Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ViezfgRxQzHldKebNozu8NlcIHw.roa
File:                     ViezfgRxQzHldKebNozu8NlcIHw.roa (raw, json)
Hash identifier:          RheTDL7XnmCetGcGaAh1bJG44VUkoDbuICE49Om8B8M=
Subject key identifier:   56:27:B3:7E:04:71:43:31:E5:74:A7:9B:36:8C:EE:F0:D9:5C:20:7C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       38A3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ViezfgRxQzHldKebNozu8NlcIHw.roa
Signing time:             Fri 22 Aug 2025 08:45:29 +0000
ROA not before:           Fri 22 Aug 2025 08:45:29 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        123.193.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14499 (0x38a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:45:29 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5627B37E04714331E574A79B368CEEF0D95C207C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:6a:00:b3:b2:df:40:b2:8e:a1:8a:3f:f9:
                    8c:a3:3d:5c:72:67:64:14:cf:7b:dc:62:6b:d9:61:
                    a9:5a:36:80:66:69:fb:91:6d:be:f3:1e:40:77:0e:
                    a2:f1:d6:fa:89:32:4d:42:48:d4:32:09:f1:60:c1:
                    48:ab:60:ef:5e:fb:52:2e:79:07:da:27:ef:35:a2:
                    be:f0:96:f8:72:8f:83:d0:d2:f1:e3:1d:32:43:89:
                    4b:61:22:1e:f3:93:d5:70:d8:06:dd:75:4a:38:15:
                    f2:fb:fb:d1:a3:17:55:a0:ed:a5:34:6a:c5:17:91:
                    33:2d:eb:ef:19:26:e0:4a:49:5a:eb:8a:01:a5:ba:
                    1f:95:40:90:fa:8c:ad:37:45:a3:04:f9:bf:54:08:
                    82:6d:c6:d8:df:a7:4c:ab:9a:35:8d:d1:ce:0e:0e:
                    b3:86:43:86:0e:8f:1a:b7:e4:16:8f:53:8d:8d:e5:
                    03:ac:d4:9b:1a:ea:26:66:04:75:a2:05:6a:ae:72:
                    89:80:97:d4:0e:34:24:58:2f:23:93:89:14:c4:9f:
                    a9:8d:21:de:bb:85:39:0a:ff:0e:78:27:38:54:c0:
                    7c:94:4e:69:d1:c0:09:32:ec:06:58:ba:bb:e3:26:
                    57:01:69:39:cf:9a:40:24:4f:c6:74:ad:d8:9a:c9:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:27:B3:7E:04:71:43:31:E5:74:A7:9B:36:8C:EE:F0:D9:5C:20:7C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ViezfgRxQzHldKebNozu8NlcIHw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8c:ab:22:86:5e:a1:71:7e:09:19:31:e6:0b:dd:76:c7:c1:39:
         8b:16:79:26:b0:0b:4f:f1:57:8a:9b:b2:ce:dc:98:c9:53:6b:
         06:e5:29:a8:9d:e1:cc:3d:33:8e:e7:2e:12:b4:93:a2:7a:df:
         87:7f:0a:e4:0d:72:3d:79:0f:c8:63:18:34:5a:65:85:0f:f2:
         56:ba:33:9e:45:f6:05:89:df:f7:6d:d2:b5:07:1f:3e:77:cb:
         42:36:27:ce:fc:07:7b:3b:84:45:7f:45:ae:88:49:9c:82:d6:
         8d:7f:d4:91:84:54:07:86:50:ae:21:fa:7b:38:16:ac:05:17:
         1d:08:70:75:50:a9:3b:bc:04:70:5f:88:37:90:d2:e5:f3:b0:
         4f:c3:79:23:1c:98:c2:40:30:5b:b2:71:5e:96:af:c8:9f:aa:
         8d:b5:02:7d:38:88:38:26:de:24:e3:69:d7:56:d8:ab:ce:eb:
         9e:3b:9e:b8:b6:0a:bd:7d:79:78:73:16:bb:30:87:9f:ff:97:
         bb:2e:b4:3c:af:c8:98:bf:20:8a:df:63:4e:1e:ae:60:81:e1:
         19:f7:81:99:30:8a:9f:50:12:89:d5:bb:68:31:ab:90:4b:ea:
         c8:dd:10:33:fa:bf:b2:58:78:a8:71:ff:2f:8b:6a:19:f2:d4:
         9b:05:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:32 2025 by rpki-client