Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ueh6VDv2ppwvdRc-4bM0eEqcsZQ.roa
File:                     Ueh6VDv2ppwvdRc-4bM0eEqcsZQ.roa (raw, json)
Hash identifier:          I3sWl53JlRHnH2vndVx8Q1U7J8shUaTBVRaiskTlRo0=
Subject key identifier:   51:E8:7A:54:3B:F6:A6:9C:2F:75:17:3E:E1:B3:34:78:4A:9C:B1:94
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       39D7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ueh6VDv2ppwvdRc-4bM0eEqcsZQ.roa
Signing time:             Fri 22 Aug 2025 08:46:44 +0000
ROA not before:           Fri 22 Aug 2025 08:46:44 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        123.192.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14807 (0x39d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:46:44 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=51E87A543BF6A69C2F75173EE1B334784A9CB194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ec:6d:99:be:39:c0:57:8b:22:e0:df:a3:96:
                    ff:e4:90:d8:14:ab:7b:ae:3f:31:c3:78:71:a5:4c:
                    72:37:03:23:96:25:3b:cc:2f:03:b8:f2:5f:e1:21:
                    84:30:63:af:a8:08:9b:b8:9f:69:14:5d:38:25:bf:
                    d0:5f:42:d5:cf:a6:bb:ea:81:a6:ab:33:c7:10:4c:
                    7c:6a:db:00:e7:ae:8c:73:0b:63:57:51:83:64:bf:
                    02:b3:1a:ab:fd:8c:79:e5:87:7c:c0:98:56:e8:d6:
                    89:90:ce:8d:e3:7c:ca:3b:7d:6e:70:f8:35:91:5c:
                    e4:8e:95:f8:d1:04:38:f5:e4:7c:66:08:71:f8:b8:
                    af:4d:10:e7:19:17:6c:0e:22:08:eb:34:73:b9:36:
                    f2:2d:29:95:b8:41:79:f7:3b:97:c3:8c:8c:0a:d5:
                    4a:40:d3:8d:c4:f4:ea:2d:51:5c:aa:47:9c:4f:79:
                    9e:f6:2e:25:e1:5c:f3:8d:59:ea:3a:6c:1c:d6:47:
                    9b:6c:1f:51:48:ce:aa:64:31:60:f0:8b:21:78:1d:
                    bd:52:d5:ad:e7:58:2f:7d:20:35:e8:57:67:71:1c:
                    9e:c0:38:c5:26:88:78:ab:8b:51:48:da:c1:8a:23:
                    62:0e:b8:81:71:0e:81:50:b2:73:6b:29:cd:01:a3:
                    c3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E8:7A:54:3B:F6:A6:9C:2F:75:17:3E:E1:B3:34:78:4A:9C:B1:94
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ueh6VDv2ppwvdRc-4bM0eEqcsZQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:09:c6:7e:23:2e:88:a8:57:65:6f:64:c2:2b:5f:46:4a:4b:
         29:da:3e:19:9d:6f:65:e9:3a:ed:05:06:47:ed:c8:3d:f9:0a:
         bf:bb:14:71:95:84:42:00:24:27:7b:d7:d5:d4:67:81:61:ea:
         60:35:3f:03:13:60:91:96:1c:ee:03:11:71:49:43:4b:89:94:
         78:1c:d7:16:13:77:ab:0c:f2:40:1d:e5:c4:b5:41:da:43:4c:
         52:d7:b6:26:bc:54:89:dc:cf:58:3b:95:4e:45:9a:35:18:37:
         c6:21:3d:c1:31:e6:da:50:22:08:11:f4:6b:dc:85:8e:f2:a6:
         7b:d9:17:23:24:80:51:9b:ef:5f:da:4f:ee:c6:39:69:f5:cb:
         2d:36:3d:ff:a6:b2:f4:7c:23:63:31:7c:a9:cc:66:4c:ef:89:
         12:15:ee:98:26:4b:ab:76:1a:a3:8e:9b:4a:ad:3a:31:a3:60:
         84:ca:42:cc:ce:69:77:5a:5b:5c:22:6b:aa:c3:08:af:7b:04:
         bb:e6:61:00:eb:25:1e:6a:d6:d7:24:da:dd:52:ef:a0:65:2f:
         87:50:e9:a4:24:57:1e:cf:68:2e:bc:14:3d:95:a2:9f:da:66:
         0e:80:8c:91:c7:88:ae:95:6c:9c:dd:fd:3f:2d:ed:d2:71:08:
         4a:22:bb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:29:30 2025 by rpki-client