Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/ADWuxx8ww8O098zIe3nj4S_uThY.roa
File:                     ADWuxx8ww8O098zIe3nj4S_uThY.roa (raw, json)
Hash identifier:          HG7UGiAcnqv+47lW3YUU2/Vd1zwD2s3+U3OJCRf1Ydc=
Subject key identifier:   00:35:AE:C7:1F:30:C3:C3:B4:F7:CC:C8:7B:79:E3:E1:2F:EE:4E:16
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       129A
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ADWuxx8ww8O098zIe3nj4S_uThY.roa
Signing time:             Fri 22 Aug 2025 08:49:30 +0000
ROA not before:           Fri 22 Aug 2025 08:49:30 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18046
IP address blocks:        119.15.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4762 (0x129a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Aug 22 08:49:30 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=0035AEC71F30C3C3B4F7CCC87B79E3E12FEE4E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:86:de:ab:e8:22:81:85:f4:57:60:f8:41:d0:
                    13:a2:97:2a:1d:48:be:a6:4e:3d:07:a8:88:6f:70:
                    09:6f:70:1a:95:55:96:4c:92:d3:14:b6:ae:92:06:
                    aa:e6:94:0f:62:c9:e0:bf:55:6f:06:7c:1e:6d:8b:
                    c9:bf:b6:0e:c1:26:26:69:26:ea:b9:a1:b8:06:41:
                    e6:5a:89:43:d6:e3:86:b7:7b:44:05:43:df:f5:70:
                    5d:cd:75:24:03:71:a2:00:8b:8a:df:fc:bf:db:a5:
                    5f:9f:70:60:25:2c:e7:28:74:1e:23:53:1b:03:2b:
                    98:37:6b:cc:5d:64:49:24:6f:1c:40:97:af:76:19:
                    5f:09:b3:1a:fe:b2:0c:2f:c8:40:1c:b1:b3:78:09:
                    30:37:5b:81:c1:7e:52:9e:bc:cc:3d:7c:32:eb:af:
                    04:07:03:9e:18:6c:1d:a3:24:86:ae:e0:b5:70:0b:
                    84:d9:e0:e5:b4:85:79:af:9e:da:46:84:c7:ff:f3:
                    44:39:3e:fe:e8:81:d2:a3:a6:bb:c7:bd:be:8f:07:
                    68:22:ea:58:cb:31:e4:c5:2b:ec:63:14:39:de:e2:
                    9a:4e:46:f6:1f:51:6c:bc:2e:56:d1:63:38:90:01:
                    56:ea:eb:17:f2:cb:83:8f:96:7c:44:a0:f9:b6:8c:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:35:AE:C7:1F:30:C3:C3:B4:F7:CC:C8:7B:79:E3:E1:2F:EE:4E:16
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ADWuxx8ww8O098zIe3nj4S_uThY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2c:7d:ba:86:77:4f:29:0d:bc:ea:9e:43:f7:fe:41:52:6b:55:
         df:e1:12:86:26:79:09:5d:6d:26:38:64:d9:bc:72:e6:f4:9f:
         56:09:8c:2a:d6:5b:a4:14:63:52:cf:85:21:59:cd:fe:1a:ad:
         1e:c4:8f:f8:c1:3d:d4:e0:4c:98:4f:c5:19:7b:4d:6f:ea:a4:
         99:1a:88:10:9a:f9:c6:6a:10:d0:12:19:81:c1:7c:dc:da:d6:
         14:af:7a:a5:65:e8:fe:25:27:ab:b8:e4:3c:34:4d:f7:d3:1e:
         65:2b:e0:5e:16:c4:e8:37:25:29:83:96:3b:65:bc:53:72:ba:
         0b:2e:65:58:0a:e6:4e:bc:54:68:4e:4a:3a:13:0e:a0:69:bf:
         cd:ec:32:00:bd:40:18:23:1b:9a:85:28:1b:d3:63:c9:05:59:
         91:63:78:b4:42:3c:49:91:97:e8:1c:ed:93:fe:6c:73:c4:b3:
         d5:49:70:6c:13:03:95:f2:a4:57:ad:6b:d8:31:21:4c:a1:b2:
         9b:eb:f1:39:3a:71:e6:d3:eb:0e:ae:e7:12:3b:f5:5c:6f:24:
         b7:4f:a4:e4:a1:0f:d5:78:da:c9:2b:64:4d:d1:ef:e2:53:a7:
         b6:7a:3e:85:8b:10:23:50:24:4b:ec:30:71:fa:ff:66:7a:54:
         da:47:d1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:15:14 2025 by rpki-client