Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6k6T_aY4rhgOAzluV1K0NW-6yl8.roa
File:                     6k6T_aY4rhgOAzluV1K0NW-6yl8.roa (raw, json)
Hash identifier:          08LHd50UyP2lPaB3303Fl/47SJjWz540irrpt8Yarow=
Subject key identifier:   EA:4E:93:FD:A6:38:AE:18:0E:03:39:6E:57:52:B4:35:6F:BA:CA:5F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3B20
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6k6T_aY4rhgOAzluV1K0NW-6yl8.roa
Signing time:             Fri 22 Aug 2025 08:48:05 +0000
ROA not before:           Fri 22 Aug 2025 08:48:05 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        123.193.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15136 (0x3b20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:48:05 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EA4E93FDA638AE180E03396E5752B4356FBACA5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c7:72:e9:46:bf:ec:a4:f6:a6:ec:8d:7d:f5:
                    81:f7:3d:61:52:27:56:ca:8c:f5:52:63:78:17:a0:
                    ea:e8:40:a1:7e:95:fb:4e:22:df:7b:3b:a0:38:59:
                    c9:6c:ea:fa:5f:e0:08:dd:18:f2:f9:8f:f0:c5:a8:
                    77:84:0a:6f:e2:78:d0:18:a5:a7:4d:e9:2d:3a:fd:
                    af:0f:44:a9:e0:f2:c6:d9:2c:22:0f:43:10:9a:1a:
                    a8:ea:70:e1:33:c1:38:5e:24:ac:01:6c:08:ab:3b:
                    72:5a:20:b0:91:a0:30:ab:c8:3a:48:f2:d2:c6:60:
                    3c:6a:44:31:10:a6:ce:23:b8:94:2f:2b:4b:48:04:
                    bf:e4:e7:c0:f5:9a:a9:5f:f9:ab:b4:48:21:bc:ab:
                    5e:fa:d7:a6:77:cd:dd:e1:33:bf:41:c1:11:34:95:
                    b8:97:7e:9c:09:4f:e0:30:02:f5:00:ad:ed:87:9f:
                    36:fe:42:c8:2a:25:f5:be:8f:26:c6:ea:ac:99:3a:
                    97:53:72:88:d2:6b:3b:45:65:28:f5:5b:f2:15:f9:
                    0b:36:b7:db:33:fc:a6:b5:46:16:5f:37:04:ba:64:
                    a1:e8:15:c6:80:69:4b:dd:f1:9b:bc:bc:c6:39:10:
                    f2:7a:e6:a2:21:ae:35:e1:46:b7:35:e2:60:65:97:
                    c3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4E:93:FD:A6:38:AE:18:0E:03:39:6E:57:52:B4:35:6F:BA:CA:5F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6k6T_aY4rhgOAzluV1K0NW-6yl8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:f0:d3:82:39:ba:be:f1:56:00:e0:0d:96:e8:ee:37:bc:eb:
         41:c6:c7:e3:cf:3d:f9:9f:a7:0d:fb:98:44:88:e0:fe:54:04:
         f6:30:36:12:f9:d9:14:03:2e:aa:7d:d2:82:d8:99:6b:67:26:
         b0:e7:52:14:1b:05:e6:6b:fe:6b:08:c8:d4:b6:89:0c:66:ab:
         ed:38:d5:5d:3c:d2:33:1c:17:64:48:b8:4e:21:9e:1b:49:c0:
         c6:5c:0d:5e:1d:b7:f5:86:f1:56:99:91:07:b8:d1:b7:3b:c8:
         2f:ce:53:0c:7f:d5:c7:c0:56:15:2d:2b:3d:76:04:5b:e7:a1:
         16:38:12:e4:27:14:44:0e:af:c2:53:4b:89:51:11:9b:c8:c5:
         d3:55:e4:b9:79:ea:71:5e:38:3c:e0:f2:30:39:b9:52:61:54:
         80:f2:60:66:f3:69:f5:42:49:fe:1e:f6:78:d0:41:d8:f9:9d:
         04:fb:65:56:42:e1:75:d7:99:a2:0e:96:32:28:e9:4e:cb:b3:
         a9:91:73:43:43:c0:d9:a6:52:00:63:1d:eb:d6:22:7a:32:66:
         f0:0c:de:e1:5f:50:1e:e1:bc:c4:01:43:b2:0b:5f:9a:eb:a0:
         45:dc:76:76:43:4e:ff:0e:cc:01:b8:cb:05:f7:2f:07:af:0a:
         2c:43:a8:24
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICOyAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw
ODQ4MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVBNEU5M0ZEQTYzOEFF
MTgwRTAzMzk2RTU3NTJCNDM1NkZCQUNBNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChx3LpRr/spPam7I199YH3PWFSJ1bKjPVSY3gXoOroQKF+lftO
It97O6A4Wcls6vpf4AjdGPL5j/DFqHeECm/ieNAYpadN6S06/a8PRKng8sbZLCIP
QxCaGqjqcOEzwTheJKwBbAirO3JaILCRoDCryDpI8tLGYDxqRDEQps4juJQvK0tI
BL/k58D1mqlf+au0SCG8q17616Z3zd3hM79BwRE0lbiXfpwJT+AwAvUAre2Hnzb+
QsgqJfW+jybG6qyZOpdTcojSaztFZSj1W/IV+Qs2t9sz/Ka1RhZfNwS6ZKHoFcaA
aUvd8Zu8vMY5EPJ65qIhrjXhRrc14mBll8M3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6k6T/aY4rhgOAzluV1K0NW+6yl8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZrNlRfYVk0cmhnT0F6bHVW
MUswTlctNnlsOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wYwwDQYJKoZIhvcNAQELBQADggEBACzw04I5ur7xVgDgDZbo7je860HGx+PPPfmf
pw37mESI4P5UBPYwNhL52RQDLqp90oLYmWtnJrDnUhQbBeZr/msIyNS2iQxmq+04
1V080jMcF2RIuE4hnhtJwMZcDV4dt/WG8VaZkQe40bc7yC/OUwx/1cfAVhUtKz12
BFvnoRY4EuQnFEQOr8JTS4lREZvIxdNV5Ll56nFeODzg8jA5uVJhVIDyYGbzafVC
Sf4e9njQQdj5nQT7ZVZC4XXXmaIOljIo6U7Ls6mRc0NDwNmmUgBjHevWInoyZvAM
3uFfUB7hvMQBQ7ILX5rroEXcdnZDTv8OzAG4ywX3LwevCixDqCQ=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:33:16 2025 by rpki-client