Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RqXy1bnKfTyqkNktC7Zs3wN9zfA.roa
File:                     RqXy1bnKfTyqkNktC7Zs3wN9zfA.roa (raw, json)
Hash identifier:          2kghBMQ/fCKAdbbt3AupOQg9uDLpev33uoHfkukpJJc=
Subject key identifier:   46:A5:F2:D5:B9:CA:7D:3C:AA:90:D9:2D:0B:B6:6C:DF:03:7D:CD:F0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       37CF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RqXy1bnKfTyqkNktC7Zs3wN9zfA.roa
Signing time:             Fri 22 Aug 2025 08:44:40 +0000
ROA not before:           Fri 22 Aug 2025 08:44:40 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        106.1.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14287 (0x37cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:44:40 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=46A5F2D5B9CA7D3CAA90D92D0BB66CDF037DCDF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4e:e5:73:c1:c8:f1:bd:46:82:e0:e7:f6:a7:
                    1c:b5:93:e0:a4:f8:03:33:87:55:a7:b0:b1:41:74:
                    71:70:49:ac:2a:14:04:a1:c2:09:b0:dd:67:08:fa:
                    d5:7c:a1:86:9f:b3:71:6a:31:fb:a0:05:81:8c:33:
                    31:28:27:1b:44:f8:eb:9d:c6:d2:45:d4:e6:c4:bb:
                    40:ec:4c:02:01:68:bf:d9:62:c7:3a:62:f5:9e:a6:
                    24:0a:1a:95:f7:6a:a1:70:8b:75:de:1c:f9:37:36:
                    ab:5f:00:ca:12:92:e9:92:ca:6f:98:90:5c:90:fe:
                    4f:9f:45:0b:07:a7:87:f8:7d:e3:b2:9c:17:49:72:
                    04:dc:21:57:67:d4:d2:01:60:d2:65:76:a1:05:6c:
                    a6:45:98:7a:db:77:f4:54:5c:92:20:fb:83:20:5c:
                    d3:3b:cf:23:40:2e:67:74:2c:08:ae:90:6b:c1:0c:
                    10:37:88:c3:7e:46:e3:ea:7f:a2:e3:25:38:fd:71:
                    54:2c:a5:04:96:8f:f1:ad:bb:34:53:a0:70:5d:c2:
                    b9:5c:bf:af:db:76:14:b7:18:7e:ab:b0:01:62:74:
                    44:13:2e:59:69:88:eb:1d:92:ab:b7:f6:bc:d7:4b:
                    f2:e6:11:c9:39:ba:5e:05:c2:c1:38:15:a4:2c:94:
                    65:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A5:F2:D5:B9:CA:7D:3C:AA:90:D9:2D:0B:B6:6C:DF:03:7D:CD:F0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RqXy1bnKfTyqkNktC7Zs3wN9zfA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:6d:81:04:e7:07:89:42:ce:55:03:75:54:72:dc:ac:2b:24:
         58:c4:46:70:c4:b2:7b:8a:83:99:e3:cc:e7:3c:89:4a:ae:ec:
         e9:d7:67:28:57:4d:ef:15:87:2d:f9:a9:1a:4c:18:c0:ff:bc:
         20:7a:13:13:73:3b:5c:a9:aa:40:35:94:0c:57:9d:09:41:a4:
         a9:a5:86:da:fe:41:02:06:08:7d:f7:5d:38:88:6e:15:aa:f9:
         fb:3e:bb:c8:44:3a:37:6d:44:30:b3:15:66:13:89:bb:17:7b:
         ae:47:a3:90:fa:1a:71:cb:01:92:39:4f:9d:10:6b:1e:b1:16:
         2d:43:22:8a:83:20:e6:db:ac:a6:de:cb:a8:9f:11:b9:21:1b:
         5b:4e:84:63:88:f9:53:f9:93:27:03:8d:54:2f:c2:8a:78:48:
         7d:d3:e8:da:ad:4d:49:d0:04:0f:b1:ba:fa:4a:9f:e3:47:64:
         d7:d8:d1:a2:ff:25:4c:f0:48:2e:f9:fb:fe:94:59:3f:9d:35:
         0b:a3:09:59:ae:cb:d7:a7:fb:96:76:f5:de:66:fe:00:08:4a:
         d5:fc:fc:5d:06:2a:8a:67:bc:2b:c3:0d:9b:f8:87:ce:f5:50:
         a3:d3:c6:97:a4:22:89:29:4d:02:14:5f:b0:31:dd:29:63:be:
         d3:44:de:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:22 2025 by rpki-client