Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UfYApNcD8Hc8UNSkqmdFl-2tLVU.roa
File:                     UfYApNcD8Hc8UNSkqmdFl-2tLVU.roa (raw, json)
Hash identifier:          xqLyEVxiD+zOPmWxRnPL+TjM9mtxpNseZk8JIVJ6mto=
Subject key identifier:   51:F6:00:A4:D7:03:F0:77:3C:50:D4:A4:AA:67:45:97:ED:AD:2D:55
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3B25
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UfYApNcD8Hc8UNSkqmdFl-2tLVU.roa
Signing time:             Fri 22 Aug 2025 08:48:07 +0000
ROA not before:           Fri 22 Aug 2025 08:48:07 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        123.193.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15141 (0x3b25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:48:07 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=51F600A4D703F0773C50D4A4AA674597EDAD2D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f7:c0:25:2f:b7:08:6a:78:41:54:0d:fa:9b:
                    b6:e3:1e:f0:32:3f:ef:c3:e7:ec:41:92:e2:45:ed:
                    b3:5e:e0:90:fc:3b:cd:ea:ad:40:c3:21:6e:90:09:
                    d1:cb:76:2c:a0:11:3f:df:06:45:8b:ac:b3:5b:59:
                    56:df:a0:f9:71:26:30:28:1a:33:31:39:b2:e1:51:
                    c9:1e:71:c5:47:1c:cf:b9:ed:3f:8e:ef:be:fb:93:
                    51:18:a3:43:e2:1f:1e:97:b2:2a:a8:59:49:a2:88:
                    7a:e2:40:33:ad:f6:3f:5b:f3:74:19:6b:ab:2c:4f:
                    ad:8f:dc:f8:08:d6:43:4f:57:2d:b3:fa:19:0e:16:
                    98:6a:26:6b:a3:89:10:f5:16:4e:79:19:1b:d6:72:
                    ad:1f:a4:49:29:f6:bf:36:0a:4f:2b:fa:e1:5d:21:
                    0d:ec:50:d3:ea:64:c4:ef:a2:ff:e5:1f:b4:37:0a:
                    6a:a5:f2:98:4b:8e:42:69:7c:16:f6:57:e3:21:c9:
                    e6:92:e9:6a:79:11:3b:b7:dc:a5:d4:62:75:95:dd:
                    31:36:ed:09:a5:73:02:cc:77:55:d1:b9:9b:28:b4:
                    db:ab:d1:0e:8c:4a:57:fa:53:00:c9:c5:48:8b:1b:
                    aa:2e:8d:6a:06:ec:74:ed:8a:8d:2c:64:1f:d7:b7:
                    9c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F6:00:A4:D7:03:F0:77:3C:50:D4:A4:AA:67:45:97:ED:AD:2D:55
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UfYApNcD8Hc8UNSkqmdFl-2tLVU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:9e:09:de:b6:7a:2f:6c:74:f8:58:ab:3a:78:76:e7:04:3b:
         26:e4:53:cd:37:33:d3:b0:65:27:51:e4:4a:72:e8:c5:39:1f:
         9b:9e:be:2e:75:41:66:b5:52:97:21:3a:96:d1:34:bd:99:db:
         26:1b:be:ff:8e:7d:1d:54:da:a0:99:65:e5:84:0c:4a:ad:0c:
         02:1b:4b:14:42:56:24:e0:9e:93:73:a5:fb:33:51:64:d3:ca:
         78:24:08:4e:26:fc:b4:59:90:3c:73:cf:d3:da:20:ff:9f:6f:
         85:d4:80:64:6f:0c:77:bc:09:60:1f:76:c3:b2:50:a7:fe:28:
         8a:1a:0a:cc:59:2c:01:02:66:43:81:05:28:4e:e0:3b:d7:f0:
         9f:e1:22:84:ee:f2:09:5b:5a:2b:11:38:ca:6f:ba:60:34:de:
         b6:7e:55:b7:88:97:41:bd:8d:8d:d7:76:4a:08:8c:0d:dc:61:
         01:19:72:6e:5c:55:20:f6:2e:b2:19:e4:4f:fd:fe:7f:da:72:
         7a:6c:29:07:c2:9c:b5:6a:1f:32:45:b1:63:03:e5:29:e2:6b:
         3c:bb:e6:37:df:9c:f3:01:3e:05:58:b2:40:ed:a6:7c:16:16:
         28:72:ae:db:f5:8f:04:ad:8d:ce:39:c5:92:03:61:18:f3:24:
         44:1c:52:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:24:12 2025 by rpki-client