Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/GWJGOfhpsfrJd0kw5QzE4IUzcYc.roa
File:                     GWJGOfhpsfrJd0kw5QzE4IUzcYc.roa (raw, json)
Hash identifier:          S/LrahTF1ecL3rlxDi1WrfdvhV+9F5uRIbwg43rBxkg=
Subject key identifier:   19:62:46:39:F8:69:B1:FA:C9:77:49:30:E5:0C:C4:E0:85:33:71:87
Certificate issuer:       /CN=70642125FDF902365B240CA4022802132FDC1C15
Certificate serial:       03
Authority key identifier: 70:64:21:25:FD:F9:02:36:5B:24:0C:A4:02:28:02:13:2F:DC:1C:15
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/cGQhJf35AjZbJAykAigCEy_cHBU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/GWJGOfhpsfrJd0kw5QzE4IUzcYc.roa
Signing time:             Fri 13 Feb 2026 01:53:32 +0000
ROA not before:           Fri 13 Feb 2026 01:53:32 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     152626
IP address blocks:        2402:4d20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/cGQhJf35AjZbJAykAigCEy_cHBU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/cGQhJf35AjZbJAykAigCEy_cHBU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/cGQhJf35AjZbJAykAigCEy_cHBU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 10:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70642125FDF902365B240CA4022802132FDC1C15
        Validity
            Not Before: Feb 13 01:53:32 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=19624639F869B1FAC9774930E50CC4E085337187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:19:35:ce:37:f4:9f:f3:bd:72:23:74:bc:79:
                    7b:e4:22:a8:b4:11:f1:62:7d:ff:3e:b5:11:21:cb:
                    53:af:38:a3:80:55:bb:49:93:2d:af:63:30:80:73:
                    7f:2f:60:ed:bb:7d:7a:66:ff:d3:87:ca:c0:3c:a1:
                    42:86:c3:c4:81:d7:61:ca:7a:75:72:78:f7:eb:83:
                    b2:c8:09:c3:e5:21:4a:1d:79:98:a9:f2:ed:fc:65:
                    e8:d6:ad:29:05:dc:42:7e:e8:7e:3c:b3:8d:0c:23:
                    b4:9a:1c:79:11:b1:df:7a:69:f4:a5:25:0b:8c:16:
                    cd:7b:82:70:41:1a:98:d9:49:46:7e:fb:08:0d:07:
                    1e:bf:4f:36:fe:73:e8:02:c8:50:7a:2a:7f:79:02:
                    69:87:1f:77:56:22:76:aa:42:88:a5:db:4a:67:86:
                    29:d1:a6:a9:68:af:b9:fb:a0:44:60:eb:ab:01:9b:
                    2e:28:fb:c2:47:9d:1c:73:d1:ff:ea:90:02:de:60:
                    54:9d:e0:bb:2d:de:f4:30:bd:1a:6f:ed:5e:4b:51:
                    fe:36:f7:78:0e:c8:53:64:68:9a:b0:d4:c7:7d:c6:
                    ed:e8:28:92:46:d6:23:ad:54:de:f9:75:32:d9:ab:
                    b6:22:92:a4:f2:90:27:a4:de:44:e2:7c:19:af:ad:
                    65:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:62:46:39:F8:69:B1:FA:C9:77:49:30:E5:0C:C4:E0:85:33:71:87
            X509v3 Authority Key Identifier:
                keyid:70:64:21:25:FD:F9:02:36:5B:24:0C:A4:02:28:02:13:2F:DC:1C:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/cGQhJf35AjZbJAykAigCEy_cHBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cGQhJf35AjZbJAykAigCEy_cHBU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/GWJGOfhpsfrJd0kw5QzE4IUzcYc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4d20::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:53:27:46:00:3b:e4:55:64:50:db:aa:fa:c8:5f:87:22:a7:
         27:ba:81:37:f8:22:2f:96:a3:af:28:27:b9:e8:76:b2:37:7d:
         8a:bd:7e:9f:46:d2:95:01:68:d0:da:7f:34:02:09:71:88:a1:
         7e:67:4d:73:f5:d6:d0:11:6a:35:fd:42:f0:92:ca:f3:8b:75:
         c7:9c:dc:78:d6:1b:cb:64:95:df:00:82:c4:bb:78:cb:a7:15:
         d1:42:14:3a:1c:e9:65:b3:10:6f:bd:51:16:2c:bc:4e:92:b7:
         31:44:aa:d3:3e:61:99:91:89:ea:c8:4c:8e:cc:5b:25:09:2a:
         ca:92:25:6a:bf:6c:77:6e:d3:d1:e3:61:aa:ad:db:1f:d0:f7:
         6f:63:82:93:16:48:32:81:05:8a:5a:16:70:37:c9:29:1b:77:
         dd:26:36:44:22:81:38:24:54:44:6e:2c:63:17:1d:d9:99:60:
         88:74:44:ab:9b:93:80:1c:ea:b8:95:4a:d4:4d:5e:d1:c2:4d:
         f0:e1:8d:a6:41:1f:cf:dc:c7:c4:52:ca:86:e0:d9:21:2b:08:
         b5:96:4f:63:93:bc:f4:97:e0:fa:73:62:0c:aa:e2:dc:1c:8f:
         30:82:bf:2b:07:00:97:2e:bf:ca:b2:e4:bb:ec:ac:96:42:e2:
         7f:88:4a:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:35:58 2026 by rpki-client