Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQ9icfnz5PY7TyI92DxVSl5Boy4.roa
File:                     RQ9icfnz5PY7TyI92DxVSl5Boy4.roa (raw, json)
Hash identifier:          nwBuKQnBs8wmmF1zBitaz17Ag7Po1PcX6RHpGAv2czs=
Subject key identifier:   45:0F:62:71:F9:F3:E4:F6:3B:4F:22:3D:D8:3C:55:4A:5E:41:A3:2E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       39FB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQ9icfnz5PY7TyI92DxVSl5Boy4.roa
Signing time:             Fri 22 Aug 2025 08:46:53 +0000
ROA not before:           Fri 22 Aug 2025 08:46:53 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        180.177.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14843 (0x39fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:46:53 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=450F6271F9F3E4F63B4F223DD83C554A5E41A32E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:33:d3:f4:98:0c:91:61:c4:ce:7a:3b:ec:
                    f6:e7:f6:03:40:bf:77:ce:91:c8:04:b9:bf:5d:cb:
                    04:28:dc:bd:76:be:c6:c6:e7:1f:03:99:63:fb:45:
                    14:72:3e:9e:c5:ae:1c:ca:fc:a7:09:4b:3e:f8:45:
                    3c:18:ba:a2:0b:cf:e6:3e:f8:fb:21:e5:94:06:92:
                    1e:cf:bd:ac:a8:8f:8c:3d:42:f6:c0:7c:03:bd:ed:
                    1b:0d:32:1f:5f:85:20:08:f4:1b:64:fc:1f:f3:ec:
                    50:47:86:99:74:cc:1c:a2:76:66:10:e7:ec:f0:c2:
                    28:c2:1b:f8:58:78:93:90:eb:4e:c7:37:05:73:dc:
                    85:60:56:f7:0e:29:09:a3:e4:83:7c:df:01:a5:1b:
                    b0:c0:a7:6c:4a:84:7f:a9:bc:0d:0f:a5:23:74:4c:
                    e5:43:d7:e6:60:25:7d:55:d3:7e:14:a0:09:40:42:
                    3c:08:95:5a:d2:7d:13:c0:62:8c:5b:66:b4:75:b9:
                    b6:f1:67:ef:a2:24:a0:29:26:3c:3a:c2:1a:59:de:
                    39:59:0d:86:6b:da:24:9e:32:ee:77:54:d9:6f:ec:
                    50:78:f2:bb:67:98:18:0d:69:cb:91:c3:e4:ab:91:
                    45:19:77:42:b1:42:0e:2b:6c:b2:b7:8d:9c:62:18:
                    7c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0F:62:71:F9:F3:E4:F6:3B:4F:22:3D:D8:3C:55:4A:5E:41:A3:2E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQ9icfnz5PY7TyI92DxVSl5Boy4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:2b:85:fd:c0:04:f2:38:b8:8c:94:6c:45:3f:50:8f:62:f3:
         32:d6:29:fb:21:ef:8e:27:f5:ba:29:4b:71:60:66:3c:e9:f3:
         5d:34:b6:e9:1f:67:11:1c:6f:0d:ac:75:ce:6d:70:05:47:a6:
         52:f0:1c:94:15:c3:39:2e:3a:3c:0e:ed:05:2a:03:40:80:26:
         81:37:d9:09:70:9f:54:ac:5e:ec:2c:f4:ce:e7:15:10:a6:87:
         39:db:de:8c:46:c4:c9:4b:e1:57:64:10:e9:e5:12:4f:00:d1:
         0a:a5:fc:32:30:21:4d:59:bd:2a:02:08:79:bc:62:29:4d:47:
         45:b6:b6:a5:86:54:ac:b8:e9:70:e0:2a:87:a5:f6:9c:70:56:
         1e:9b:d8:94:86:a6:11:79:a9:88:22:d0:8a:f1:15:dd:61:05:
         91:ea:97:24:36:26:42:03:ac:b4:00:93:3a:9d:d6:46:fe:4c:
         20:b5:c3:6f:1e:d6:19:d6:2d:da:8c:46:85:ad:d8:9a:d2:66:
         52:f7:d1:db:41:e8:c7:ff:61:61:81:90:52:b6:4d:c0:1c:a3:
         1d:22:9e:f4:30:d2:4b:5a:c0:97:f0:e4:c2:fc:16:bf:c9:df:
         2f:75:d1:f3:ac:5d:74:2e:84:af:c0:f6:9c:86:4f:d6:22:d9:
         ae:f6:51:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:32:01 2025 by rpki-client