Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/gnGMZipzYg31fvn_z7scpHMh4so.roa
File:                     gnGMZipzYg31fvn_z7scpHMh4so.roa (raw, json)
Hash identifier:          UH5mG3KW5tw1jr9jVAB5gSPtCh9LEjXcVs6GtSpxqx4=
Subject key identifier:   82:71:8C:66:2A:73:62:0D:F5:7E:F9:FF:CF:BB:1C:A4:73:21:E2:CA
Certificate issuer:       /CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68
Certificate serial:       0110
Authority key identifier: 92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/gnGMZipzYg31fvn_z7scpHMh4so.roa
Signing time:             Fri 30 Jan 2026 15:47:48 +0000
ROA not before:           Fri 30 Jan 2026 15:47:48 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     152621
IP address blocks:        163.61.124.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 02:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68
        Validity
            Not Before: Jan 30 15:47:48 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=82718C662A73620DF57EF9FFCFBB1CA47321E2CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:f3:af:cb:37:c4:97:a5:fb:f9:33:e4:89:
                    0a:65:bc:7c:67:97:12:f2:89:e2:9b:77:e7:ad:e0:
                    0f:6b:5d:10:5d:6c:57:dd:1d:05:96:b8:02:2e:00:
                    58:c0:c2:61:fb:39:4d:43:0f:18:fc:28:59:b3:7e:
                    8b:4f:3b:e1:60:69:9c:ed:17:0a:49:56:28:76:31:
                    b8:b6:eb:79:ca:b3:08:bb:8f:c5:6d:95:68:50:ce:
                    51:ef:50:5b:1b:b0:6a:2f:b8:67:2f:25:27:c5:f4:
                    d4:a4:a7:72:65:e4:b6:09:a9:4c:17:ab:ac:b9:d8:
                    70:cd:90:1e:bb:88:48:5f:d9:91:29:c2:20:76:e3:
                    10:65:91:8e:2f:7a:42:de:b7:9d:e7:93:17:42:93:
                    98:a2:65:7f:22:22:8f:2f:e2:25:8d:f4:d9:bc:e2:
                    2e:98:e9:8e:09:e2:e4:60:e8:fb:c4:78:f0:f7:d1:
                    ef:2b:2e:89:0a:23:79:c7:67:5d:13:0a:d2:ff:23:
                    0f:59:cb:51:fc:b0:c4:c1:20:0c:e1:0e:87:10:1c:
                    6c:88:59:2a:2f:88:38:a4:7c:83:89:04:da:98:9a:
                    05:ca:9d:6f:73:91:dc:ef:ac:c5:58:35:05:c2:af:
                    97:f2:8a:e4:57:3c:75:42:2a:7f:09:d7:28:c7:4f:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:71:8C:66:2A:73:62:0D:F5:7E:F9:FF:CF:BB:1C:A4:73:21:E2:CA
            X509v3 Authority Key Identifier:
                keyid:92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/gnGMZipzYg31fvn_z7scpHMh4so.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:2d:86:a1:a7:83:8e:f8:e2:3f:24:e2:0a:df:4e:2f:e5:c5:
         d8:bd:ca:e9:60:a2:9a:14:29:05:87:ef:47:30:69:dd:28:10:
         81:62:c4:9c:14:87:92:a0:70:ac:e2:59:a8:21:d3:09:02:13:
         2b:9c:5f:ae:e9:c5:d7:bd:54:5f:25:11:64:02:5e:10:38:b3:
         07:81:9b:1e:d7:16:ee:99:47:a5:37:74:b2:26:e8:70:ac:a1:
         dc:3a:3f:8a:4b:ad:d1:62:f9:93:eb:69:de:13:36:99:98:34:
         5f:34:75:17:a2:1c:84:b2:0c:3b:2a:c3:c6:76:2e:74:f1:b3:
         15:da:d0:09:8c:d7:39:5f:b4:8d:37:a8:6f:da:82:98:45:da:
         49:21:07:95:3e:36:ac:2d:70:42:30:c5:94:00:f3:3a:c0:85:
         dd:93:90:7c:f4:f6:57:f2:d8:9a:b1:d1:49:2d:3a:e8:03:c3:
         5f:1d:f2:58:44:36:d2:9d:81:fc:df:16:9e:f8:86:b5:3a:13:
         66:c2:03:84:d8:57:34:04:c2:b3:57:54:b8:c9:80:95:73:a4:
         7a:c5:ee:ce:07:0f:12:24:81:c1:71:9a:44:95:9e:ed:38:32:
         3b:83:39:c4:33:20:e1:b9:d7:38:0e:fd:fe:da:19:c2:2a:1e:
         24:ce:06:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:10:44 2026 by rpki-client