Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WQC7i8p5BNXt03IWNzRLVBcrodA.roa
File:                     WQC7i8p5BNXt03IWNzRLVBcrodA.roa (raw, json)
Hash identifier:          D6EnQSys0a0vPyhmSjjE2qcqB0tz+aNmn8FwG6Ge3J4=
Subject key identifier:   59:00:BB:8B:CA:79:04:D5:ED:D3:72:16:37:34:4B:54:17:2B:A1:D0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3A5F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WQC7i8p5BNXt03IWNzRLVBcrodA.roa
Signing time:             Fri 22 Aug 2025 08:47:17 +0000
ROA not before:           Fri 22 Aug 2025 08:47:17 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        106.1.184.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14943 (0x3a5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:47:17 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5900BB8BCA7904D5EDD3721637344B54172BA1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:31:6a:8f:3e:8b:7e:52:ac:bd:c7:7e:b5:bf:
                    0f:c0:93:8f:d1:e6:9f:c1:65:45:30:fe:af:ca:b8:
                    52:ab:a6:47:38:59:99:b2:13:fd:79:b0:0a:77:ea:
                    bf:77:62:b5:d7:02:e7:25:e6:a9:51:f0:16:2a:97:
                    8b:58:47:be:1d:c7:bc:21:45:2b:bf:c6:81:9b:0b:
                    a1:10:78:7f:bd:2d:f5:32:33:d5:f1:ba:3b:20:89:
                    bf:82:b3:d9:f2:99:54:f9:02:50:a6:2e:94:0e:01:
                    16:3c:65:12:9b:57:d2:9e:24:d9:f7:ae:ac:ff:23:
                    0d:17:0f:b7:5e:29:5a:77:09:f5:41:f0:80:a8:ac:
                    ff:5c:34:1c:f8:00:aa:0f:d0:a3:dd:b3:5f:9e:22:
                    2d:64:02:08:3a:33:68:0a:d5:b9:80:81:08:f9:83:
                    e3:cd:f7:3c:00:fc:08:62:5d:49:78:7f:80:40:1d:
                    e7:c0:d8:0b:4d:70:6e:0b:90:70:7b:00:9c:31:06:
                    54:28:77:20:92:e4:06:b1:90:79:30:14:2e:99:78:
                    58:b3:9d:6f:94:38:f7:5b:99:50:05:de:0a:d2:3b:
                    1e:94:78:1b:94:1c:a8:39:5b:56:b1:09:d6:a3:4b:
                    71:27:33:33:20:eb:0d:a3:f2:b4:c3:d0:f8:9f:0e:
                    c9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:00:BB:8B:CA:79:04:D5:ED:D3:72:16:37:34:4B:54:17:2B:A1:D0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WQC7i8p5BNXt03IWNzRLVBcrodA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:d0:14:ee:17:12:8e:63:b1:52:73:c7:f8:a6:2f:8e:bb:24:
         fc:f2:d9:e2:8c:9e:37:a1:e8:f0:b2:a9:50:e3:dc:c4:5d:a8:
         16:bf:06:bc:13:bc:b4:3e:5d:13:b5:b1:91:42:bb:51:1c:c2:
         0f:9f:96:b6:17:4a:89:d4:8c:1c:23:46:00:e7:c0:f0:cb:1c:
         3b:a1:82:17:ae:c5:2e:e2:ea:98:f5:78:dd:f9:29:63:c7:d3:
         bd:e8:07:97:88:94:d1:c7:5e:01:83:9e:2e:45:7d:44:41:60:
         06:13:2d:eb:69:f4:23:db:79:97:5c:81:18:7f:d1:24:c3:11:
         2a:45:bc:d5:f2:cb:12:43:79:e5:77:96:2c:d5:28:8b:88:e4:
         f8:f0:14:6b:1c:58:41:21:3c:0f:24:27:58:b3:35:bd:9e:84:
         d8:e1:23:98:17:0e:34:b2:b6:c3:07:fc:3b:0e:4d:7a:4b:0d:
         4b:9b:8e:9d:41:12:53:6d:1c:00:09:31:e9:02:1f:5a:c0:d9:
         f4:d7:1c:14:14:a5:3e:c2:de:6a:5f:f9:d0:e2:50:89:da:0f:
         4b:a2:0c:91:5e:ee:b4:0d:08:78:cc:e9:2d:8a:64:ce:c0:e4:
         78:75:9c:e6:93:be:82:b8:d7:6b:8e:fb:d7:dd:70:ed:d8:2f:
         81:f6:c3:35
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICOl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw
ODQ3MTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU5MDBCQjhCQ0E3OTA0
RDVFREQzNzIxNjM3MzQ0QjU0MTcyQkExRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWMWqPPot+Uqy9x361vw/Ak4/R5p/BZUUw/q/KuFKrpkc4WZmy
E/15sAp36r93YrXXAucl5qlR8BYql4tYR74dx7whRSu/xoGbC6EQeH+9LfUyM9Xx
ujsgib+Cs9nymVT5AlCmLpQOARY8ZRKbV9KeJNn3rqz/Iw0XD7deKVp3CfVB8ICo
rP9cNBz4AKoP0KPds1+eIi1kAgg6M2gK1bmAgQj5g+PN9zwA/AhiXUl4f4BAHefA
2AtNcG4LkHB7AJwxBlQodyCS5AaxkHkwFC6ZeFiznW+UOPdbmVAF3grSOx6UeBuU
HKg5W1axCdajS3EnMzMg6w2j8rTD0PifDskVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWQC7i8p5BNXt03IWNzRLVBcrodAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dRQzdpOHA1Qk5YdDAzSVdO
elJMVkJjcm9kQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq
AbgwDQYJKoZIhvcNAQELBQADggEBAEjQFO4XEo5jsVJzx/imL467JPzy2eKMnjeh
6PCyqVDj3MRdqBa/BrwTvLQ+XRO1sZFCu1Ecwg+flrYXSonUjBwjRgDnwPDLHDuh
gheuxS7i6pj1eN35KWPH073oB5eIlNHHXgGDni5FfURBYAYTLetp9CPbeZdcgRh/
0STDESpFvNXyyxJDeeV3lizVKIuI5PjwFGscWEEhPA8kJ1izNb2ehNjhI5gXDjSy
tsMH/DsOTXpLDUubjp1BElNtHAAJMekCH1rA2fTXHBQUpT7C3mpf+dDiUInaD0ui
DJFe7rQNCHjM6S2KZM7A5Hh1nOaTvoK412uO+9fdcO3YL4H2wzU=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:23:16 2025 by rpki-client