Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UYMugYzzJ7ZSDEPefGYtzuS62OM.roa
File:                     UYMugYzzJ7ZSDEPefGYtzuS62OM.roa (raw, json)
Hash identifier:          KGB2GBmJwaxnHREd+EUZU+iEQwbPm+dLauSkb6KR+E8=
Subject key identifier:   51:83:2E:81:8C:F3:27:B6:52:0C:43:DE:7C:66:2D:CE:E4:BA:D8:E3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3976
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UYMugYzzJ7ZSDEPefGYtzuS62OM.roa
Signing time:             Fri 22 Aug 2025 08:46:18 +0000
ROA not before:           Fri 22 Aug 2025 08:46:18 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9924
IP address blocks:        211.76.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14710 (0x3976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:46:18 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=51832E818CF327B6520C43DE7C662DCEE4BAD8E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:cf:74:54:7f:5c:8b:5d:4c:66:5c:fd:9a:
                    f5:16:30:2c:6a:83:7b:33:3c:b0:b2:91:9b:3c:16:
                    f1:e6:6a:a4:9d:47:05:0b:7d:52:6a:fa:29:64:5b:
                    1e:d6:f0:bd:c9:9d:6c:99:7e:f2:cc:bb:a5:24:a4:
                    7f:20:2a:c8:83:95:e4:bf:dc:b6:a1:dd:25:18:ba:
                    e7:e6:6c:f0:9c:c8:74:5b:aa:aa:08:e7:b1:f9:a4:
                    a9:f2:40:2b:08:4e:6e:85:67:19:9e:e2:a1:b2:31:
                    cc:25:3a:78:3a:02:75:99:83:1b:5d:9e:e9:91:e1:
                    8f:a8:5d:cb:fc:89:3d:d9:59:30:97:50:44:94:a7:
                    ad:84:4c:01:61:cd:02:ce:aa:ba:3f:1d:57:8a:fc:
                    6c:2d:1a:3a:70:cc:b5:61:52:e8:38:cf:21:db:b5:
                    44:99:bb:78:9d:75:b7:fa:5d:95:0c:be:90:9e:57:
                    b9:99:b2:b3:b4:06:f0:23:14:3c:6d:d3:43:5a:f1:
                    e1:80:45:b8:e7:e8:0e:0a:fa:2e:b2:47:73:61:20:
                    bf:db:34:4d:bc:0d:f1:86:62:4b:bb:4c:72:50:04:
                    cd:99:15:42:1b:6c:cf:f6:e7:99:36:8e:0b:fd:9a:
                    ec:73:ef:f3:d4:17:50:3b:be:b5:5a:d5:a9:e3:50:
                    7f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:83:2E:81:8C:F3:27:B6:52:0C:43:DE:7C:66:2D:CE:E4:BA:D8:E3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UYMugYzzJ7ZSDEPefGYtzuS62OM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:0c:75:c6:8f:fe:ac:df:3a:51:b7:47:66:ff:c2:18:cb:c6:
         c0:bd:d0:2e:59:f9:1f:14:67:63:2e:d3:38:d6:d2:7f:d7:1e:
         31:99:21:0d:88:62:e1:f4:37:3f:4f:58:a8:34:ba:dc:7e:32:
         3a:9d:69:94:6b:46:ed:0d:6d:14:49:ad:d7:52:79:4e:60:4a:
         a5:93:64:10:14:de:40:95:ed:3d:54:ea:45:30:b0:a4:1b:6c:
         4a:40:65:d9:3d:0a:6b:2a:58:53:ee:5c:9c:03:a5:49:97:df:
         1d:a3:70:c9:9a:23:a3:f5:d8:bc:79:38:db:de:3b:2f:49:8a:
         a5:f4:a6:f2:d2:eb:74:d1:4d:35:ae:73:46:2e:bd:fd:26:4d:
         7b:ae:04:a5:0e:63:39:62:3e:c0:4e:b9:b0:ad:a0:3e:06:54:
         1d:f5:59:3d:30:6f:3a:bc:71:dd:64:a9:d8:f2:8f:d5:59:e5:
         b5:db:8d:b7:8b:65:d9:22:b7:2a:d4:9f:17:34:f8:30:bb:35:
         bc:f6:56:dc:d0:85:06:8a:ad:e5:17:d8:b1:d6:b7:78:95:e3:
         d5:25:bb:89:e1:53:7d:b1:48:0a:fd:58:c5:65:7b:2a:d3:1d:
         3b:5e:0f:65:93:61:0c:70:8a:44:42:cb:fb:d0:85:61:44:08:
         8d:ad:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:31 2025 by rpki-client