Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MOTvhAf598q3gqFewGKpW9g2ml0.roa
File:                     MOTvhAf598q3gqFewGKpW9g2ml0.roa (raw, json)
Hash identifier:          u38gbPD85xh/JqwBK/EEIhix3WhHn4JlrVPvlCCqKB4=
Subject key identifier:   30:E4:EF:84:07:F9:F7:CA:B7:82:A1:5E:C0:62:A9:5B:D8:36:9A:5D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3A7E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MOTvhAf598q3gqFewGKpW9g2ml0.roa
Signing time:             Fri 22 Aug 2025 08:47:25 +0000
ROA not before:           Fri 22 Aug 2025 08:47:25 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        106.1.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14974 (0x3a7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:47:25 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=30E4EF8407F9F7CAB782A15EC062A95BD8369A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6f:64:d0:98:15:4d:4d:96:fa:96:9f:0f:00:
                    89:41:f9:91:eb:f7:64:02:f7:17:95:1b:44:53:57:
                    56:ff:09:9e:6f:db:44:d7:92:93:3b:8e:1e:87:b6:
                    c2:b3:47:e9:77:11:5b:64:64:c9:b2:08:5c:4e:cb:
                    51:f5:47:9c:1b:d8:3e:e0:49:ff:b6:d7:23:40:43:
                    ec:e5:ac:72:08:f9:39:6f:99:53:f4:36:bf:ab:5a:
                    0a:3e:16:6a:c3:14:0a:d7:24:f4:69:ff:f0:30:b8:
                    e1:70:3f:60:e4:b3:32:9b:87:0e:5a:73:15:1d:1b:
                    85:b5:19:3f:91:a4:69:ea:39:dd:1c:19:7c:02:46:
                    05:03:cb:47:52:6e:f4:09:67:1f:cb:6a:65:06:13:
                    ce:e0:10:99:67:b7:e0:d9:f3:cc:40:03:b5:a2:84:
                    a6:09:74:3e:db:bf:71:e6:12:be:d5:99:d7:14:35:
                    4c:f6:c1:26:d3:3a:15:b3:db:a6:39:d2:b1:e4:1a:
                    6f:ab:eb:99:ac:dc:06:bc:bf:58:06:5f:4a:45:9a:
                    83:b9:ca:76:48:a1:58:48:8a:04:75:99:5a:09:c3:
                    9f:8a:3e:01:a2:1c:a5:d4:15:c2:db:2c:7c:35:bd:
                    3b:f1:c8:4e:b2:c1:57:9a:36:f3:90:d0:01:5a:c6:
                    4a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E4:EF:84:07:F9:F7:CA:B7:82:A1:5E:C0:62:A9:5B:D8:36:9A:5D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MOTvhAf598q3gqFewGKpW9g2ml0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:4e:e6:a3:dc:42:9b:63:63:36:53:b2:43:14:7a:b4:31:6d:
         da:e5:64:bd:bf:52:00:28:d6:4f:58:27:2f:2b:55:e3:ee:e1:
         2b:ce:f5:69:1a:5b:e3:5f:62:de:a2:b1:03:38:48:c4:7c:77:
         f8:45:dd:54:ac:d4:a2:ba:16:b0:ad:e4:ab:d1:6d:85:b3:52:
         69:81:74:9e:04:8e:02:f7:37:a0:71:17:f0:7f:a2:85:c5:64:
         24:1b:a2:3d:72:bc:8f:29:14:d1:6f:00:cf:59:44:22:87:db:
         35:be:fb:17:2e:ad:59:23:b5:19:ed:62:19:e1:9c:8f:d2:3a:
         3c:70:3f:bf:28:09:3f:8d:6d:82:25:d3:e4:14:34:8b:da:8d:
         3f:b1:91:ee:bd:00:6b:4f:16:45:95:0a:f9:e3:bf:88:92:e4:
         39:0a:9a:ef:c7:97:bc:4d:c7:f1:39:f7:a6:94:a1:ba:b3:0e:
         80:cc:ab:8c:0d:bd:52:75:5f:67:7b:27:f7:a7:f0:7d:cb:54:
         2a:43:41:70:f7:84:8b:ef:50:c2:dc:27:fd:65:fa:e9:8b:32:
         96:51:42:ff:8a:16:28:2b:14:5a:d5:d2:4f:c2:9d:f6:7e:25:
         e7:bf:be:97:15:4c:ac:98:3d:13:72:29:d6:85:c1:c3:12:fa:
         e1:0b:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:28:26 2025 by rpki-client