Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/P6cLlzoIuDSWbYi09YhebU_C7nM.roa
File:                     P6cLlzoIuDSWbYi09YhebU_C7nM.roa (raw, json)
Hash identifier:          rrUbKX64AZ3DpRrHN/iSgSwBGlEgABvfY6Kd/4f/laQ=
Subject key identifier:   3F:A7:0B:97:3A:08:B8:34:96:6D:88:B4:F5:88:5E:6D:4F:C2:EE:73
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3AA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/P6cLlzoIuDSWbYi09YhebU_C7nM.roa
Signing time:             Fri 22 Aug 2025 08:47:34 +0000
ROA not before:           Fri 22 Aug 2025 08:47:34 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        180.177.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15012 (0x3aa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:47:34 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=3FA70B973A08B834966D88B4F5885E6D4FC2EE73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:20:86:04:76:93:9f:b8:f1:96:a1:d3:3e:
                    1f:ef:ec:74:ab:0a:eb:b2:25:e8:8a:d9:67:bc:0f:
                    c3:3c:d6:c2:55:1c:1a:46:64:e1:9f:73:f7:42:81:
                    1c:fe:2d:d6:8e:01:81:0c:53:c7:9c:64:6d:7a:0b:
                    cc:e7:01:d5:f0:ea:27:47:eb:60:71:b2:43:cd:f3:
                    23:6c:fc:34:69:3f:f4:16:b2:f4:c7:a6:e9:d4:7a:
                    d6:e3:5a:7c:a3:9e:f6:b5:db:ec:3b:a5:7e:cc:a5:
                    5d:c1:56:31:00:80:d7:4f:0a:5e:28:1e:25:94:60:
                    78:39:df:a4:c8:aa:09:d2:2f:05:bd:94:7b:e0:48:
                    be:e4:2e:20:f2:78:76:ca:14:04:d1:80:02:bb:64:
                    f2:dd:fe:b5:05:a0:76:0e:b2:c3:b1:16:02:4e:04:
                    3a:62:36:a4:53:72:90:b4:2b:56:b7:0a:82:4c:47:
                    85:80:7a:98:6c:70:a7:7d:05:50:26:83:c2:5d:a9:
                    d5:56:db:84:ac:da:f5:29:b0:7f:02:a4:75:65:ea:
                    b2:7b:cc:10:b3:35:be:18:0d:74:71:13:9f:9f:d5:
                    24:82:0d:17:b2:4a:94:ef:b6:4f:11:ed:61:f6:52:
                    36:8b:a6:7a:eb:48:33:ba:28:ce:e6:d2:ab:f2:6c:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A7:0B:97:3A:08:B8:34:96:6D:88:B4:F5:88:5E:6D:4F:C2:EE:73
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/P6cLlzoIuDSWbYi09YhebU_C7nM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:45:c7:73:f8:96:85:32:93:0c:f9:d3:19:4f:9a:d3:e1:23:
         96:78:83:3c:24:79:9f:d7:e0:71:c0:1b:64:40:13:fb:ca:3c:
         24:d6:e6:0c:98:db:14:27:29:99:1c:16:88:81:5b:1f:f1:36:
         cb:74:50:50:58:d5:e5:5f:35:d4:ac:45:07:1a:c3:58:96:b6:
         2c:e0:00:1e:60:20:c7:6d:cd:fc:83:b2:a6:87:c0:6b:47:2c:
         52:c9:c9:39:2c:1f:16:87:4f:1c:2a:50:fc:de:60:5c:1c:94:
         d4:57:bb:b2:fe:bf:69:81:a7:43:21:29:9a:28:dd:74:2e:e7:
         d6:14:b2:e3:53:40:26:43:77:e8:c3:e7:9f:b6:9f:f1:5f:07:
         53:1e:86:28:5c:16:f0:4c:24:4d:28:ae:df:a5:30:37:db:56:
         c9:74:31:01:c2:26:d0:25:15:a0:86:f8:a4:04:83:0d:c4:17:
         e7:69:66:d6:bc:8b:4f:07:9a:e8:ec:55:22:cd:d9:9d:09:d1:
         36:51:cb:13:4b:45:0f:8f:19:82:9d:f0:e6:79:f0:2c:5a:3a:
         91:34:41:3c:82:f0:c0:96:42:3b:f9:ec:f1:47:48:1c:59:d5:
         c6:b9:d2:9b:ac:ba:ac:24:c6:c9:0c:6f:f8:f1:e1:a6:7f:11:
         b4:39:7c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:32:11 2025 by rpki-client