Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PJ75Pd_2VtpW_o8uwhoqSOOW3FI.roa
File:                     PJ75Pd_2VtpW_o8uwhoqSOOW3FI.roa (raw, json)
Hash identifier:          JYme8UShLYH1CHFbVzq/oz/xY6POw7dCwFxLznCOFZo=
Subject key identifier:   3C:9E:F9:3D:DF:F6:56:DA:56:FE:8F:2E:C2:1A:2A:48:E3:96:DC:52
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       39EA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PJ75Pd_2VtpW_o8uwhoqSOOW3FI.roa
Signing time:             Fri 22 Aug 2025 08:46:48 +0000
ROA not before:           Fri 22 Aug 2025 08:46:48 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9924
IP address blocks:        123.195.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14826 (0x39ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:46:48 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=3C9EF93DDFF656DA56FE8F2EC21A2A48E396DC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:e5:d7:73:68:52:4e:cf:d8:1a:1b:e1:40:
                    47:e3:ab:c1:5e:7e:21:8e:51:2a:2c:d1:41:4a:87:
                    ae:89:18:e1:f2:2f:7d:38:6c:27:45:10:76:44:4d:
                    37:ac:05:33:a8:eb:6f:cc:be:b2:2f:2a:e4:08:07:
                    c0:1d:86:dd:10:2b:06:f1:f4:2e:25:ad:c9:87:80:
                    b9:75:b6:1b:01:2e:5c:e7:91:c3:74:e3:3c:cf:f2:
                    11:ad:c5:50:a0:30:bb:63:ce:b3:0a:6c:ad:6c:9e:
                    80:cf:b9:a2:91:1b:b3:ac:93:1f:e2:e2:ef:04:2a:
                    e7:9f:02:1c:08:88:80:e2:2c:1b:07:b2:ea:0a:8e:
                    40:f3:eb:e2:df:f9:f9:a6:88:53:aa:18:15:2b:d7:
                    55:8e:e9:38:36:2b:f8:69:a7:1f:68:66:21:66:9f:
                    f3:99:93:0b:fe:7a:3a:dd:05:95:35:0a:6d:ad:6f:
                    98:c1:5e:89:b5:70:3f:db:d1:8c:88:9a:55:c0:50:
                    b4:14:b7:ca:a8:72:a4:c3:1a:06:b3:46:98:f9:40:
                    6f:6c:e8:ac:68:4c:6a:53:33:f6:64:3d:99:88:b6:
                    6a:90:82:4e:29:98:0e:0a:d2:3d:02:36:93:34:a7:
                    25:08:a0:ec:9b:39:82:ba:97:d3:78:ed:7d:c3:4f:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9E:F9:3D:DF:F6:56:DA:56:FE:8F:2E:C2:1A:2A:48:E3:96:DC:52
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PJ75Pd_2VtpW_o8uwhoqSOOW3FI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:93:d8:4f:51:db:fe:d8:66:db:2c:49:a1:46:f3:d5:2d:f4:
         72:18:5b:b9:55:bb:d6:24:f0:26:ac:c2:8d:12:d3:d9:1d:a0:
         54:76:ef:a8:ef:ae:f7:90:b1:25:31:54:43:38:e9:bf:bc:1b:
         3a:1b:81:20:77:cc:54:d7:a3:3c:e6:9e:de:b5:c3:70:fc:59:
         e2:98:0a:67:44:74:39:b7:2a:28:85:69:89:54:e5:ad:c1:dc:
         1a:09:e8:9d:60:e7:8f:89:2a:13:bb:ee:9d:49:d1:64:18:90:
         8c:3c:c8:81:58:8d:98:c2:12:c1:70:9b:ab:37:4b:2e:f1:12:
         2b:bd:1b:25:09:91:69:92:2d:2f:bd:7f:e0:b9:3b:67:36:84:
         ee:ad:83:d1:d0:a5:6a:0a:a1:5d:df:ed:8f:36:aa:3b:26:d7:
         f6:b8:9b:e0:fe:fd:9a:45:94:ff:4b:fe:e6:0f:db:8e:9f:e9:
         29:ee:6a:ee:ab:9f:62:42:b0:e1:ec:b1:e6:2e:14:bb:0b:52:
         0b:b1:87:4a:38:aa:21:33:f1:b6:20:9f:b5:fc:2b:eb:ac:b0:
         2d:06:d6:74:96:ea:36:87:cb:b3:4d:4a:f8:45:00:cf:bb:68:
         1e:55:ce:13:f5:7c:ba:17:c0:ae:1b:72:6b:c2:53:34:1c:44:
         97:22:e1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:31:05 2025 by rpki-client