Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J7wTC4qaEKUZjhoxV1ynuRwl-cw.roa
File:                     J7wTC4qaEKUZjhoxV1ynuRwl-cw.roa (raw, json)
Hash identifier:          00nHgSzAMfqQisCTBK1hIHwL82zgUUYNvq7cQ2+UnEE=
Subject key identifier:   27:BC:13:0B:8A:9A:10:A5:19:8E:1A:31:57:5C:A7:B9:1C:25:F9:CC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3AE0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J7wTC4qaEKUZjhoxV1ynuRwl-cw.roa
Signing time:             Fri 22 Aug 2025 08:47:51 +0000
ROA not before:           Fri 22 Aug 2025 08:47:51 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        180.177.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15072 (0x3ae0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:47:51 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=27BC130B8A9A10A5198E1A31575CA7B91C25F9CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:90:47:1e:5e:38:f2:dd:f0:6e:42:26:73:
                    0b:ee:42:0c:d0:2c:8c:2d:6d:4d:d2:29:6c:af:a8:
                    c7:bb:99:3e:b6:ef:4e:45:b3:32:55:de:2e:5e:bf:
                    87:fb:0c:a3:1e:af:f5:f0:b9:14:8b:36:9f:99:2c:
                    50:71:e1:c9:a3:0d:f2:59:96:37:31:4d:3e:95:85:
                    07:f2:b3:6e:3c:97:c2:dc:55:8d:cf:88:7b:3d:6a:
                    90:3a:9c:34:9c:39:f4:92:a6:3b:eb:fb:7c:ae:bb:
                    80:06:3e:5b:4d:ec:c4:17:66:75:3c:08:fc:41:f5:
                    11:72:73:fd:24:eb:9e:0e:cf:d8:6b:6e:24:8e:0c:
                    33:69:39:2b:ba:8f:93:de:91:91:88:29:f9:b3:a0:
                    ef:27:94:4e:c4:a0:3d:e6:13:8a:e3:8a:28:f2:dd:
                    95:80:c6:86:b9:98:01:5a:31:8d:df:8c:7e:4a:88:
                    9d:74:bb:6e:38:c7:20:c7:b8:a0:8b:6d:cb:1a:91:
                    e3:f2:84:25:33:d1:6b:92:6a:94:6a:2d:5f:ea:40:
                    1a:79:4d:20:67:9b:e8:1f:f5:92:94:b5:23:28:71:
                    ee:52:85:e2:b1:62:77:fc:bd:53:50:f3:42:b8:17:
                    f6:ea:7a:ee:80:0b:ce:9c:4e:2e:75:4d:9b:33:02:
                    1d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BC:13:0B:8A:9A:10:A5:19:8E:1A:31:57:5C:A7:B9:1C:25:F9:CC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J7wTC4qaEKUZjhoxV1ynuRwl-cw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ba:e7:d1:31:01:02:cf:77:bd:2d:d3:39:08:91:ee:3d:a1:23:
         57:6d:1d:a2:55:2c:28:65:49:ac:c7:12:0b:ee:3f:f0:15:ce:
         ab:9e:74:54:ad:45:0f:d9:c3:d9:fd:5f:f8:eb:48:67:02:42:
         71:5c:41:27:1e:58:b6:58:95:53:79:a8:f1:bf:b9:d1:c0:b1:
         fb:c5:b0:9b:51:b1:0d:9d:ef:31:2a:24:56:3a:bf:1b:2d:5b:
         b9:16:48:85:b0:dc:8e:a3:cd:40:bb:d8:79:d0:49:17:da:9d:
         e3:fb:fd:4f:ee:4d:2a:95:fd:95:1f:42:74:9b:a2:3d:7b:b5:
         5c:2a:f0:37:53:54:46:2a:ad:74:33:c8:5c:3e:bc:e3:ac:c1:
         e4:2f:76:ec:5f:c1:18:91:18:3f:42:40:58:f1:5e:85:94:34:
         1a:f8:71:12:c6:c7:23:73:9a:5d:e0:0b:62:eb:c5:f7:91:70:
         57:65:0e:13:1d:20:b6:11:f7:48:4a:30:80:8d:a8:ab:6b:af:
         ac:02:73:da:7e:58:c0:ed:8f:98:44:00:b2:e8:73:09:d5:ce:
         39:c4:41:7a:92:6b:14:0c:a9:62:d0:bf:6d:40:0e:65:5a:51:
         c1:23:83:7a:4c:fb:c2:0f:d9:64:01:ef:5d:f7:a6:6b:3f:f2:
         cc:68:17:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:29:33 2025 by rpki-client