Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mv6JmioJvMejblieVObsePNVsog.roa
File:                     Mv6JmioJvMejblieVObsePNVsog.roa (raw, json)
Hash identifier:          zeWqHlmzjNWw8jvL1HXK8xh4W85ctaIXrIAt21qNJ4U=
Subject key identifier:   32:FE:89:9A:2A:09:BC:C7:A3:6E:58:9E:54:E6:EC:78:F3:55:B2:88
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3B2A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mv6JmioJvMejblieVObsePNVsog.roa
Signing time:             Fri 22 Aug 2025 08:48:07 +0000
ROA not before:           Fri 22 Aug 2025 08:48:07 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        180.176.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15146 (0x3b2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:48:07 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=32FE899A2A09BCC7A36E589E54E6EC78F355B288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:83:58:cf:03:59:26:11:b0:9f:e6:4d:8e:
                    4c:e0:22:4c:77:48:aa:47:82:a2:01:aa:f8:36:d3:
                    30:6f:ca:3a:04:ea:1e:63:8a:91:fb:1c:ae:16:29:
                    2e:29:98:b9:78:c0:12:41:45:a8:5f:55:4a:25:ad:
                    51:60:dd:04:41:17:57:2d:94:9d:1b:c7:9b:ee:d9:
                    e1:01:28:10:7f:73:81:ff:f2:9d:26:04:74:58:49:
                    4b:59:25:9a:fd:0e:36:7a:a7:b7:de:b4:af:54:f8:
                    72:af:3e:13:a7:6c:f5:07:27:8f:de:5d:34:7d:8e:
                    e3:e7:44:a4:c5:25:6a:48:4e:40:7c:8d:94:c2:f3:
                    56:8a:74:68:7d:44:ed:39:2a:93:2f:9b:ad:72:bc:
                    ee:5e:d3:7a:a4:a1:20:34:e9:88:98:94:c7:34:b2:
                    c4:3b:d1:f0:16:f8:28:12:65:59:2c:9c:30:4c:9d:
                    90:10:3b:16:4b:71:76:ad:ec:65:7b:24:ab:a4:7c:
                    f5:30:5e:f8:e2:de:f3:1c:9f:f5:7a:ae:c6:df:26:
                    3e:90:59:6c:eb:80:be:ac:25:a5:10:0c:9c:f1:f0:
                    1f:f1:3a:f2:d2:46:30:6c:66:22:56:3b:d2:fb:39:
                    fb:d4:e1:b6:26:70:e2:1e:97:97:7e:46:94:e8:61:
                    4c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FE:89:9A:2A:09:BC:C7:A3:6E:58:9E:54:E6:EC:78:F3:55:B2:88
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mv6JmioJvMejblieVObsePNVsog.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:f0:c9:4d:f5:0f:2c:8a:6c:0b:07:f6:76:9d:1a:59:3f:e1:
         29:c1:34:a6:d6:61:d8:ea:30:ee:c0:a4:37:37:9a:03:78:cd:
         33:3f:fc:d1:cc:1b:66:6f:e6:c3:16:23:9b:80:e4:09:b3:04:
         67:dd:19:67:49:04:44:b1:de:2a:5e:71:8e:3c:9e:9c:14:23:
         f6:27:59:b0:d5:54:ec:75:a7:0a:bf:fb:da:a3:d2:99:a9:37:
         9e:57:83:d3:6e:73:ba:22:ca:bb:24:3d:39:5d:94:e5:5c:e0:
         d1:3c:30:fe:65:b3:a1:1a:9e:10:5d:da:98:f3:b3:82:df:ed:
         12:c7:f9:f3:95:4b:52:72:2c:57:8a:58:48:0c:39:cf:9a:a1:
         6b:c5:ee:af:ae:db:bf:a5:ad:27:17:f4:fa:c6:15:29:cd:cc:
         13:32:46:bc:e5:d9:83:2d:db:89:0c:4f:bc:a3:a3:b2:be:ec:
         23:34:2c:82:db:62:d5:b2:47:95:96:fd:dd:1b:b5:1e:ee:e5:
         6d:96:92:d9:07:42:5b:78:1e:4a:6b:84:2e:81:72:53:cc:5b:
         84:fa:70:7a:cd:5a:63:51:1e:ac:65:17:18:71:00:4b:2b:c1:
         69:b6:93:48:13:8d:c3:3c:0d:13:1c:d4:e2:52:10:f3:b2:b5:
         35:43:e6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:49 2025 by rpki-client