Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FpF-Iy2QX1Aa9w1Ez_eQMddqAzk.roa
File:                     FpF-Iy2QX1Aa9w1Ez_eQMddqAzk.roa (raw, json)
Hash identifier:          jRl9U5ucKFRga7R+G7EywnpDKg5oheResVnmIL/8E0M=
Subject key identifier:   16:91:7E:23:2D:90:5F:50:1A:F7:0D:44:CF:F7:90:31:D7:6A:03:39
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3842
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FpF-Iy2QX1Aa9w1Ez_eQMddqAzk.roa
Signing time:             Fri 22 Aug 2025 08:45:06 +0000
ROA not before:           Fri 22 Aug 2025 08:45:06 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        118.232.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14402 (0x3842)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:45:06 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=16917E232D905F501AF70D44CFF79031D76A0339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:d6:8b:73:4e:b6:94:a3:99:af:bd:03:34:
                    c5:4e:d0:b2:cc:fb:e9:fe:bc:21:e1:6c:65:73:7f:
                    9b:a6:51:e1:6c:63:a3:9f:31:fe:d0:2e:3f:5b:b8:
                    48:40:26:0e:d3:1a:cb:0e:b4:5f:d1:82:c0:5b:e0:
                    4b:90:95:89:8d:14:82:7f:f4:1a:15:1c:73:3c:d0:
                    70:b8:c0:b7:31:d5:9c:7b:b3:5d:fc:9a:3a:c6:49:
                    2e:6c:68:4a:f1:cf:dc:7b:a4:c9:36:5d:33:55:8e:
                    ca:20:d3:31:d5:a7:a6:e5:f1:98:55:0a:05:83:8c:
                    53:7e:7b:0a:c9:72:9f:e0:51:d4:45:0f:ff:d9:ff:
                    8d:ef:68:74:55:80:41:a0:f5:0e:6d:07:eb:9e:1f:
                    5a:de:30:ce:2a:f3:42:80:f4:ed:1b:d9:82:2b:03:
                    0d:16:fb:0d:5a:cb:bf:b1:f7:30:8c:66:eb:70:55:
                    33:4f:dd:a8:b5:aa:c0:2f:be:10:ec:e1:df:7a:df:
                    5d:21:0e:7b:8b:9f:88:db:33:cf:d0:df:20:fd:1e:
                    57:32:73:95:97:d1:a6:ce:e4:35:ef:46:09:fe:f8:
                    b4:da:7b:d5:bd:a4:57:d7:61:92:7e:84:da:d8:8c:
                    f0:f4:f5:06:ba:fb:8e:54:36:3b:f0:02:d0:e0:04:
                    15:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:91:7E:23:2D:90:5F:50:1A:F7:0D:44:CF:F7:90:31:D7:6A:03:39
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FpF-Iy2QX1Aa9w1Ez_eQMddqAzk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:29:fd:27:b1:f8:64:f4:bd:ea:20:ba:16:d1:5a:98:e1:05:
         6c:03:76:e9:33:de:39:96:11:80:90:e6:2d:94:1e:31:c5:d4:
         63:41:b3:ac:c7:58:4f:57:35:73:55:e7:9c:40:24:46:62:6e:
         cc:5d:32:64:6c:de:f3:3c:0f:d6:fc:16:17:74:bd:a3:a6:23:
         5c:57:a3:65:d4:37:07:5b:37:d8:57:a8:82:3f:96:f7:68:d9:
         33:04:c0:8d:3e:ea:37:c0:0e:eb:18:84:a3:f0:65:49:c2:65:
         19:a9:23:55:24:40:e5:ba:1c:7c:aa:4d:d5:bc:ed:f6:80:99:
         96:31:b3:cd:48:06:81:d0:4c:db:b7:36:da:e6:34:aa:48:9c:
         d1:50:1e:94:f1:e5:45:7d:92:82:74:5e:ca:4b:65:8e:2d:56:
         97:53:88:83:3d:8e:1b:1b:d0:c8:e4:90:13:2f:de:d4:62:cd:
         cb:ea:70:23:78:e6:a0:c5:72:28:57:f5:8a:08:74:e8:d8:8b:
         da:e9:93:64:49:ef:43:fd:a2:ee:10:88:83:4b:61:3d:b4:40:
         5b:34:d1:72:75:ef:65:4c:94:b4:b8:06:e5:a8:69:2b:12:76:
         cf:86:46:40:f3:9e:20:bc:67:04:1a:de:96:96:0b:c2:96:15:
         8e:3f:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:34:05 2025 by rpki-client