Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/fql3pCEl7ULJguVjTNPDq_OFAUQ.roa
File:                     fql3pCEl7ULJguVjTNPDq_OFAUQ.roa (raw, json)
Hash identifier:          2yv2t18F59r0fVCQw2b3bh7O3HXM/aWo868iLTis/hQ=
Subject key identifier:   7E:A9:77:A4:21:25:ED:42:C9:82:E5:63:4C:D3:C3:AB:F3:85:01:44
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       1278
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/fql3pCEl7ULJguVjTNPDq_OFAUQ.roa
Signing time:             Fri 22 Aug 2025 08:49:22 +0000
ROA not before:           Fri 22 Aug 2025 08:49:22 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17809
IP address blocks:        113.61.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4728 (0x1278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Aug 22 08:49:22 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=7EA977A42125ED42C982E5634CD3C3ABF3850144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:18:99:ea:a4:fd:8d:af:90:59:5f:c7:03:76:
                    d6:0e:61:a0:44:56:a8:58:10:5a:e0:e7:7c:0a:53:
                    32:3b:2f:5a:04:f0:02:a8:0a:70:2e:1c:18:14:3b:
                    93:66:d4:bc:2a:26:7c:ea:5c:b4:ce:5e:96:a5:ce:
                    fa:f2:f9:7d:f6:38:b3:4b:eb:20:92:91:5a:84:8a:
                    89:9d:f6:4f:53:fc:7c:d3:41:af:5b:a2:66:18:9d:
                    b3:b9:3b:0c:de:37:d7:3f:2f:a3:fc:a1:b3:b1:97:
                    78:ea:55:08:b6:c4:04:c1:dd:4c:b1:37:b5:a9:6b:
                    ef:69:11:33:b7:d6:58:d6:20:fe:ba:93:7c:ab:6b:
                    52:71:46:22:12:28:b0:e4:aa:4f:66:18:fc:bd:df:
                    d8:65:95:91:3c:42:41:2b:67:15:48:77:4a:f9:46:
                    62:ff:5d:6d:2b:f8:aa:47:9e:d0:e1:41:4b:df:e4:
                    82:95:4e:16:e6:2f:91:6e:a9:40:a2:68:19:ed:99:
                    52:a4:52:90:8e:95:ed:25:e8:c1:31:e3:3f:9b:d5:
                    fd:9a:72:90:fd:e4:bd:43:50:8a:62:5b:f8:2f:3c:
                    7f:39:01:3a:10:c6:55:34:73:4f:d0:91:00:6f:8b:
                    87:65:3a:a3:90:a6:cf:64:61:e1:4c:3a:61:b6:61:
                    2c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A9:77:A4:21:25:ED:42:C9:82:E5:63:4C:D3:C3:AB:F3:85:01:44
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/fql3pCEl7ULJguVjTNPDq_OFAUQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:1f:a5:ee:9d:e6:77:41:6b:c8:6a:88:d6:df:0a:c5:a4:c0:
         1d:b0:82:a4:ab:d8:79:88:a2:71:78:cb:8c:c8:c4:11:26:ae:
         2b:03:58:44:48:46:c7:f8:a1:9b:1d:ae:90:4d:e4:bc:fa:9b:
         0e:f1:61:04:d8:a4:82:f7:8c:12:48:3d:36:67:2e:fb:1b:04:
         5d:b6:30:ee:bf:35:44:1e:1c:1d:08:31:f7:26:b3:9d:c9:00:
         58:d3:8e:d3:34:03:c5:35:6b:73:cf:d2:e5:2e:30:b8:ef:00:
         cd:01:df:e4:f2:93:8a:ef:59:ad:22:a2:19:44:f7:a4:33:df:
         be:40:7b:f6:0c:10:a4:48:e4:bf:1b:7b:5c:fa:28:5d:a1:6e:
         4c:96:36:a3:86:63:c3:9a:9f:c1:b9:2c:93:ca:ea:ec:ee:dc:
         bb:4a:31:67:71:82:15:ff:83:40:7b:1b:2f:ec:69:f8:04:97:
         e8:ea:b0:c5:25:40:91:42:44:87:19:d5:e9:92:0b:d1:a4:65:
         a6:bb:c5:dc:2d:60:d0:fc:25:dd:96:8f:d1:89:ad:7c:05:34:
         b8:45:72:4d:98:f7:2e:06:2b:21:9e:ad:20:c5:fe:bf:b1:8c:
         43:2c:72:48:42:0d:02:4a:ea:37:90:d7:72:c6:47:a7:b5:01:
         61:e7:23:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:16:30 2025 by rpki-client