Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RJ1LBILLz17M9CNr1eMvSoGnack.roa
File:                     RJ1LBILLz17M9CNr1eMvSoGnack.roa (raw, json)
Hash identifier:          E69mNFSOkr99YEiq7hUAmOHyZJbXF0GgS2+VGNc7wNY=
Subject key identifier:   44:9D:4B:04:82:CB:CF:5E:CC:F4:23:6B:D5:E3:2F:4A:81:A7:69:C9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3B1B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RJ1LBILLz17M9CNr1eMvSoGnack.roa
Signing time:             Fri 22 Aug 2025 08:48:04 +0000
ROA not before:           Fri 22 Aug 2025 08:48:04 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        180.177.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15131 (0x3b1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:48:04 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=449D4B0482CBCF5ECCF4236BD5E32F4A81A769C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:41:72:45:96:11:ac:ab:41:17:e8:5e:11:3e:
                    d6:bc:a0:42:aa:80:7b:2b:7e:a5:4b:f8:d2:f9:c7:
                    57:05:5d:25:d9:c3:a3:27:a2:f9:d3:43:ed:ad:76:
                    c0:82:41:c7:df:69:04:26:8e:95:fb:0f:b5:e4:8d:
                    ee:f6:8f:94:bd:e9:57:39:f2:7b:34:67:0f:4f:7c:
                    73:a1:cc:db:c5:68:f3:b3:bc:30:a6:63:35:81:b8:
                    ca:f9:7a:75:d8:2a:48:9f:67:b7:23:0d:2a:c1:33:
                    ad:31:a0:4f:ef:48:90:05:b6:d3:29:9d:d4:34:7c:
                    e6:fe:cf:65:2c:75:cd:9a:a9:02:b9:35:0d:7a:3c:
                    e1:ee:0a:e5:6e:e3:16:93:0d:5e:bf:d6:d4:4e:f6:
                    89:de:6c:ec:00:69:fd:7a:c6:a5:af:a7:7b:6e:4e:
                    3b:32:28:42:01:ce:bc:13:b6:90:d6:e4:92:51:c1:
                    d1:f6:33:83:c1:dc:77:90:7d:c2:ac:2e:4c:0e:30:
                    9b:34:4e:6a:f5:3f:58:f6:6b:6e:f4:3c:49:11:96:
                    19:dd:e1:2b:f9:47:36:63:e2:9f:a5:20:42:22:db:
                    ab:8b:29:91:bc:b8:b9:ea:84:79:83:78:72:40:fa:
                    ab:cd:1f:b4:62:eb:77:ac:89:c9:61:81:84:c0:d9:
                    0a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9D:4B:04:82:CB:CF:5E:CC:F4:23:6B:D5:E3:2F:4A:81:A7:69:C9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RJ1LBILLz17M9CNr1eMvSoGnack.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:6b:c2:28:8d:58:45:d7:7c:18:9e:20:33:f2:1d:bb:a7:10:
         38:fd:d5:bc:75:c0:f6:4a:5b:47:fb:ca:21:ac:b1:1f:13:86:
         a7:3d:44:26:77:43:46:87:22:1e:5d:61:07:25:cb:3d:06:d2:
         1d:50:4c:c0:a1:b4:e3:2d:2b:16:63:46:b5:de:c3:05:5e:31:
         fa:03:65:36:97:19:28:ab:22:3f:0a:37:ef:98:04:b7:9a:e6:
         7a:0f:fe:67:c1:8e:d0:64:a9:06:2d:0a:27:b5:06:2b:4f:84:
         46:a3:10:19:39:2d:6c:f6:94:01:7d:6d:60:b2:b7:2d:70:e4:
         f8:43:79:ec:ed:7f:54:63:b0:47:11:db:cb:c4:d6:e2:a1:84:
         c8:02:4d:1b:90:db:99:8f:aa:27:d4:54:32:2b:b5:33:8f:38:
         6a:b0:df:bf:b4:81:50:29:09:b3:63:04:8c:ee:93:eb:a4:0b:
         89:54:11:49:33:7c:a4:97:f1:d0:2e:5f:fd:c1:82:8b:2b:20:
         8b:70:6e:37:5c:cc:4a:39:c6:99:cd:6a:f2:fb:37:85:f7:37:
         20:d0:a7:b5:4b:13:92:66:39:0e:67:88:98:d0:06:24:e9:79:
         6d:bd:e8:83:81:8a:b0:bf:ac:a7:5b:ec:14:0c:38:ba:7a:f9:
         45:d1:0b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:19 2025 by rpki-client