Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/uLTNOJIemD3aHYLSJoFdvNDEGLc.roa
File:                     uLTNOJIemD3aHYLSJoFdvNDEGLc.roa (raw, json)
Hash identifier:          Jt1yihpHLV17ImABU3/mfNQTm+RuH7QFzbpaNWBjcEc=
Subject key identifier:   B8:B4:CD:38:92:1E:98:3D:DA:1D:82:D2:26:81:5D:BC:D0:C4:18:B7
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       127F
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/uLTNOJIemD3aHYLSJoFdvNDEGLc.roa
Signing time:             Fri 22 Aug 2025 08:49:24 +0000
ROA not before:           Fri 22 Aug 2025 08:49:24 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17809
IP address blocks:        113.61.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4735 (0x127f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Aug 22 08:49:24 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B8B4CD38921E983DDA1D82D226815DBCD0C418B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:14:d0:49:41:4f:60:7e:1f:24:29:8c:67:
                    17:99:35:4b:f0:78:d3:08:ff:ea:7b:ab:53:cc:6b:
                    64:2a:28:4d:6a:52:79:ae:d1:7a:ad:6f:b3:12:b6:
                    76:df:7f:c1:11:ad:de:ce:29:41:84:a9:bf:7e:4f:
                    ac:60:26:12:39:47:7c:72:70:10:1f:7a:1d:90:93:
                    41:5a:5b:4d:08:f1:e8:87:28:37:a2:2a:d9:dc:c0:
                    a8:c7:73:f1:30:03:55:d6:d0:de:7b:19:77:3d:d9:
                    e6:f0:58:bf:3d:98:09:f8:90:b5:0d:00:91:eb:b2:
                    a5:9f:bb:e8:05:d8:42:51:47:e5:8a:8f:ed:b6:25:
                    3f:45:41:63:81:6f:0d:5e:1f:6b:1d:83:da:34:ab:
                    e6:14:db:69:c9:d2:ba:1d:2f:4f:f4:9b:e2:8b:f6:
                    0d:95:66:0c:69:58:a8:f0:eb:ed:59:da:7a:64:2a:
                    f0:8b:da:4b:91:cb:6a:4d:ae:1d:86:63:3e:64:b3:
                    e9:2a:70:bd:bf:3b:44:86:2b:bc:ec:9f:4d:14:5e:
                    bc:4e:5c:57:ff:f7:bc:05:71:45:c9:8e:69:1d:9a:
                    27:df:df:0a:5f:02:f4:b9:f9:2c:46:43:72:f2:d7:
                    df:de:78:65:bd:3d:92:62:b2:f4:63:0e:1e:b3:76:
                    ce:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B4:CD:38:92:1E:98:3D:DA:1D:82:D2:26:81:5D:BC:D0:C4:18:B7
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/uLTNOJIemD3aHYLSJoFdvNDEGLc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:67:c6:a1:b1:9b:e8:c2:7d:00:fb:50:02:e5:41:f9:c6:56:
         ce:20:e0:0a:ab:fb:c6:78:7e:c2:0c:6c:13:4e:3b:30:a2:fc:
         cc:b3:1f:a6:5a:11:da:af:c5:e4:73:b6:1f:9e:0c:8b:cb:02:
         20:8b:5f:be:79:2a:d1:b5:81:88:26:ba:6f:a8:11:9c:09:b2:
         4b:25:b1:61:3d:ef:48:7e:ab:24:51:1b:cd:04:52:a6:b8:ab:
         09:26:9f:5c:05:82:2a:1a:48:59:96:f6:b6:94:4a:14:56:34:
         03:f5:ba:77:96:7f:59:85:90:c9:ee:fc:39:26:b0:ef:68:ac:
         37:c5:3f:48:a1:8a:7d:8e:87:99:b2:15:85:64:2a:d6:10:0e:
         a1:ef:33:0f:39:9b:78:c6:ab:84:19:e3:5a:5a:14:28:dd:53:
         af:72:79:80:a1:d6:5a:0c:03:42:74:64:44:08:64:77:f2:39:
         ba:4f:25:22:ea:f9:03:96:bb:a6:58:68:9d:b7:df:b6:86:e0:
         1e:d8:94:9d:bb:80:69:a1:ea:8b:0f:4c:cb:6e:34:36:8d:59:
         76:08:6b:94:2a:bd:e4:12:a4:6e:0f:d1:0c:ab:f5:36:9f:4e:
         03:71:39:97:48:d5:6f:a5:3c:33:0b:85:8d:5f:8b:69:ac:95:
         b6:db:75:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:17:49 2025 by rpki-client