Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tw5KPJMDp9iwV55I-gwKF6cgVQA.roa
File:                     Tw5KPJMDp9iwV55I-gwKF6cgVQA.roa (raw, json)
Hash identifier:          Ww6OhB9Nc066LJqJ+2Mud03/Mo8CaCQoqCV+yrVYJZc=
Subject key identifier:   4F:0E:4A:3C:93:03:A7:D8:B0:57:9E:48:FA:0C:0A:17:A7:20:55:00
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3929
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tw5KPJMDp9iwV55I-gwKF6cgVQA.roa
Signing time:             Fri 22 Aug 2025 08:46:02 +0000
ROA not before:           Fri 22 Aug 2025 08:46:02 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9924
IP address blocks:        118.232.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14633 (0x3929)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:46:02 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4F0E4A3C9303A7D8B0579E48FA0C0A17A7205500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:6d:97:8b:08:31:d2:77:08:74:dd:6f:4d:
                    0b:6f:ff:76:8e:27:7f:b1:69:22:6d:3c:23:cd:9d:
                    52:7b:04:78:3e:d4:c9:3b:c6:87:45:4b:c3:c9:b4:
                    23:0a:4a:e5:65:4b:36:12:cb:cd:39:b1:60:28:75:
                    cf:e0:90:06:31:0a:a0:a2:cb:60:ea:09:db:85:c9:
                    bb:82:ed:b1:8b:d4:9a:78:c0:5a:ad:29:f2:0f:98:
                    c2:60:37:7a:7d:81:f9:cf:97:b9:f0:c5:d9:1b:d0:
                    a3:d5:c8:8a:aa:18:42:13:5f:83:a4:ca:70:18:9c:
                    8a:e5:7e:d7:b1:5c:06:3f:f2:0c:7d:e6:52:df:f8:
                    08:f8:df:e3:39:b6:ec:66:b7:9a:bd:1a:5c:65:9c:
                    95:13:03:5e:42:a7:34:58:6a:1e:d2:e6:9a:d8:cd:
                    41:af:3d:b7:f4:4f:c1:b0:d3:19:8f:8e:27:f3:00:
                    83:f8:b3:95:01:01:7c:f5:66:55:1a:09:e2:c9:3c:
                    ee:10:1e:1e:b0:58:49:d6:ae:52:2d:fa:67:37:13:
                    ed:40:5e:72:90:eb:f9:9c:04:6e:e2:ea:17:44:f5:
                    0c:b8:fd:4c:c0:5b:9c:47:2a:68:64:42:ff:cf:bd:
                    a2:9b:26:24:ed:22:9e:95:49:89:a2:da:88:9c:3f:
                    42:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0E:4A:3C:93:03:A7:D8:B0:57:9E:48:FA:0C:0A:17:A7:20:55:00
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tw5KPJMDp9iwV55I-gwKF6cgVQA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a7:7f:67:c8:a7:01:54:47:57:8b:f1:1e:b3:06:cc:94:94:4b:
         95:85:41:e4:dd:0f:5d:93:71:54:c5:ad:d6:0c:53:69:01:6b:
         33:0a:61:d2:06:7b:e8:1d:59:2a:db:bb:33:07:ae:5f:39:03:
         4b:52:bf:7c:c1:24:4b:91:cd:3b:66:51:83:76:74:37:2c:61:
         f8:6e:43:6f:ed:73:8e:49:a8:42:8d:c9:5a:41:90:ff:5e:9f:
         a9:34:00:fc:52:55:5a:73:7e:30:70:0a:3a:e0:00:f7:58:c8:
         b4:80:16:fe:b4:b5:f3:28:f8:10:21:ba:22:49:13:3f:7c:67:
         7c:25:50:6e:a5:34:a8:76:d9:04:92:6d:64:f2:11:55:01:b7:
         cd:16:8e:f2:ba:ec:bb:96:02:39:c6:ab:7d:9f:b9:59:03:0b:
         34:21:eb:81:85:96:ba:46:ba:f1:15:0e:e2:f3:6b:14:53:e3:
         3c:ac:03:af:12:9e:c4:44:fe:63:55:b0:f8:a3:5b:3a:c4:03:
         03:b2:d1:7f:5f:69:fa:b7:95:3b:a6:97:8e:ba:ae:7d:70:34:
         35:59:ae:08:28:e1:63:d2:3c:82:e1:ca:33:60:4e:76:40:7f:
         e4:2f:6e:a2:7d:f1:6c:ef:66:aa:07:46:d0:69:17:ed:35:b3:
         7e:69:0b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:18 2025 by rpki-client