Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/xdw_BeoYwNgLr9UtGzJ7H6TudBI.roa
File:                     xdw_BeoYwNgLr9UtGzJ7H6TudBI.roa (raw, json)
Hash identifier:          s553w3qgM52MCTRpVmvmoICABdpOVlTElpSMah7PPdA=
Subject key identifier:   C5:DC:3F:05:EA:18:C0:D8:0B:AF:D5:2D:1B:32:7B:1F:A4:EE:74:12
Certificate issuer:       /CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD
Certificate serial:       056A
Authority key identifier: B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/xdw_BeoYwNgLr9UtGzJ7H6TudBI.roa
Signing time:             Mon 03 Nov 2025 08:41:40 +0000
ROA not before:           Mon 03 Nov 2025 08:41:40 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     16509
IP address blocks:        103.196.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 06:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD
        Validity
            Not Before: Nov  3 08:41:40 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C5DC3F05EA18C0D80BAFD52D1B327B1FA4EE7412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3f:7b:ae:8e:ad:55:0d:1b:62:dc:b8:af:49:
                    b8:f0:14:1e:c7:b5:80:93:88:d1:aa:30:79:d1:39:
                    43:09:dd:6a:de:af:b0:56:ff:17:ae:26:47:0b:04:
                    a8:44:3e:9a:92:76:60:66:3f:66:f7:ab:d1:74:52:
                    59:2d:22:d0:cd:32:f4:76:4c:e3:8f:2f:eb:37:a6:
                    04:ea:11:33:e3:47:0e:ea:70:57:15:c1:32:60:50:
                    df:10:3b:ba:64:e7:a7:3e:d5:d0:c8:9a:51:25:f6:
                    c6:17:3c:f2:e4:a6:01:cc:77:ef:ab:af:c2:eb:54:
                    3b:dc:d1:f9:d8:9c:92:7f:66:31:b7:37:97:86:09:
                    0e:f8:a7:60:8e:a2:06:47:c0:b1:df:29:ce:7d:1b:
                    54:54:e5:55:ee:03:f7:bb:2c:a8:bd:32:ae:55:eb:
                    36:56:2f:13:ad:2e:bf:93:ed:35:91:fd:cb:82:ce:
                    d5:ee:d1:05:c7:a0:83:20:fa:52:8c:1c:72:cb:10:
                    f0:31:ec:39:eb:39:3c:c9:11:b6:2f:be:ff:ac:49:
                    0e:09:c0:56:f3:32:aa:23:45:7e:4d:db:ae:b2:82:
                    9a:bf:3f:b5:bb:41:96:e2:e5:ca:52:85:a4:17:58:
                    93:57:78:6c:27:1f:fe:c9:7a:84:66:2d:07:97:18:
                    73:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DC:3F:05:EA:18:C0:D8:0B:AF:D5:2D:1B:32:7B:1F:A4:EE:74:12
            X509v3 Authority Key Identifier:
                keyid:B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/xdw_BeoYwNgLr9UtGzJ7H6TudBI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:bc:09:63:fa:12:21:58:60:99:46:11:2c:5d:8c:5a:ba:5f:
         e4:3f:3e:d0:0f:f3:74:b7:2d:aa:08:3a:b2:f9:b1:d2:46:79:
         46:22:58:f6:ec:ea:51:cb:c9:91:15:44:19:52:36:cc:34:ee:
         78:51:1b:4b:1a:40:3f:9b:b1:5d:8b:ae:2b:71:60:c3:82:47:
         79:62:8a:51:d5:2e:50:43:ad:07:7c:3d:44:a6:1d:de:a9:d1:
         70:44:cb:1b:84:4f:4a:23:7b:bf:0f:1f:39:80:f6:fc:f1:e3:
         e7:80:b4:3c:cc:f9:6e:0b:df:7f:f0:88:83:a0:e7:37:b9:0d:
         0a:05:cf:54:80:3a:e5:0e:f2:ea:e8:01:91:2f:42:0d:14:bd:
         14:ae:85:48:2b:48:4d:2f:d0:19:ee:98:7d:11:cd:23:5b:12:
         19:bf:84:aa:f6:b9:25:b3:22:59:6e:26:3d:79:96:4c:98:12:
         05:aa:2f:e3:c8:1c:82:ff:d1:d3:70:77:3d:5e:d5:e3:30:d3:
         ff:6d:54:e9:95:43:52:c8:92:75:5b:18:9b:80:16:a0:1e:c6:
         2a:0e:5d:53:63:24:e3:e2:77:5e:9e:a4:a6:ee:a5:9b:f1:f9:
         37:9e:13:f4:52:fd:51:ef:10:32:44:f7:4a:f4:86:4e:30:dc:
         d8:85:0d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:37:16 2025 by rpki-client