Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GY2IDo795Fqlp92cDRwTOJfGtxM.roa
File:                     GY2IDo795Fqlp92cDRwTOJfGtxM.roa (raw, json)
Hash identifier:          hYqzeUoRgClHqokAOXZVULdd5Wbq4YKVgwNh9CtyXAA=
Subject key identifier:   19:8D:88:0E:8E:FD:E4:5A:A5:A7:DD:9C:0D:1C:13:38:97:C6:B7:13
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3A93
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GY2IDo795Fqlp92cDRwTOJfGtxM.roa
Signing time:             Fri 22 Aug 2025 08:47:31 +0000
ROA not before:           Fri 22 Aug 2025 08:47:31 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9924
IP address blocks:        123.194.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14995 (0x3a93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:47:31 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=198D880E8EFDE45AA5A7DD9C0D1C133897C6B713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c3:0d:a4:89:2e:f8:ec:1c:44:70:45:31:90:
                    27:b7:c2:59:b6:4c:9c:b4:2e:e5:27:0e:ef:57:c7:
                    d6:76:8e:87:93:ac:01:e9:c3:79:51:8c:10:e1:56:
                    9a:2a:9c:e5:92:55:13:0f:7a:e8:d4:51:69:09:27:
                    ea:1f:2f:e0:f3:5b:46:5e:45:16:c3:bc:06:67:20:
                    eb:e5:4e:5b:4d:9d:4e:0d:39:1d:7b:15:22:2b:ac:
                    e9:10:75:89:27:f2:a0:30:94:43:14:ae:8e:78:14:
                    2a:4e:31:61:4c:2e:be:bd:fe:d9:f2:07:d4:7e:ff:
                    bd:4b:5b:dd:cc:1b:5d:75:38:20:a8:c1:50:39:72:
                    c5:80:2c:25:6a:ed:39:cb:a1:22:e6:97:1c:12:0d:
                    06:0f:ff:28:6b:1b:bc:a1:61:6d:0c:f0:85:63:3e:
                    27:2b:ce:bd:84:17:a8:ae:2a:05:0a:e6:73:b3:d2:
                    c2:ca:47:aa:5f:72:d4:54:f5:a3:98:0d:2b:e9:a3:
                    61:d9:97:2d:fe:f6:56:8c:9a:b7:1d:c4:3a:8c:9b:
                    00:1c:9b:5b:00:0f:d0:0a:01:e6:45:dc:74:e1:17:
                    01:31:a6:f4:6e:55:21:09:c9:d4:fb:f7:d5:d8:90:
                    be:e6:a7:d1:5a:da:a5:47:3f:a3:a7:4b:70:2d:ba:
                    5b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8D:88:0E:8E:FD:E4:5A:A5:A7:DD:9C:0D:1C:13:38:97:C6:B7:13
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GY2IDo795Fqlp92cDRwTOJfGtxM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8a:c2:f1:84:3e:e0:34:70:4a:89:f7:f7:f8:f6:f3:f8:3e:0c:
         ff:84:29:11:96:4b:bd:ad:f1:93:24:ea:ec:c1:6c:01:ae:29:
         3b:44:0d:32:2f:af:b9:db:69:7e:df:7d:e6:c1:af:38:02:6a:
         1f:58:c0:b4:01:fb:05:99:26:b4:b4:98:31:de:ff:a3:bb:f7:
         90:cd:ae:9b:ab:41:2f:1c:31:de:c4:67:34:d6:23:f8:2d:b8:
         a0:77:3b:c0:a2:77:b4:f5:bb:f5:5a:8a:1e:f8:f9:10:5d:40:
         6f:4d:a2:94:33:f7:37:10:57:87:dc:3d:fd:77:c6:61:80:ac:
         62:80:21:37:96:bb:64:09:82:67:e5:64:6c:5a:58:90:4c:48:
         89:99:23:15:cc:48:22:73:d1:e9:cd:34:a0:68:ce:03:22:11:
         a5:ec:2c:a6:b6:92:c8:df:70:30:f6:97:71:dc:16:7e:7d:45:
         0d:0c:b0:b8:79:5a:2f:8d:05:62:3b:9c:87:48:36:9e:87:b4:
         e9:ef:8a:bf:cd:2a:8f:f8:cf:69:fa:6f:28:8e:99:88:71:74:
         eb:87:e4:87:06:dc:01:22:8d:43:7c:48:ca:62:6c:c1:25:33:
         eb:35:7e:98:2e:47:d8:45:72:14:19:37:49:75:d9:e5:d0:c9:
         4e:18:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:34:00 2025 by rpki-client