Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9inS3Vd66ICwOuXjMHOq5YjY894.roa
File:                     9inS3Vd66ICwOuXjMHOq5YjY894.roa (raw, json)
Hash identifier:          IDK8+fAkFHO4Onol5QNGfMbt6D+CeaDhT8mN9zoDZuY=
Subject key identifier:   F6:29:D2:DD:57:7A:E8:80:B0:3A:E5:E3:30:73:AA:E5:88:D8:F3:DE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3A6D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9inS3Vd66ICwOuXjMHOq5YjY894.roa
Signing time:             Fri 22 Aug 2025 08:47:20 +0000
ROA not before:           Fri 22 Aug 2025 08:47:20 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9924
IP address blocks:        118.232.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14957 (0x3a6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:47:20 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F629D2DD577AE880B03AE5E33073AAE588D8F3DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5c:80:8d:81:35:62:90:c8:ab:38:82:ea:5e:
                    92:0f:69:05:11:11:41:9e:2b:ae:ab:e7:2f:53:df:
                    d9:d4:8a:d0:ef:24:02:76:00:e0:29:86:d9:fc:6f:
                    a8:99:b6:8b:0c:26:ba:7c:bd:c0:60:64:c8:0c:df:
                    d2:cb:27:d5:7d:d7:6e:85:75:36:8c:d0:b6:66:41:
                    fd:ea:55:e9:fa:2a:cb:c8:86:e7:5a:8a:43:7c:8e:
                    67:8f:ad:ee:2d:c0:8d:72:1f:e9:42:fb:79:27:ce:
                    90:9e:98:a0:6e:df:0d:bc:dd:53:28:1c:a1:38:27:
                    e6:92:10:f1:fc:4e:b1:68:98:33:bd:d4:25:82:71:
                    24:b1:fb:c8:4c:7e:a4:82:4c:4f:e1:d8:3b:39:9e:
                    e5:28:b3:03:38:92:a7:79:28:2f:62:6d:14:09:01:
                    17:96:73:92:01:d2:22:0d:09:e7:9f:78:50:69:72:
                    d2:82:6c:4d:40:6e:b9:8b:aa:87:8a:7a:ed:72:e8:
                    6c:60:be:aa:a1:fb:96:44:b3:a9:ec:20:95:65:74:
                    e6:93:8b:8a:33:f7:7a:4c:04:4e:b0:3c:43:5b:80:
                    a1:f7:50:75:22:18:88:62:9a:b5:0f:b1:4d:b1:e7:
                    84:f2:ba:91:7c:b8:da:b5:d2:5f:e1:6a:3a:89:a7:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:29:D2:DD:57:7A:E8:80:B0:3A:E5:E3:30:73:AA:E5:88:D8:F3:DE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9inS3Vd66ICwOuXjMHOq5YjY894.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         51:de:86:1f:2f:4e:2b:0e:43:ec:a4:41:89:da:50:34:05:65:
         a1:6d:6b:de:7f:b7:2c:04:dd:ee:66:59:7a:eb:c3:2f:7a:6e:
         de:89:4a:03:d1:fd:99:5d:e6:d5:92:04:ca:5b:7a:2c:0c:77:
         c5:6a:62:5b:63:b7:36:8b:e6:24:45:2e:a2:01:ca:12:33:d6:
         1f:e8:39:24:33:af:a5:80:06:10:89:0f:da:79:ca:51:3b:28:
         52:31:a6:d9:39:bf:12:3f:b0:1e:25:73:73:c9:66:99:4e:ab:
         77:9f:b4:52:38:5e:51:ad:40:b0:3d:13:78:ed:6d:97:9c:64:
         ab:86:cd:53:5f:98:35:25:28:a6:76:b5:a7:ea:09:0a:46:8e:
         ac:ef:b4:5b:14:d8:66:b8:f0:c2:b7:c1:4d:41:60:15:2b:51:
         34:35:86:85:7e:8c:aa:e9:f5:8e:eb:61:cb:ac:3c:64:81:cf:
         28:2d:79:7f:a2:dc:26:e7:8e:9c:12:ea:9d:51:f4:00:3b:8b:
         61:8d:0d:7a:dd:49:49:af:58:a3:7d:29:1c:49:47:59:bb:3b:
         cd:19:09:4b:29:40:14:59:97:a9:71:c0:0f:46:9d:9f:fa:60:
         4e:e5:c8:e4:74:7d:4f:ec:a1:5c:3d:7b:02:47:81:2d:db:a4:
         ce:84:4d:b0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICOm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw
ODQ3MjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY2MjlEMkRENTc3QUU4
ODBCMDNBRTVFMzMwNzNBQUU1ODhEOEYzREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtXICNgTVikMirOILqXpIPaQUREUGeK66r5y9T39nUitDvJAJ2
AOAphtn8b6iZtosMJrp8vcBgZMgM39LLJ9V9126FdTaM0LZmQf3qVen6KsvIhuda
ikN8jmePre4twI1yH+lC+3knzpCemKBu3w283VMoHKE4J+aSEPH8TrFomDO91CWC
cSSx+8hMfqSCTE/h2Ds5nuUoswM4kqd5KC9ibRQJAReWc5IB0iINCeefeFBpctKC
bE1AbrmLqoeKeu1y6Gxgvqqh+5ZEs6nsIJVldOaTi4oz93pMBE6wPENbgKH3UHUi
GIhimrUPsU2x54TyupF8uNq10l/hajqJpwrXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU9inS3Vd66ICwOuXjMHOq5YjY894wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzlpblMzVmQ2NklDd091WGpN
SE9xNVlqWTg5NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ2
6EAwDQYJKoZIhvcNAQELBQADggEBAFHehh8vTisOQ+ykQYnaUDQFZaFta95/tywE
3e5mWXrrwy96bt6JSgPR/Zld5tWSBMpbeiwMd8VqYltjtzaL5iRFLqIByhIz1h/o
OSQzr6WABhCJD9p5ylE7KFIxptk5vxI/sB4lc3PJZplOq3eftFI4XlGtQLA9E3jt
bZecZKuGzVNfmDUlKKZ2tafqCQpGjqzvtFsU2Ga48MK3wU1BYBUrUTQ1hoV+jKrp
9Y7rYcusPGSBzygteX+i3CbnjpwS6p1R9AA7i2GNDXrdSUmvWKN9KRxJR1m7O80Z
CUspQBRZl6lxwA9GnZ/6YE7lyOR0fU/soVw9ewJHgS3bpM6ETbA=
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:51 2025 by rpki-client