Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1PB4wXsVH7KRcbiqYffEviL-m_k.roa
File:                     1PB4wXsVH7KRcbiqYffEviL-m_k.roa (raw, json)
Hash identifier:          bDy49EHDCrXRopBrSmXhhHct6e453L+E7RiJneF19Ug=
Subject key identifier:   D4:F0:78:C1:7B:15:1F:B2:91:71:B8:AA:61:F7:C4:BE:22:FE:9B:F9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       384F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1PB4wXsVH7KRcbiqYffEviL-m_k.roa
Signing time:             Fri 22 Aug 2025 08:45:10 +0000
ROA not before:           Fri 22 Aug 2025 08:45:10 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        106.1.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14415 (0x384f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:45:10 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D4F078C17B151FB29171B8AA61F7C4BE22FE9BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:7f:f5:e6:2c:b3:32:4d:d3:3a:ec:f2:47:
                    47:3c:55:bd:71:6b:92:4f:8c:86:47:2d:02:ed:a4:
                    04:3f:47:4f:a3:61:82:3d:1c:f2:1a:18:3a:99:ae:
                    b4:c6:13:9c:cc:4d:ef:f1:c0:4c:97:36:c9:5e:b8:
                    e3:e2:57:d6:3f:8c:9e:1d:24:04:c6:d9:0f:66:a6:
                    c5:00:46:14:fd:ed:d6:be:af:3d:a5:16:31:3d:64:
                    9d:12:d3:27:10:bd:d7:80:9c:35:a4:c0:52:03:29:
                    8b:9b:bf:1c:f6:5d:86:a6:88:b4:1d:21:a5:11:6a:
                    2f:fd:95:f5:c2:10:aa:7d:33:99:0a:c0:36:3c:3a:
                    ff:ba:1d:29:88:3f:a3:11:5a:01:5f:a9:81:08:7d:
                    6f:2c:c9:46:51:bc:2a:23:1e:66:4c:b0:dc:e3:0d:
                    18:f3:75:ee:22:4c:e9:0b:18:52:a0:65:cc:f7:a5:
                    10:3a:c6:35:86:9e:4b:7c:ad:42:a5:d4:62:95:fe:
                    5c:1c:25:61:05:ef:fa:6b:26:b2:18:6e:1a:21:c3:
                    17:16:a5:0e:41:6c:59:18:dd:85:0a:1c:2a:2e:6b:
                    f2:50:d1:80:0b:d9:a7:7f:c4:b8:d0:ce:54:f2:83:
                    de:23:55:12:40:eb:27:23:50:c0:6f:43:ef:1c:72:
                    67:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F0:78:C1:7B:15:1F:B2:91:71:B8:AA:61:F7:C4:BE:22:FE:9B:F9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1PB4wXsVH7KRcbiqYffEviL-m_k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:d5:a7:df:92:4f:71:e8:24:f7:e9:8d:e1:1f:60:fe:19:fd:
         bc:9c:8e:c2:ef:71:36:e7:e4:80:09:d2:03:22:a7:23:40:bd:
         06:d0:e0:54:66:46:67:3f:30:e6:a3:64:55:23:6a:b1:27:64:
         5c:b8:2b:13:9a:99:55:d1:b2:72:d7:f5:fc:52:41:53:2e:61:
         48:b3:f1:cc:02:ec:3c:68:a2:ca:67:14:8c:97:ed:9b:bd:49:
         8c:4f:bb:cc:64:64:7b:47:98:d3:48:ba:f6:1f:40:2d:24:24:
         62:a2:1d:8c:07:af:29:6d:6a:2e:bd:d6:5c:aa:06:5b:f3:ac:
         79:84:31:dc:a7:96:37:68:9e:1f:26:14:e8:87:ab:19:8f:bc:
         d5:d7:1b:0d:1b:06:0b:71:5c:75:56:a8:14:60:62:5a:fe:12:
         d3:8f:90:22:32:72:38:51:78:92:09:84:69:dd:8b:1d:77:3e:
         9b:38:b2:59:72:06:6e:e0:21:9b:31:7f:d4:67:bc:97:63:95:
         2d:1f:6d:35:29:31:0f:b8:61:f1:64:c1:a4:83:fe:1b:c3:84:
         79:00:74:87:1a:51:28:83:5a:c2:83:96:43:31:41:ab:1e:4f:
         eb:88:19:3e:6d:87:c5:67:05:27:eb:21:af:1b:9a:0a:32:7d:
         7a:d9:48:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:25:22 2025 by rpki-client