Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TeEmsi0mGca1xftJJ2wFLYrMEyU.roa
File:                     TeEmsi0mGca1xftJJ2wFLYrMEyU.roa (raw, json)
Hash identifier:          DsbflR5YGbQGGGFOPPgN+UBJlL5nm8hy7jMZ0+hhxGk=
Subject key identifier:   4D:E1:26:B2:2D:26:19:C6:B5:C5:FB:49:27:6C:05:2D:8A:CC:13:25
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3901
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TeEmsi0mGca1xftJJ2wFLYrMEyU.roa
Signing time:             Fri 22 Aug 2025 08:45:51 +0000
ROA not before:           Fri 22 Aug 2025 08:45:51 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        106.1.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14593 (0x3901)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:45:51 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4DE126B22D2619C6B5C5FB49276C052D8ACC1325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9f:ef:aa:17:5b:41:dc:14:8c:4f:07:eb:a2:
                    88:2f:9f:68:c9:54:d6:1b:38:f4:7c:cb:91:3f:64:
                    90:a3:64:12:d1:18:a0:b3:0f:34:2b:c8:9d:5d:58:
                    08:32:9f:04:6a:8d:9a:0c:0c:3a:4c:cf:97:00:7f:
                    9f:3f:24:da:a5:d8:82:b0:1a:f8:d2:1e:4c:c1:8e:
                    4d:6a:40:b3:b5:80:6d:a9:10:0f:80:a7:1f:09:50:
                    c8:33:dd:8b:b4:5d:48:17:57:37:da:fe:6b:8c:9e:
                    37:b6:62:dc:c7:89:50:ae:14:0d:a3:d5:ca:2b:4e:
                    7f:b5:c5:53:74:f2:d8:0e:c4:ba:30:67:ee:1e:f1:
                    e3:a6:96:52:7a:f6:5a:fc:25:c5:94:58:42:63:3b:
                    b3:83:b9:e7:5a:ea:47:1a:f3:51:4e:f0:ee:45:f4:
                    df:a7:49:f2:26:8a:f2:40:b8:1b:2e:6e:a6:6e:e7:
                    db:9f:81:47:7d:ec:68:26:80:db:e0:b5:17:4e:4e:
                    cc:aa:ba:28:1b:06:7c:4a:d2:98:27:24:6b:9c:85:
                    5c:a8:2d:9b:d3:7a:5d:5d:fe:9d:2f:4c:eb:99:96:
                    1f:4a:a1:d3:ae:e5:0c:bc:48:f7:04:30:27:93:58:
                    37:51:d6:e3:1a:0b:1c:c8:2d:96:e5:ef:34:5f:42:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E1:26:B2:2D:26:19:C6:B5:C5:FB:49:27:6C:05:2D:8A:CC:13:25
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TeEmsi0mGca1xftJJ2wFLYrMEyU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:d6:65:60:7f:61:63:f3:21:8f:6a:55:3e:4e:a1:29:c8:e8:
         0b:0a:b0:ff:c0:04:b5:44:06:61:a6:64:3b:23:d3:93:31:42:
         9b:14:58:f4:30:34:a5:6e:77:40:5a:28:6e:f3:92:91:ef:1d:
         bb:0e:44:87:60:1f:e3:4a:30:be:a0:2f:04:fa:a2:ae:96:dd:
         6c:fc:80:a5:d5:a6:b9:87:47:a0:a8:ca:c6:ec:ce:27:e8:ef:
         dc:de:b0:1b:9a:41:3e:05:6f:b2:02:21:4f:f1:46:9f:9f:73:
         87:5e:0b:03:6d:fb:15:fb:85:03:16:88:24:85:63:18:07:22:
         e5:d6:1c:87:27:39:3a:f8:15:c6:ad:2a:0c:01:d2:df:9b:83:
         8d:85:df:fd:3d:3b:60:92:03:cf:0e:90:4a:59:94:80:c2:d4:
         5f:67:c7:fb:c4:d7:34:56:7c:38:71:0b:fb:ba:17:8b:71:4d:
         d0:bf:bc:6a:1b:28:29:08:7f:a6:01:d1:13:97:4c:9b:17:b2:
         f3:43:43:e5:38:6b:dd:d8:c8:27:d1:bb:f7:9a:a1:1c:2c:83:
         24:48:ab:c5:c7:bf:60:b1:d9:d5:b2:d1:c6:b3:bc:03:b0:e9:
         10:06:c0:07:dc:45:c5:4e:ee:ac:f9:eb:a7:3b:6d:ae:5a:c7:
         fe:fc:d5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:32:00 2025 by rpki-client