Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SlA6L1WlyVkw0y17Bvhd5Cuo4r4.roa
File:                     SlA6L1WlyVkw0y17Bvhd5Cuo4r4.roa (raw, json)
Hash identifier:          Bc/A6OrU/vdOYiWCqK1RlnYysFPjyb3u/s3DRHxaEmQ=
Subject key identifier:   4A:50:3A:2F:55:A5:C9:59:30:D3:2D:7B:06:F8:5D:E4:2B:A8:E2:BE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3ABB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SlA6L1WlyVkw0y17Bvhd5Cuo4r4.roa
Signing time:             Fri 22 Aug 2025 08:47:42 +0000
ROA not before:           Fri 22 Aug 2025 08:47:42 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        118.233.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15035 (0x3abb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:47:42 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4A503A2F55A5C95930D32D7B06F85DE42BA8E2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:d4:5c:1a:4b:08:d8:a6:9b:fb:c1:13:42:
                    ed:9a:b4:33:e9:64:02:2f:69:fc:6f:4d:83:25:7c:
                    01:c9:95:b2:56:df:c2:7f:20:2f:e4:57:02:c8:1a:
                    06:50:3e:ad:b8:56:5d:6c:7a:fd:05:f5:f0:b4:24:
                    1f:66:7a:6c:3a:90:66:cf:81:a1:ab:c7:ce:90:10:
                    74:05:0b:33:91:90:f8:47:43:38:91:e2:ac:f4:d7:
                    22:b3:f1:f9:2a:11:8f:8f:39:64:b8:39:97:54:69:
                    45:59:0b:1a:86:8a:7b:db:67:fb:ea:fb:c6:57:69:
                    82:18:7e:90:2e:83:96:76:e4:8c:8f:e3:34:17:dd:
                    88:b0:9d:c9:20:c4:6d:07:56:0d:90:e9:81:59:91:
                    c1:3d:0e:9f:09:8b:51:7e:ce:73:11:32:6b:e0:5c:
                    e0:9d:40:6a:53:bb:81:04:38:10:36:b9:bc:76:8f:
                    2e:cc:fa:c4:c0:fe:3d:a3:ef:36:9f:a8:2e:17:11:
                    9b:66:39:29:fc:d5:ca:56:45:e4:2a:90:5b:1a:04:
                    81:3c:5c:99:d4:ba:18:e1:4b:90:8b:3e:57:f8:b9:
                    a6:bc:81:53:c9:f8:12:5e:6f:b3:a4:70:fb:b5:2d:
                    c6:a1:2e:d9:7e:b1:91:b3:d5:08:66:51:d2:58:95:
                    f4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:50:3A:2F:55:A5:C9:59:30:D3:2D:7B:06:F8:5D:E4:2B:A8:E2:BE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SlA6L1WlyVkw0y17Bvhd5Cuo4r4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:79:a4:8f:e2:23:f3:26:bb:43:d3:50:de:54:3c:c0:ad:e8:
         67:eb:a5:a3:f7:73:77:2b:a1:a9:16:6c:1c:ed:ed:86:e8:28:
         7e:e7:a7:ff:2d:1e:f5:95:e9:58:04:57:dd:55:e9:fa:8e:b0:
         9e:1e:0b:0d:0c:dc:c7:e8:02:25:bc:5e:da:75:cf:2a:2e:e2:
         4a:a5:50:92:3b:97:54:9b:19:df:57:63:80:93:39:0f:ba:6f:
         62:a2:80:71:56:cd:d0:aa:d6:67:54:86:f2:7c:a0:99:ff:50:
         da:9a:3b:03:ea:8d:86:e9:c7:ce:cb:2f:4e:bb:c7:fd:cd:ee:
         1c:04:41:1e:aa:93:a6:e0:a2:b3:bf:f9:e0:92:a0:39:fa:3f:
         14:bf:bf:c0:2a:59:a1:52:f4:ea:32:4c:77:2f:cf:e3:dc:b5:
         23:d7:99:d4:e3:ae:e6:9e:e9:28:82:91:59:2f:64:49:4b:a9:
         b1:b0:fe:0e:35:11:be:28:7b:05:50:ef:19:27:8f:84:b0:d2:
         32:59:06:7f:a5:b6:7a:5b:ea:b9:c3:63:56:3b:52:8b:c0:f6:
         2e:4b:34:00:4e:ba:44:23:32:ac:3d:96:4c:a0:64:25:c4:0b:
         6c:dc:05:25:9a:66:7c:86:f3:a8:6a:9d:6c:f9:2e:65:ae:48:
         21:8f:60:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:32:06 2025 by rpki-client