Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Jxs1zFus5o-ClsieEzN5gSn3lq4.roa
File:                     Jxs1zFus5o-ClsieEzN5gSn3lq4.roa (raw, json)
Hash identifier:          s1J74lR308oPFiqpaGnC7huTGG77HyRbHTJeDczQwaQ=
Subject key identifier:   27:1B:35:CC:5B:AC:E6:8F:82:96:C8:9E:13:33:79:81:29:F7:96:AE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3B63
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Jxs1zFus5o-ClsieEzN5gSn3lq4.roa
Signing time:             Tue 14 Oct 2025 03:00:48 +0000
ROA not before:           Tue 14 Oct 2025 03:00:48 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        2407:4d00:fd00::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 03:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15203 (0x3b63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Oct 14 03:00:48 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=271B35CC5BACE68F8296C89E1333798129F796AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:92:60:28:7f:1e:ec:3f:11:41:d7:d8:da:
                    e2:19:13:d4:6f:0c:36:a1:f1:8f:4c:d7:ac:8a:c4:
                    65:6b:48:a2:38:6e:a0:d6:51:8a:ea:ff:ae:8b:b3:
                    00:cd:33:d4:28:b4:77:ce:06:43:53:b3:bf:ba:e2:
                    eb:54:f2:7e:8f:29:82:96:c6:f8:e1:ef:e8:26:39:
                    45:56:23:5d:92:8d:1c:ef:7f:45:ab:c0:2a:9b:19:
                    85:86:f2:6f:fc:1e:d4:2f:51:d5:81:36:70:4d:b2:
                    e4:f8:1e:ea:4e:09:92:56:05:c2:23:a1:85:79:56:
                    55:4d:e8:0e:dc:7e:17:2e:56:f6:04:dc:52:51:58:
                    4e:15:ba:16:f3:3c:be:d1:0f:33:83:b2:81:1a:5b:
                    f7:e5:35:56:e0:8a:4b:41:88:7f:4e:ff:8c:9e:10:
                    e0:4f:fd:af:cf:9e:cc:c9:dd:06:62:c4:b4:de:96:
                    87:3a:4a:b5:8c:04:c9:4d:ec:7c:e8:46:3f:2a:49:
                    d9:f2:c8:80:81:7c:33:01:27:8d:62:17:e2:84:52:
                    59:45:a8:8e:9f:eb:e7:6b:ea:5e:c2:6d:86:5b:52:
                    71:ec:1b:d0:40:76:7a:ae:9a:e9:a6:11:76:d7:83:
                    54:07:cf:b3:7c:9f:0e:46:ae:d5:5f:b4:da:83:f3:
                    b7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1B:35:CC:5B:AC:E6:8F:82:96:C8:9E:13:33:79:81:29:F7:96:AE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Jxs1zFus5o-ClsieEzN5gSn3lq4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:fd00::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:55:19:f6:f5:e4:f9:c7:e6:83:c6:df:ae:df:28:26:15:36:
         06:a9:d1:5b:81:8a:d5:4a:5f:b2:f7:91:f1:d4:70:16:64:07:
         9d:51:61:d8:97:2b:23:dc:6c:2c:cd:29:1f:ca:06:2d:51:fd:
         b5:7d:4d:7f:05:b5:9a:c6:d1:62:dd:ff:75:18:13:6a:36:27:
         bc:5b:78:23:75:03:10:58:ae:24:b7:a0:3d:de:ef:ca:6e:69:
         13:4a:53:21:9c:03:2d:ae:e9:78:d7:89:14:4f:48:ce:37:e0:
         e9:b9:5d:6f:be:84:7a:7d:6c:3c:a7:7c:a5:b2:c6:c3:44:93:
         d7:f3:06:cc:16:f1:f0:83:fa:25:ae:33:2f:12:07:cd:19:02:
         04:c4:08:df:64:d5:fe:e4:c7:09:56:95:75:65:65:6f:86:a5:
         d4:80:d8:a7:d1:92:12:54:f0:c8:d6:65:6e:0e:b5:a7:eb:51:
         44:69:16:1d:03:2c:bb:8f:e7:0f:13:87:5f:4f:7c:25:6d:64:
         5c:fb:71:5e:f5:af:41:4d:e4:42:6e:c6:6c:f8:0a:6a:0f:0e:
         ff:5c:0c:ab:58:cc:8e:38:71:93:07:2b:14:75:1d:14:25:3f:
         77:e0:d0:a8:d2:26:94:97:52:4f:4b:96:57:34:44:ef:7a:80:
         4d:71:2f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:11 2025 by rpki-client