Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/uj6l6vh4_pCTYrvpExCYKS_qCHE.roa
File:                     uj6l6vh4_pCTYrvpExCYKS_qCHE.roa (raw, json)
Hash identifier:          4RO5oZIa9EygVDDPmgsjE6Ko2te6V/ym8NhtCCrrNWQ=
Subject key identifier:   BA:3E:A5:EA:F8:78:FE:90:93:62:BB:E9:13:10:98:29:2F:EA:08:71
Certificate issuer:       /CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68
Certificate serial:       0110
Authority key identifier: 92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/uj6l6vh4_pCTYrvpExCYKS_qCHE.roa
Signing time:             Fri 30 Jan 2026 15:47:48 +0000
ROA not before:           Fri 30 Jan 2026 15:47:48 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131657
IP address blocks:        163.61.124.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 12:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68
        Validity
            Not Before: Jan 30 15:47:48 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BA3EA5EAF878FE909362BBE9131098292FEA0871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5d:31:f7:a7:d9:8f:17:9c:5e:a8:38:e6:fe:
                    f4:00:0b:87:14:84:a8:94:b0:40:b4:96:0b:6b:f7:
                    5d:f4:f0:66:be:d1:8a:63:2f:91:58:af:98:7e:30:
                    b0:21:a4:08:6f:18:d7:2d:cb:8a:54:fb:ef:bf:23:
                    51:a5:2b:47:1b:13:6f:11:46:88:c8:f2:c1:57:6c:
                    43:7b:41:3a:54:58:5b:e8:6b:77:b5:a9:db:56:95:
                    63:80:f7:9b:32:dc:cf:f0:c1:c4:27:a8:db:7e:aa:
                    af:97:87:eb:f8:71:f2:5a:97:f2:04:89:c9:5f:ed:
                    9a:9f:56:ef:23:24:ce:5f:af:55:bd:04:75:94:9f:
                    1e:90:14:e0:72:bd:6e:ba:51:b9:d9:65:a7:9d:9f:
                    e1:85:e4:53:ec:f5:f7:9c:5e:9e:ca:2a:55:44:92:
                    14:43:10:60:8b:fb:cb:c9:4f:07:87:50:14:5f:44:
                    32:31:0f:85:e6:80:38:d3:69:3c:52:35:67:68:61:
                    5e:9e:91:c4:35:42:16:12:67:2f:12:0d:c5:62:28:
                    3b:a6:7b:7e:35:a9:99:bf:1e:68:e0:c9:f9:4c:f7:
                    66:d3:b2:96:40:2e:6f:57:55:26:e9:4f:aa:d2:b2:
                    89:b7:27:26:c9:84:ea:d8:1e:a1:bc:e7:70:8c:ca:
                    8a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3E:A5:EA:F8:78:FE:90:93:62:BB:E9:13:10:98:29:2F:EA:08:71
            X509v3 Authority Key Identifier:
                keyid:92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/uj6l6vh4_pCTYrvpExCYKS_qCHE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:c0:51:e8:aa:e8:14:a8:50:01:84:ec:57:ad:70:dc:70:1b:
         42:84:ae:d0:a7:22:e9:ab:88:46:fd:61:58:9e:5c:f7:06:c4:
         e3:dd:03:8b:77:cf:38:fb:93:82:23:84:4b:fc:45:50:bb:48:
         b5:92:ee:74:15:61:08:3b:c6:77:8c:fc:b2:b8:e5:d3:19:f4:
         82:2e:2a:8e:d4:8a:c9:89:e5:93:5c:1e:e3:dc:e1:72:4e:98:
         4b:4f:6b:bb:b5:a6:a9:0d:d8:57:55:a2:60:2c:b0:12:39:97:
         79:3d:42:90:10:be:83:ed:3b:ac:2f:3f:e8:0c:23:b5:01:66:
         43:b4:4a:38:df:e3:ca:4c:8c:7d:c1:92:fd:c3:bd:04:52:be:
         9d:4b:de:5d:ca:ed:2c:84:50:c3:b2:93:1a:ae:bb:b8:09:10:
         33:62:4b:eb:bc:f8:9e:4a:0a:b4:5d:87:31:f5:5f:27:1d:01:
         bf:6e:e5:0e:a5:67:cf:cc:24:46:b9:c0:0e:1b:61:27:96:5b:
         e7:b8:6c:c9:5c:42:69:b5:90:5d:4f:47:06:eb:a3:ba:0b:7a:
         ff:c0:08:73:e2:ab:a2:9d:9d:b5:c2:94:34:f0:64:b4:f0:cc:
         b2:fc:7d:51:c9:9c:21:c9:77:71:5b:9a:02:70:0f:47:f2:19:
         3d:40:0c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:51 2026 by rpki-client