Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B1MFRPak5KKrWi8HsZrDAOrUvv4.roa
File:                     B1MFRPak5KKrWi8HsZrDAOrUvv4.roa (raw, json)
Hash identifier:          J3N1mUFH8AiB0OKnFGeVaToThoaGypLAX42kC+GMRcE=
Subject key identifier:   07:53:05:44:F6:A4:E4:A2:AB:5A:2F:07:B1:9A:C3:00:EA:D4:BE:FE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3A39
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B1MFRPak5KKrWi8HsZrDAOrUvv4.roa
Signing time:             Fri 22 Aug 2025 08:47:08 +0000
ROA not before:           Fri 22 Aug 2025 08:47:08 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        106.1.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14905 (0x3a39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:47:08 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=07530544F6A4E4A2AB5A2F07B19AC300EAD4BEFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:45:ea:c6:ab:51:4f:80:ec:70:b2:38:a5:
                    eb:df:1a:37:d3:91:46:35:bf:80:8b:cc:3e:5d:f2:
                    54:17:fa:5b:af:ba:b3:5e:43:ad:61:89:1e:9d:a0:
                    65:21:6c:a9:20:9d:ca:e1:27:52:9b:6f:e9:7f:9a:
                    55:c8:5b:68:b0:35:c6:96:cc:6d:86:f7:bc:0c:ed:
                    f4:ed:c8:9a:85:45:df:9b:4a:8c:d8:9a:c6:d6:17:
                    d2:bd:cf:f4:34:e0:fc:a8:65:55:c3:bb:93:e2:64:
                    ce:0d:81:61:32:85:0f:f0:c0:5c:5b:9f:90:31:4d:
                    b9:22:29:63:81:6a:49:23:98:8e:87:2c:ee:f4:10:
                    30:a4:b1:b0:fb:87:1a:12:32:76:ae:dc:ea:65:b6:
                    81:0f:4a:36:b6:21:ce:b8:1c:8f:e8:57:d9:e6:12:
                    2f:51:48:b2:c9:ba:65:7d:e8:2f:c9:e2:b5:5f:6e:
                    a5:66:f8:76:56:8f:b0:3c:d8:71:d4:34:00:bb:7b:
                    b4:c7:5e:cd:d6:30:26:31:64:97:55:87:55:d7:ab:
                    f5:f1:0e:6d:39:d5:96:17:60:b8:1f:ca:aa:3b:48:
                    99:b7:64:44:69:b9:41:9b:23:aa:74:e9:a9:db:03:
                    a1:89:d1:41:22:fb:fd:1c:80:36:92:8a:bb:e9:8c:
                    a9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:53:05:44:F6:A4:E4:A2:AB:5A:2F:07:B1:9A:C3:00:EA:D4:BE:FE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B1MFRPak5KKrWi8HsZrDAOrUvv4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:28:a3:83:14:70:be:57:db:c9:d5:43:66:2e:7b:47:fd:b1:
         c0:34:1d:ba:58:9a:9f:71:3a:9b:a1:54:3d:3b:ff:59:8d:45:
         9c:48:d3:37:6a:b2:bc:3e:fe:a2:a1:e1:99:cf:aa:79:df:99:
         9a:c4:0f:f5:32:d4:7f:5a:4f:d6:a5:03:7c:7f:ba:2a:8a:ce:
         66:30:2b:a7:38:5d:e8:88:33:14:31:13:9f:7f:2b:89:e5:aa:
         db:fb:58:72:f2:d6:24:a7:42:f5:9d:a3:78:cc:ee:10:ed:51:
         ee:86:35:23:c0:97:6f:e6:9e:2f:30:b9:87:03:da:86:8a:f4:
         3b:4a:2c:fc:1e:f1:a6:31:68:7a:b3:b0:b6:db:ac:e1:da:a6:
         b1:ca:39:8a:d9:fe:6e:31:17:e8:24:2f:cd:72:2e:68:ca:43:
         37:c5:e2:61:47:91:8c:66:41:b2:1f:7c:1c:56:a6:b3:44:40:
         d3:28:e1:00:3d:50:fd:5c:96:42:77:7f:d8:4f:72:b4:bd:fa:
         fd:4d:ad:41:7f:2f:52:6e:34:a1:64:de:bd:7a:63:bf:4f:dd:
         47:da:b2:ef:90:7c:60:dd:4a:76:00:92:dc:21:53:c9:69:4c:
         f0:81:1c:87:c7:fc:55:1d:07:0e:8a:16:7e:5a:16:0d:17:8d:
         30:7b:54:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:24:13 2025 by rpki-client