Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WCTGmgzsFsfOPWZaR2ULZeggyK4.roa
File:                     WCTGmgzsFsfOPWZaR2ULZeggyK4.roa (raw, json)
Hash identifier:          XBQcyQlv8/jdiaCEsPBQuQZpz9HF2qzznehfwiCiZrM=
Subject key identifier:   58:24:C6:9A:0C:EC:16:C7:CE:3D:66:5A:47:65:0B:65:E8:20:C8:AE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3B03
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WCTGmgzsFsfOPWZaR2ULZeggyK4.roa
Signing time:             Fri 22 Aug 2025 08:47:59 +0000
ROA not before:           Fri 22 Aug 2025 08:47:59 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        106.1.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15107 (0x3b03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:47:59 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5824C69A0CEC16C7CE3D665A47650B65E820C8AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:dc:57:05:5c:9b:e5:28:d5:9d:c3:66:d0:
                    16:dd:ce:23:25:89:f1:cd:ad:6c:df:81:61:08:75:
                    63:88:a6:2f:65:8e:b6:b8:29:30:7d:f7:ad:a2:49:
                    04:ea:ba:07:bf:a0:ab:06:a2:14:4f:9d:58:1a:6a:
                    d3:e4:23:42:95:e4:25:0d:19:b6:b2:05:9f:00:e5:
                    8c:fb:5f:a5:52:81:ff:50:a1:eb:75:9f:a4:6a:b9:
                    ea:47:40:3f:69:66:af:2a:a9:69:ba:02:0a:7b:e9:
                    eb:ad:39:b4:9c:90:9c:11:02:70:de:b9:03:1f:b2:
                    89:f4:00:7d:aa:62:09:ec:ab:1e:9b:30:e7:7c:e9:
                    49:4d:12:e2:5c:d8:03:e2:53:f1:e3:30:1b:78:90:
                    a4:6b:7a:5e:72:88:24:bb:f9:41:31:7c:e4:86:89:
                    af:61:2e:b6:da:62:66:af:66:a8:b6:dc:a9:9f:38:
                    45:7e:f1:f5:6f:66:76:13:ed:48:05:87:6f:82:ca:
                    a4:84:75:bb:78:14:33:c6:9a:49:1e:01:f2:d6:01:
                    dd:d8:ca:47:4a:2a:9d:37:b1:47:76:6f:e7:c0:ea:
                    d3:91:57:ca:21:cb:26:5c:c5:b3:10:09:e6:4d:17:
                    24:9a:a2:fb:67:69:5b:19:75:5c:df:b8:fa:21:4e:
                    72:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:24:C6:9A:0C:EC:16:C7:CE:3D:66:5A:47:65:0B:65:E8:20:C8:AE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WCTGmgzsFsfOPWZaR2ULZeggyK4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:80:db:53:b1:94:83:c2:05:68:5d:80:ef:4e:a2:fd:d2:17:
         d2:3e:f3:e2:c7:ef:58:df:4e:f5:32:80:ca:db:61:e5:10:b0:
         3d:9c:25:13:6f:77:a2:c9:48:e5:ed:03:82:ac:ae:f6:6a:5c:
         b6:78:95:91:03:30:49:3a:97:d9:0c:cb:0e:dc:9a:9c:b4:9d:
         82:c1:a4:28:35:42:c3:76:cc:6f:65:74:3a:76:f9:86:47:9a:
         e1:b7:42:71:aa:50:77:91:f5:82:59:f6:cd:ee:02:e1:1e:f5:
         9f:1c:fc:e7:b1:bd:39:1c:1d:fa:fb:55:a9:7c:d0:26:79:06:
         43:b8:27:63:7a:29:dd:61:5a:76:00:c4:c7:af:fc:a6:ab:ce:
         87:62:34:f4:23:96:05:94:fe:26:a9:27:1b:4e:47:97:1f:64:
         bb:80:aa:a6:b8:cc:55:2a:db:42:cb:97:43:82:85:46:11:1e:
         c1:3f:c1:5b:04:6b:35:be:30:5b:21:d8:b6:a5:51:8b:61:43:
         ff:95:a3:2f:1c:c1:1b:5e:0c:ca:e6:89:f8:08:f3:f8:7d:80:
         fd:b7:59:31:e2:0d:0e:75:a1:10:bc:14:ad:88:ce:48:33:8d:
         e1:ba:f9:50:27:a4:f3:4e:8d:2b:dd:58:74:56:84:5a:1e:c6:
         2c:7b:f6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:23:16 2025 by rpki-client