Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8IF25Czvs1FQ6FE2Eq-9P3mqWDg.roa
File:                     8IF25Czvs1FQ6FE2Eq-9P3mqWDg.roa (raw, json)
Hash identifier:          ARAMMoYbDt105m7+mgs6mwY8wD04es5VtJBucHkgL2c=
Subject key identifier:   F0:81:76:E4:2C:EF:B3:51:50:E8:51:36:12:AF:BD:3F:79:AA:58:38
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3A83
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8IF25Czvs1FQ6FE2Eq-9P3mqWDg.roa
Signing time:             Fri 22 Aug 2025 08:47:26 +0000
ROA not before:           Fri 22 Aug 2025 08:47:26 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        180.177.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14979 (0x3a83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:47:26 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F08176E42CEFB35150E8513612AFBD3F79AA5838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:86:83:37:fb:db:30:68:1e:6c:0c:b2:41:
                    72:8f:72:b3:b5:24:f6:b4:4c:7f:1b:cf:0d:63:5e:
                    54:7d:7e:0d:e2:dd:5a:4e:96:21:7c:82:c9:b2:63:
                    ba:12:46:db:b9:56:e8:30:0f:a3:71:17:53:52:bb:
                    9c:7a:13:37:73:39:66:68:f1:cc:94:55:d2:f1:ff:
                    57:33:79:28:9d:50:32:75:ea:4b:26:18:ef:6f:f2:
                    2b:4d:69:29:58:fd:b9:91:b3:bb:1f:8f:cd:9b:d1:
                    dc:81:b3:3a:e5:0d:91:e7:a8:43:5f:67:38:19:8c:
                    d7:aa:a2:3f:21:af:d9:6f:96:27:d4:47:98:a7:ae:
                    b6:c4:d3:61:b0:9a:b6:4c:12:e1:20:ec:e4:d6:26:
                    7d:3e:f2:f1:df:a7:7d:af:ad:a3:b7:aa:ef:ce:a2:
                    ab:6b:fd:59:cb:b6:39:f7:f8:48:89:f7:f5:4f:fd:
                    ea:2f:24:6e:b3:c8:1a:2f:9a:b1:59:c9:59:03:d7:
                    95:a8:b4:ae:4a:d7:dc:ec:97:1f:cc:ed:9e:41:e0:
                    bd:c4:b5:c5:3e:0c:08:07:cc:4d:70:84:c4:09:81:
                    0d:57:af:e1:b9:25:e0:4f:1c:1e:1a:c5:86:d9:a5:
                    a3:24:71:08:57:68:e5:a2:b1:ef:85:d5:12:45:2a:
                    38:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:81:76:E4:2C:EF:B3:51:50:E8:51:36:12:AF:BD:3F:79:AA:58:38
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8IF25Czvs1FQ6FE2Eq-9P3mqWDg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:51:5f:c7:f4:a8:91:82:cb:d8:77:89:45:b0:1d:2d:de:e8:
         13:7f:dc:74:8c:96:a7:d5:71:41:7e:60:78:90:aa:4a:3b:88:
         b9:b7:aa:b3:7f:61:61:6c:c4:c2:17:20:e5:f2:32:69:0b:4d:
         20:b2:9c:d4:95:21:7e:ef:b7:54:19:58:ad:a5:eb:78:d8:9d:
         65:39:51:bf:94:78:8c:d7:c7:7c:67:fb:07:33:d0:ed:e5:9a:
         5b:ff:56:16:e3:81:28:59:1a:3e:f5:3e:af:81:5c:10:71:b8:
         5c:92:99:fc:6b:92:ca:2f:1b:40:4c:df:50:89:7c:0d:66:1d:
         25:85:28:df:fb:de:26:ad:c0:17:99:52:29:94:34:e5:29:82:
         bb:63:14:d1:c6:41:8b:26:98:03:b1:8d:ff:f5:d1:5f:6e:41:
         f7:16:74:88:a9:5c:85:76:6f:90:46:17:f0:17:f8:dd:25:0e:
         1e:8e:10:fb:e6:ac:53:ea:4d:35:97:17:f7:8d:f4:f6:e2:4b:
         a8:74:1b:07:9c:14:b2:07:ba:d8:23:e9:fc:ff:bf:87:44:16:
         12:0b:aa:9a:7a:1e:98:35:97:11:b6:92:1b:43:85:ba:d5:a1:
         2e:47:cb:d3:a0:65:dc:8b:aa:f5:11:76:9e:67:e2:9f:54:21:
         16:2a:24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:48 2025 by rpki-client