Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/82uCVOofxBtVKJp6t_G-EuwZovE.roa
File:                     82uCVOofxBtVKJp6t_G-EuwZovE.roa (raw, json)
Hash identifier:          Eu+Hc1VhOHPo73OnPNxYBjxMJ0EQkbm13VRC1+1bK28=
Subject key identifier:   F3:6B:82:54:EA:1F:C4:1B:55:28:9A:7A:B7:F1:BE:12:EC:19:A2:F1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       39BE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/82uCVOofxBtVKJp6t_G-EuwZovE.roa
Signing time:             Fri 22 Aug 2025 08:46:36 +0000
ROA not before:           Fri 22 Aug 2025 08:46:36 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        180.177.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14782 (0x39be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:46:36 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F36B8254EA1FC41B55289A7AB7F1BE12EC19A2F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:27:7d:92:85:dd:22:13:70:79:3f:e0:b9:
                    34:6f:6f:ae:fa:b5:9a:71:3e:a6:cf:ad:cf:c0:3a:
                    13:3f:a5:01:f2:1a:65:f4:4c:8a:0e:0a:ad:5f:05:
                    aa:6d:21:9b:b7:53:d7:58:a6:65:74:6b:93:39:a2:
                    be:45:d7:2f:e3:4b:e3:ce:c0:cf:1f:18:52:76:69:
                    b0:8f:bb:0d:e9:f3:5d:87:56:32:d4:a7:f7:05:b0:
                    92:93:34:3b:10:c6:55:50:1b:a8:a8:fc:1f:76:b6:
                    0f:59:1f:37:7d:39:73:96:df:f2:c4:ad:0e:9a:d0:
                    68:d8:29:c8:33:71:92:0e:cc:8c:20:7e:5e:b4:97:
                    a9:0d:25:1a:8c:2e:49:11:d8:49:9e:00:78:ac:02:
                    d6:1f:02:ee:4a:28:9f:fb:98:96:a3:02:9a:f4:0d:
                    cd:86:3d:d1:42:e9:ce:c2:60:f9:8a:91:35:bc:68:
                    9b:33:6e:d9:31:73:c8:78:b5:e0:dd:9d:3d:bc:5d:
                    5b:2c:ea:1d:53:b4:9e:58:a8:7e:a7:2c:98:3f:4e:
                    50:63:69:32:45:36:17:85:c9:2f:86:76:33:83:60:
                    2a:73:ad:d4:29:02:36:cf:12:13:6e:0a:3a:f8:eb:
                    40:15:60:be:df:fa:e6:21:e8:a9:79:cf:fb:9f:f9:
                    54:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6B:82:54:EA:1F:C4:1B:55:28:9A:7A:B7:F1:BE:12:EC:19:A2:F1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/82uCVOofxBtVKJp6t_G-EuwZovE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:96:61:9d:73:84:f8:d5:61:8d:38:e8:90:67:7a:43:fb:97:
         07:d6:1f:11:4a:8a:ee:9f:21:80:b3:e6:3c:7f:33:87:b3:57:
         19:ac:d6:dd:d1:1e:32:0b:7f:b1:15:9e:8f:89:cd:b6:52:f8:
         49:af:6b:58:31:61:47:34:13:0b:8d:4f:01:95:73:f3:81:40:
         76:58:0d:51:bb:66:08:96:10:16:8b:98:7c:1b:77:82:cc:bb:
         a3:b4:60:41:36:dd:12:b2:5d:a3:d7:b9:79:31:d5:1a:68:fb:
         3f:f0:37:af:f1:c9:91:42:3f:5f:3a:07:73:79:5a:9a:78:58:
         fe:20:3b:66:5b:f6:1b:f3:57:9e:98:1c:bb:ba:93:63:0f:95:
         50:a9:7e:b6:de:6d:77:57:18:fe:bb:a0:01:13:b9:86:83:3c:
         f3:64:21:a2:c6:d2:35:c6:3c:26:0b:ae:13:16:5d:42:8c:fa:
         c6:ba:10:74:6c:5d:d4:24:93:67:91:4e:23:3f:e5:1f:68:96:
         8e:06:73:fb:fa:1a:ae:98:78:d1:6b:5a:a9:0b:71:0b:ac:4c:
         89:77:9e:04:5c:64:9a:b6:ab:2c:b8:18:ba:88:ef:15:ed:45:
         73:07:fa:12:59:65:d7:63:3d:f3:45:e2:49:cc:30:d4:19:e7:
         42:68:83:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:31:05 2025 by rpki-client