85:a8:22:94:51:05:5c:89:b2:bd:ee:
                    df:8c:00:81:c3:50:c5:9c:b0:c5:32:a1:62:63:83:
                    bb:74:1f:72:29:fe:ce:43:bb:a0:9d:7a:66:d4:fb:
                    a6:c0:34:55:b0:f1:f1:7f:88:e8:d8:96:ab:89:29:
                    11:30:cd:ef:27:c3:c5:81:31:04:34:bc:76:2f:9b:
                    c4:43:45:0a:26:2d:02:3b:75:5b:40:22:3d:6c:42:
                    05:5a:35:ea:51:bd:2e:95:45:49:89:66:61:72:30:
                    c9:f6:17:c1:06:03:a1:ef:0f:a2:4d:32:7f:89:bf:
                    b7:df:b0:cb:5d:ab:dd:a8:2b:e4:d2:9d:e0:48:23:
                    64:e8:95:0f:6d:69:92:cd:f3:f0:bf:05:72:12:42:
                    a5:97:95:30:3f:2b:5f:70:04:58:a2:d4:ae:f6:5c:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A0:7A:FF:03:32:90:EE:68:D6:D7:F1:12:92:7C:01:19:07:1C:13
            X509v3 Authority Key Identifier:
                keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/6qB6_wMykO5o1tfxEpJ8ARkHHBM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:50:9a:62:90:64:c5:a0:fc:cd:86:33:f7:57:58:aa:46:15:
         a4:b3:00:49:69:76:32:28:20:44:ae:fe:40:16:ad:64:41:03:
         ef:40:eb:f5:80:e1:a7:27:c7:0b:25:23:91:76:c8:01:bf:3c:
         db:3e:a2:50:78:27:0c:87:c8:d2:2a:15:bd:9c:5b:9b:d7:7c:
         22:4a:bb:ea:5f:b0:d5:6c:62:df:1f:e0:bb:36:ed:58:8e:ee:
         e8:e5:5d:e7:6b:49:18:96:91:ab:d9:db:af:8a:2b:94:8f:2a:
         5e:e6:3e:a0:c1:91:37:50:a7:ad:4e:ef:92:74:55:e7:fe:13:
         1d:e9:83:2c:1e:f8:aa:46:01:bc:8e:50:61:89:54:c3:53:65:
         32:8e:ad:d6:e4:9d:45:00:40:a1:89:08:19:5d:39:81:f7:e5:
         63:12:5c:32:5c:5f:a6:63:c0:3f:5d:76:72:ef:10:56:e8:36:
         3c:48:75:ee:40:c4:b3:17:e7:30:10:ba:44:4a:37:36:19:97:
         40:5c:b9:a7:58:ca:58:0a:74:aa:d5:5c:4f:28:bd:54:08:ba:
         8b:ba:45:e4:83:32:91:e6:a7:3c:1f:74:84:f6:ac:12:6b:f4:
         68:c1:65:2e:02:f7:38:f7:d1:f9:32:48:04:01:74:75:f9:6c:
         3a:bb:e0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:23:42 2025 by rpki-client