Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/mBpz77kRDAmOiZqwWrLjLRNixyo.roa
File:                     mBpz77kRDAmOiZqwWrLjLRNixyo.roa (raw, json)
Hash identifier:          aMipgp7L52NpeZU2glXoR46oaXbWFBabji3fNDMpsBg=
Subject key identifier:   98:1A:73:EF:B9:11:0C:09:8E:89:9A:B0:5A:B2:E3:2D:13:62:C7:2A
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       1510
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mBpz77kRDAmOiZqwWrLjLRNixyo.roa
Signing time:             Wed 28 Jan 2026 07:36:33 +0000
ROA not before:           Wed 28 Jan 2026 07:36:33 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9674
IP address blocks:        223.22.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 16:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5392 (0x1510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Jan 28 07:36:33 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=981A73EFB9110C098E899AB05AB2E32D1362C72A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:96:c1:80:86:fa:a5:e1:20:80:9c:03:0d:
                    1d:7e:a1:54:53:4c:41:39:c2:38:fe:78:b4:2c:ce:
                    a6:05:5f:0e:39:a5:ec:58:ca:19:36:7f:85:8b:78:
                    d3:a0:03:1d:3e:87:ce:8e:3f:4f:d5:55:f5:d6:0a:
                    90:28:b9:37:93:b0:55:b6:21:e0:5e:f3:80:f8:8d:
                    a9:f3:69:80:9d:b6:98:de:eb:ff:cc:54:70:94:32:
                    12:07:1b:38:ec:56:ac:43:70:9f:7b:c0:26:fa:d4:
                    68:8c:c9:b2:dd:6c:5f:a3:87:7c:5d:5b:80:82:24:
                    a9:82:e5:44:fd:d0:d5:31:bf:57:0b:71:20:92:95:
                    8d:94:ef:4d:84:16:83:07:55:0b:11:0c:0b:2d:b4:
                    ff:40:4f:4f:7c:a6:18:f9:4a:c7:32:85:5e:bd:1e:
                    d8:b8:bc:f4:16:dd:38:11:5e:d2:09:9f:db:7f:33:
                    d9:d8:3c:71:ad:d0:1b:1b:0c:69:6b:32:56:e5:0d:
                    8f:63:df:91:46:19:7d:9e:ea:bd:8a:cf:61:3e:31:
                    2b:c9:fc:38:e3:db:0c:8a:ee:1e:4a:43:45:8b:c8:
                    a6:5d:5b:73:be:e6:27:d6:7f:93:89:30:cd:70:9d:
                    d5:87:3a:43:06:e2:45:6f:b8:2c:6f:2d:a0:d1:cb:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1A:73:EF:B9:11:0C:09:8E:89:9A:B0:5A:B2:E3:2D:13:62:C7:2A
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mBpz77kRDAmOiZqwWrLjLRNixyo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.22.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:ce:8a:8c:d6:19:39:92:69:9d:55:dd:4d:e3:e9:8c:f1:dc:
         65:c0:7e:0c:d3:2f:d6:2f:75:ee:7d:d0:20:a2:3e:d0:1b:7d:
         20:4a:ca:b1:fa:a3:a1:d4:d7:73:42:54:2e:46:79:3f:0c:82:
         7a:26:3a:02:59:b5:ae:2b:60:25:9a:ad:df:5b:89:9b:54:e2:
         88:db:38:ea:3e:30:18:39:00:a5:83:1e:c8:01:31:06:0c:8e:
         44:8a:8f:32:cb:0f:3e:f5:ab:44:8d:7d:72:8c:97:73:df:d3:
         65:3d:0b:60:cd:94:7e:b2:c0:23:4f:37:f6:92:d4:75:fa:7b:
         43:11:ad:e9:7a:1c:dc:57:c3:e2:14:50:71:14:3d:7b:7a:67:
         6e:8c:d2:0e:cc:0f:0e:63:5f:e8:b2:15:81:70:1c:c0:2e:98:
         52:60:c0:2d:45:44:9f:75:09:0e:c5:7e:32:50:00:7f:74:6b:
         c2:17:1d:62:99:52:e5:90:85:f6:d9:ac:53:d2:f3:48:27:db:
         dc:cd:ef:f9:3b:99:41:94:22:44:79:99:34:92:c2:cc:21:ac:
         60:93:ba:c1:86:78:46:c4:f6:95:26:62:70:75:b1:93:96:d2:
         a9:04:9b:a8:17:73:bd:12:83:a1:d0:50:10:32:5d:d2:f7:2e:
         44:ce:13:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:25 2026 by rpki-client