Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/65-iQvz8w7uLWyPJ_e7-89W9ENY.roa
File:                     65-iQvz8w7uLWyPJ_e7-89W9ENY.roa (raw, json)
Hash identifier:          cfRYT+FXyOTc2h4laNfxt3jD9llreiQ9XHG8WdghxC8=
Subject key identifier:   EB:9F:A2:42:FC:FC:C3:BB:8B:5B:23:C9:FD:EE:FE:F3:D5:BD:10:D6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3934
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/65-iQvz8w7uLWyPJ_e7-89W9ENY.roa
Signing time:             Fri 22 Aug 2025 08:46:04 +0000
ROA not before:           Fri 22 Aug 2025 08:46:04 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        123.194.205.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14644 (0x3934)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:46:04 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EB9FA242FCFCC3BB8B5B23C9FDEEFEF3D5BD10D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:b9:5d:57:63:aa:70:7d:47:15:6d:a9:e3:
                    e2:aa:b3:f1:5c:6f:b4:b5:10:0e:1b:4a:16:04:bd:
                    18:36:1d:8b:a2:d3:58:1d:ba:a2:63:42:6b:52:10:
                    fd:92:97:9a:42:68:df:66:61:d6:74:9e:ea:27:25:
                    47:38:88:57:e0:61:d8:9a:6d:f0:6a:07:c1:14:e7:
                    33:af:35:65:af:73:92:64:d7:3d:21:b7:c7:9a:63:
                    89:c2:47:51:69:c1:1e:87:9a:43:77:4e:8d:c8:4f:
                    0d:2a:2f:f7:b8:14:cb:4d:4d:dd:59:45:b5:46:04:
                    98:e8:6f:56:1c:ec:d1:32:39:82:b2:00:e7:e0:31:
                    06:38:1b:ad:87:c2:81:4d:90:5f:09:7b:06:b3:9a:
                    71:84:1e:f3:16:a7:2b:a7:5c:16:43:b8:3c:66:66:
                    7b:c4:e2:b7:36:1d:59:50:94:7c:e4:39:57:dd:d8:
                    3f:af:ae:da:49:39:21:4e:88:4b:16:bf:17:82:84:
                    34:71:ec:49:62:f6:1d:d0:ed:fd:2c:be:40:b6:60:
                    bd:0b:8b:91:aa:8f:06:cd:64:d5:10:f8:c8:0a:0f:
                    51:e1:f8:c5:ce:14:fa:63:de:ac:1a:29:50:b4:84:
                    1d:82:2b:27:1e:97:fa:9f:bb:0c:1e:0a:8b:3a:ca:
                    d2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9F:A2:42:FC:FC:C3:BB:8B:5B:23:C9:FD:EE:FE:F3:D5:BD:10:D6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/65-iQvz8w7uLWyPJ_e7-89W9ENY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.205.64/26

    Signature Algorithm: sha256WithRSAEncryption
         56:d6:e3:e2:a8:32:d1:52:c4:72:e2:a2:d3:c5:6c:e8:a7:53:
         80:f9:9f:0f:a1:10:12:7f:d2:6e:fd:d9:2f:7b:4e:2c:b0:26:
         bf:9e:86:e4:09:9e:7f:b9:b3:5f:3a:84:ed:29:af:ca:bf:d1:
         00:a8:29:40:93:f0:25:66:52:a7:24:e2:47:73:77:9b:62:96:
         a7:46:0f:65:f3:4d:e5:0e:2c:5e:a9:50:d7:dc:11:46:d0:59:
         83:ea:5e:97:39:23:78:06:39:a3:22:e4:7e:1c:1c:cd:f8:bd:
         e6:8d:bf:3b:f9:1f:59:03:6a:26:28:c1:61:0e:69:2a:65:90:
         2e:a1:3c:1a:24:69:73:db:83:7a:12:13:45:39:e0:b0:9c:b7:
         4b:75:4d:cf:72:14:c4:96:05:0d:09:29:1c:40:cc:6a:82:c2:
         6d:75:93:50:81:17:cf:f1:d0:06:12:a8:38:fb:96:e2:2a:ca:
         79:64:e5:cd:0a:71:16:d7:65:68:fa:70:28:31:fe:ad:a6:43:
         f7:9a:53:21:9e:e2:34:b7:8e:e9:f5:6d:9a:72:f1:0c:b0:b7:
         6d:27:d4:63:a5:16:76:c3:29:8d:b5:b8:fc:f6:ba:91:57:93:
         2f:1f:bb:4f:69:62:10:2b:48:54:31:dc:e2:63:02:ce:10:05:
         cf:ea:61:56
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICOTQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw
ODQ2MDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVCOUZBMjQyRkNGQ0Mz
QkI4QjVCMjNDOUZERUVGRUYzRDVCRDEwRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB5LldV2OqcH1HFW2p4+Kqs/Fcb7S1EA4bShYEvRg2HYui01gd
uqJjQmtSEP2Sl5pCaN9mYdZ0nuonJUc4iFfgYdiabfBqB8EU5zOvNWWvc5Jk1z0h
t8eaY4nCR1FpwR6HmkN3To3ITw0qL/e4FMtNTd1ZRbVGBJjob1Yc7NEyOYKyAOfg
MQY4G62HwoFNkF8JewazmnGEHvMWpyunXBZDuDxmZnvE4rc2HVlQlHzkOVfd2D+v
rtpJOSFOiEsWvxeChDRx7Eli9h3Q7f0svkC2YL0Li5GqjwbNZNUQ+MgKD1Hh+MXO
FPpj3qwaKVC0hB2CKycel/qfuwweCos6ytJjAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU65+iQvz8w7uLWyPJ/e7+89W9ENYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzY1LWlRdno4dzd1TFd5UEpf
ZTctODlXOUVOWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7
ws1AMA0GCSqGSIb3DQEBCwUAA4IBAQBW1uPiqDLRUsRy4qLTxWzop1OA+Z8PoRAS
f9Ju/dkve04ssCa/nobkCZ5/ubNfOoTtKa/Kv9EAqClAk/AlZlKnJOJHc3ebYpan
Rg9l803lDixeqVDX3BFG0FmD6l6XOSN4BjmjIuR+HBzN+L3mjb87+R9ZA2omKMFh
DmkqZZAuoTwaJGlz24N6EhNFOeCwnLdLdU3PchTElgUNCSkcQMxqgsJtdZNQgRfP
8dAGEqg4+5biKsp5ZOXNCnEW12Vo+nAoMf6tpkP3mlMhnuI0t47p9W2acvEMsLdt
J9RjpRZ2wymNtbj89rqRV5MvH7tPaWIQK0hUMdziYwLOEAXP6mFW
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:29:31 2025 by rpki-client