Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tug9iUJZwsDbEVaidLXAT4P4c1M.roa
File:                     Tug9iUJZwsDbEVaidLXAT4P4c1M.roa (raw, json)
Hash identifier:          KjVYgXiNAveDUfxu+tL4MNFNBDEetoiLMd8uHukd5kI=
Subject key identifier:   4E:E8:3D:89:42:59:C2:C0:DB:11:56:A2:74:B5:C0:4F:83:F8:73:53
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3AD2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tug9iUJZwsDbEVaidLXAT4P4c1M.roa
Signing time:             Fri 22 Aug 2025 08:47:48 +0000
ROA not before:           Fri 22 Aug 2025 08:47:48 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        106.1.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15058 (0x3ad2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:47:48 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4EE83D894259C2C0DB1156A274B5C04F83F87353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9b:99:51:e6:a5:a5:be:e6:5e:d0:34:19:d4:
                    3c:67:13:21:72:df:fc:14:5f:13:23:89:26:ea:aa:
                    39:aa:d6:06:7e:db:c6:ff:79:9c:28:55:0b:ac:cd:
                    e3:bc:21:55:a3:6a:bd:8b:41:ab:ff:81:86:22:f8:
                    d9:58:83:22:ae:1d:99:ce:77:36:2f:bc:1a:6a:0f:
                    d7:6a:61:52:2c:81:ed:de:25:4d:7d:7f:c6:e9:5a:
                    2e:a7:8f:c5:33:2a:03:e3:0a:eb:25:6a:58:2a:28:
                    d8:bd:34:14:12:7e:00:02:12:c9:04:99:42:fd:42:
                    35:7f:0a:cf:8b:68:cb:cf:42:88:dd:d3:00:f6:3a:
                    3b:d3:36:e9:a2:32:c2:43:e7:da:38:39:10:fd:45:
                    8a:c6:b4:3f:c7:72:42:60:cb:15:db:f4:e1:ae:68:
                    e7:8f:97:6d:c6:41:2b:42:a2:76:cf:32:6b:09:62:
                    bf:ac:1a:d6:02:cb:af:86:b4:da:41:f8:1d:b8:7a:
                    d2:9c:c5:95:1c:85:da:1e:8b:0c:d5:65:b6:d7:68:
                    11:8a:70:3f:93:80:e1:9f:21:3f:78:1f:ff:3e:2c:
                    4e:a1:37:ed:87:6a:bf:3f:37:4c:0c:47:f0:92:43:
                    cf:ab:76:a7:b5:e8:99:03:59:ba:44:78:46:4f:3b:
                    01:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E8:3D:89:42:59:C2:C0:DB:11:56:A2:74:B5:C0:4F:83:F8:73:53
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tug9iUJZwsDbEVaidLXAT4P4c1M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:e3:cb:ba:e1:d6:8b:27:01:0c:a8:64:71:f0:bb:32:65:19:
         38:3c:ca:7e:4d:3d:a0:8b:e3:31:bf:9e:53:a2:cd:e3:c0:b1:
         3b:b4:ed:ce:19:81:fd:f2:f1:95:43:1d:71:ec:5f:42:42:b3:
         77:ad:56:a1:bc:78:19:fb:d2:bf:f8:97:ba:16:f3:6e:ea:e7:
         b2:14:66:06:9e:de:d9:08:c9:71:72:5d:26:ab:a1:d6:09:77:
         9b:ab:fc:d5:1e:7d:48:2c:f7:c5:fa:bb:47:22:e8:46:dc:7e:
         35:a2:87:dc:fd:0f:42:85:36:70:b7:ee:e0:66:8c:21:eb:b2:
         79:5b:4a:d2:b6:1b:e4:bd:fd:b2:73:8f:70:eb:e9:e3:13:3e:
         d6:fb:52:13:06:64:e6:86:58:63:2f:f4:e5:d7:89:87:01:d3:
         af:67:52:cb:27:f2:13:ec:be:f8:5a:4a:9d:81:08:58:26:b0:
         0b:bd:a0:64:f6:e5:a1:7f:7d:01:be:46:cf:62:58:fc:14:10:
         a2:c4:36:73:52:bf:71:b3:64:d3:80:73:56:23:b9:33:31:ec:
         c7:3d:4b:77:e7:fc:11:ff:dc:ac:d5:df:1e:d1:c6:71:52:a7:
         69:86:25:d5:fa:16:c4:e2:be:25:d7:46:10:28:82:d0:be:82:
         9f:87:2c:7f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICOtIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw
ODQ3NDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRFRTgzRDg5NDI1OUMy
QzBEQjExNTZBMjc0QjVDMDRGODNGODczNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKm5lR5qWlvuZe0DQZ1DxnEyFy3/wUXxMjiSbqqjmq1gZ+28b/
eZwoVQuszeO8IVWjar2LQav/gYYi+NlYgyKuHZnOdzYvvBpqD9dqYVIsge3eJU19
f8bpWi6nj8UzKgPjCuslalgqKNi9NBQSfgACEskEmUL9QjV/Cs+LaMvPQojd0wD2
OjvTNumiMsJD59o4ORD9RYrGtD/HckJgyxXb9OGuaOePl23GQStConbPMmsJYr+s
GtYCy6+GtNpB+B24etKcxZUchdoeiwzVZbbXaBGKcD+TgOGfIT94H/8+LE6hN+2H
ar8/N0wMR/CSQ8+rdqe16JkDWbpEeEZPOwG9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUTug9iUJZwsDbEVaidLXAT4P4c1MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1R1ZzlpVUpad3NEYkVWYWlk
TFhBVDRQNGMxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AS4wDQYJKoZIhvcNAQELBQADggEBAFLjy7rh1osnAQyoZHHwuzJlGTg8yn5NPaCL
4zG/nlOizePAsTu07c4Zgf3y8ZVDHXHsX0JCs3etVqG8eBn70r/4l7oW827q57IU
Zgae3tkIyXFyXSarodYJd5ur/NUefUgs98X6u0ci6EbcfjWih9z9D0KFNnC37uBm
jCHrsnlbStK2G+S9/bJzj3Dr6eMTPtb7UhMGZOaGWGMv9OXXiYcB069nUssn8hPs
vvhaSp2BCFgmsAu9oGT25aF/fQG+Rs9iWPwUEKLENnNSv3GzZNOAc1YjuTMx7Mc9
S3fn/BH/3KzV3x7RxnFSp2mGJdX6FsTiviXXRhAogtC+gp+HLH8=
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:32:08 2025 by rpki-client