Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GDtpFQV8r1lXaRcUa5gpiMW3060.roa
File:                     GDtpFQV8r1lXaRcUa5gpiMW3060.roa (raw, json)
Hash identifier:          KruR+OCHYu7zFmVDkEsHI4igupvaemFY4xrN+ZR3yaE=
Subject key identifier:   18:3B:69:15:05:7C:AF:59:57:69:17:14:6B:98:29:88:C5:B7:D3:AD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3A9D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GDtpFQV8r1lXaRcUa5gpiMW3060.roa
Signing time:             Fri 22 Aug 2025 08:47:33 +0000
ROA not before:           Fri 22 Aug 2025 08:47:33 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        123.192.144.128/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15005 (0x3a9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:47:33 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=183B6915057CAF59576917146B982988C5B7D3AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:33:ef:f6:d0:d9:00:9f:df:66:e9:12:2a:74:
                    57:67:e4:e9:2f:04:7d:7d:cf:4b:59:76:b8:bb:ee:
                    bd:ee:30:e5:fe:20:8a:3f:3a:18:b6:66:6b:a5:4c:
                    7a:a6:25:f8:88:95:fe:e1:4d:0e:7b:6f:7d:ac:e6:
                    eb:72:6a:9e:2e:d0:0e:4c:f2:6b:bc:03:d1:fe:b5:
                    d5:9c:9b:f2:35:49:a7:5e:c7:fa:d5:26:c6:1d:45:
                    59:72:42:4c:e3:30:b6:f7:98:b3:c8:de:3d:17:04:
                    94:53:b2:12:97:a5:4a:66:ad:f4:02:61:46:6b:08:
                    49:d7:2e:7b:3d:b0:36:46:e2:61:46:0b:c3:6d:62:
                    83:ab:88:88:a9:e4:01:c4:1f:44:37:c6:37:74:2c:
                    44:3b:af:88:d7:56:fd:1f:4e:05:b9:cd:32:96:69:
                    a3:0e:ee:bc:e9:05:18:f4:91:0a:76:1b:2a:1e:9d:
                    6c:ff:e1:f3:d3:66:57:74:79:fc:a9:1a:97:78:ee:
                    e3:2a:88:63:d4:6b:73:ed:4f:4b:da:df:0d:14:f9:
                    7b:52:11:8a:16:ac:df:b8:33:89:b0:85:4e:cd:80:
                    ed:07:84:c0:08:a2:24:76:ea:40:f7:13:5d:1a:87:
                    55:23:aa:3a:27:60:b1:aa:98:ac:61:d4:ab:1d:37:
                    4f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3B:69:15:05:7C:AF:59:57:69:17:14:6B:98:29:88:C5:B7:D3:AD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GDtpFQV8r1lXaRcUa5gpiMW3060.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.144.128/26

    Signature Algorithm: sha256WithRSAEncryption
         30:c9:f1:43:25:88:e1:4e:cf:e1:db:72:fc:59:f5:a5:98:82:
         c9:fe:34:67:9c:b6:bb:74:45:1c:58:9c:9b:63:ec:6b:60:2f:
         ee:2f:83:f5:ba:9e:46:ee:0a:6f:b7:65:60:4e:f9:49:ce:25:
         9c:87:9a:55:bc:92:58:55:a4:05:4b:7d:f8:62:d7:88:67:dc:
         35:aa:43:60:6c:3a:22:e7:6a:fb:d7:6a:60:01:f9:cc:69:01:
         d4:1f:c2:41:81:1b:42:74:a1:d0:7d:c3:98:b3:33:70:9d:4c:
         3d:51:4d:7f:62:e2:fe:1a:e9:23:7d:f8:5a:fc:1b:db:09:e4:
         7c:3d:c7:10:30:06:18:fc:9f:5d:5c:ca:c0:bc:64:ba:08:42:
         86:2a:55:1a:3c:e1:e5:57:f1:3f:f1:2d:08:e6:01:29:7f:82:
         9b:d5:1a:65:65:3b:3b:a9:2f:bd:58:c3:4f:d8:3a:ea:18:4e:
         74:cd:7d:d0:19:e3:3a:5d:aa:de:80:da:ba:87:58:46:2a:73:
         77:30:b3:98:e5:e4:54:16:fa:20:bb:06:f6:e5:27:21:a4:41:
         19:61:3f:be:95:30:7f:06:0c:5a:31:dd:35:3e:3b:16:45:8e:
         61:17:14:4d:71:bb:0a:6a:13:d6:3f:76:49:c2:42:91:75:a7:
         92:22:ce:a9
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICOp0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw
ODQ3MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE4M0I2OTE1MDU3Q0FG
NTk1NzY5MTcxNDZCOTgyOTg4QzVCN0QzQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrM+/20NkAn99m6RIqdFdn5OkvBH19z0tZdri77r3uMOX+IIo/
Ohi2ZmulTHqmJfiIlf7hTQ57b32s5utyap4u0A5M8mu8A9H+tdWcm/I1Sadex/rV
JsYdRVlyQkzjMLb3mLPI3j0XBJRTshKXpUpmrfQCYUZrCEnXLns9sDZG4mFGC8Nt
YoOriIip5AHEH0Q3xjd0LEQ7r4jXVv0fTgW5zTKWaaMO7rzpBRj0kQp2GyoenWz/
4fPTZld0efypGpd47uMqiGPUa3PtT0va3w0U+XtSEYoWrN+4M4mwhU7NgO0HhMAI
oiR26kD3E10ah1UjqjonYLGqmKxh1KsdN09LAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUGDtpFQV8r1lXaRcUa5gpiMW3060wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dEdHBGUVY4cjFsWGFSY1Vh
NWdwaU1XMzA2MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7
wJCAMA0GCSqGSIb3DQEBCwUAA4IBAQAwyfFDJYjhTs/h23L8WfWlmILJ/jRnnLa7
dEUcWJybY+xrYC/uL4P1up5G7gpvt2VgTvlJziWch5pVvJJYVaQFS334YteIZ9w1
qkNgbDoi52r712pgAfnMaQHUH8JBgRtCdKHQfcOYszNwnUw9UU1/YuL+Gukjffha
/BvbCeR8PccQMAYY/J9dXMrAvGS6CEKGKlUaPOHlV/E/8S0I5gEpf4Kb1RplZTs7
qS+9WMNP2DrqGE50zX3QGeM6XaregNq6h1hGKnN3MLOY5eRUFvoguwb25SchpEEZ
YT++lTB/BgxaMd01PjsWRY5hFxRNcbsKahPWP3ZJwkKRdaeSIs6p
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:29:37 2025 by rpki-client