Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IiFCqb0_UrVpVJdgx395-BR3EdE.roa
File:                     IiFCqb0_UrVpVJdgx395-BR3EdE.roa (raw, json)
Hash identifier:          SoAMP94qMSPWNpFwBvDroZAJxQZi6sIjUhsyNW/tgjY=
Subject key identifier:   22:21:42:A9:BD:3F:52:B5:69:54:97:60:C7:7F:79:F8:14:77:11:D1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       37F6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IiFCqb0_UrVpVJdgx395-BR3EdE.roa
Signing time:             Fri 22 Aug 2025 08:44:50 +0000
ROA not before:           Fri 22 Aug 2025 08:44:50 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        123.193.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14326 (0x37f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:44:50 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=222142A9BD3F52B569549760C77F79F8147711D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:ee:8b:dd:65:92:3a:60:db:7f:53:af:5b:
                    6f:26:a3:19:de:4d:d8:bd:95:87:c6:c2:38:2e:be:
                    be:f5:97:d2:84:69:38:bc:ab:4a:cd:f4:a6:28:77:
                    e3:e4:af:84:44:69:31:ea:01:13:05:40:31:ec:72:
                    01:ad:d7:d5:e4:33:a7:1e:c0:e2:81:cc:c3:31:de:
                    e7:53:50:9e:74:e4:f4:b5:11:61:3e:46:5f:d1:be:
                    f6:7a:e5:0a:c1:7a:4a:8f:de:03:0e:9c:4e:f3:ac:
                    ea:c3:39:60:84:92:32:6a:90:4c:9e:c8:f3:a5:a7:
                    cf:22:1d:ea:e7:72:64:3c:95:8c:a1:5d:79:00:a9:
                    81:35:cf:bf:f0:57:10:84:05:f9:5d:f6:56:37:96:
                    ba:a3:fc:09:cf:37:78:b1:0f:01:98:5a:fa:4e:1e:
                    fa:c9:b6:e9:48:0f:6c:8c:9c:51:0e:78:2d:a4:6f:
                    c1:cd:94:85:ab:34:d6:5b:cf:c2:5e:84:f9:96:ce:
                    99:f4:15:6e:4e:ff:b9:1b:dc:4a:cc:f0:e2:6d:89:
                    6a:89:62:d8:44:e7:55:d9:f0:08:a8:f3:a0:c8:cb:
                    58:69:92:ae:cd:45:cb:f3:4a:b0:11:d7:f5:79:bd:
                    fb:1a:87:0f:cc:78:87:32:41:c0:4d:20:74:00:7c:
                    63:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:21:42:A9:BD:3F:52:B5:69:54:97:60:C7:7F:79:F8:14:77:11:D1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IiFCqb0_UrVpVJdgx395-BR3EdE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:12:13:f3:88:ab:d1:ba:74:43:8b:61:81:a4:60:45:51:dd:
         41:00:06:18:cb:b2:4a:ff:e1:9a:bd:03:b5:3a:4b:31:e0:d4:
         26:ea:f0:23:a5:91:54:c7:9e:c9:4c:f8:9b:4a:44:83:7d:c0:
         b9:b4:f1:4f:7b:89:03:38:87:e8:42:1f:e6:c1:f5:af:43:85:
         e0:74:c8:25:f2:7e:e5:71:34:d0:b8:91:2f:fe:cc:da:a7:66:
         4c:48:0a:8a:18:cb:64:b2:d3:81:6a:35:65:54:a4:a1:6f:d9:
         a4:26:b3:25:82:fd:a3:4c:a4:28:82:98:f6:00:8b:6b:1c:cc:
         24:80:5d:35:11:02:9c:bb:96:0e:a8:69:27:01:34:1d:83:5f:
         a4:c7:f0:9e:6e:91:37:c7:70:c3:d3:c5:f8:e6:26:4b:50:12:
         02:35:9e:2f:03:74:99:d4:9f:9d:6b:b0:ad:12:55:9c:f3:cc:
         41:dd:a3:23:74:e9:f1:d0:a7:2d:76:d4:29:d8:1a:fc:08:f4:
         48:60:4d:ac:e7:f4:29:26:98:4a:83:7b:75:36:71:6c:34:8a:
         82:60:23:9a:96:95:7b:21:a0:b8:87:db:16:e1:9c:ff:7c:4b:
         a6:37:55:7c:01:46:7d:ef:62:f2:16:07:12:3d:4d:47:19:a1:
         f9:22:ec:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:25:22 2025 by rpki-client