Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_LzfzQ7-axudiroLyS8E-0mF70g.roa
File:                     _LzfzQ7-axudiroLyS8E-0mF70g.roa (raw, json)
Hash identifier:          OOTGzqA0FHYS+fZg62/g7Vx4rSWfTUZYYzI/6dOadG0=
Subject key identifier:   FC:BC:DF:CD:0E:FE:6B:1B:9D:8A:BA:0B:C9:2F:04:FB:49:85:EF:48
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3A69
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_LzfzQ7-axudiroLyS8E-0mF70g.roa
Signing time:             Fri 22 Aug 2025 08:47:19 +0000
ROA not before:           Fri 22 Aug 2025 08:47:19 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        123.192.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14953 (0x3a69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:47:19 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=FCBCDFCD0EFE6B1B9D8ABA0BC92F04FB4985EF48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:d0:8d:1f:a2:4a:d1:b9:97:42:35:03:ca:
                    6f:d7:65:ff:f3:a4:36:b7:39:d0:e5:1b:4b:3b:94:
                    43:95:9b:48:ba:69:9d:d7:1f:b8:4c:f8:ce:2d:43:
                    da:ea:76:d8:58:eb:34:6f:6e:8e:79:39:4f:4f:75:
                    fb:e0:27:7a:0d:4c:72:cb:f8:40:5c:bc:12:f6:6f:
                    f8:9d:a8:8a:1d:80:49:0d:54:9e:d9:3c:ec:71:0f:
                    b6:e5:92:fb:5c:4d:a0:33:74:93:25:04:f9:b2:e5:
                    22:0d:9e:ef:16:30:3f:66:79:1f:22:9b:b9:df:c7:
                    5b:03:c8:72:92:c6:3a:a2:bb:ad:75:d1:c8:30:23:
                    f6:ed:d5:ee:71:80:14:6f:08:2b:ce:dc:86:59:af:
                    4b:54:75:e9:3f:b2:97:51:6e:70:9c:67:cb:9c:c7:
                    78:58:95:e7:41:8c:ef:14:68:58:2c:5d:3d:41:41:
                    fb:ac:c3:71:a5:54:46:b9:7b:c7:14:3a:52:b0:71:
                    6d:d6:fa:63:a8:4f:42:a7:a3:72:0d:dc:75:04:82:
                    60:a7:85:fe:90:06:53:6f:e7:e5:9e:d2:7e:99:2d:
                    b6:81:03:b2:93:76:24:ec:50:50:6c:0c:91:87:25:
                    4a:e7:30:12:57:0e:ac:70:21:b3:23:2a:60:bf:b1:
                    e6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BC:DF:CD:0E:FE:6B:1B:9D:8A:BA:0B:C9:2F:04:FB:49:85:EF:48
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_LzfzQ7-axudiroLyS8E-0mF70g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:9e:ad:0e:58:6c:58:d1:90:dd:bd:71:65:14:ac:ec:dc:5f:
         88:0a:18:89:24:df:49:55:b9:93:ad:93:1d:d0:3a:92:23:f7:
         54:58:03:0e:03:15:b8:79:dd:eb:3c:fb:a1:df:01:9f:68:fb:
         ba:82:06:de:13:f0:fe:28:b2:8b:ac:27:88:3d:1d:ca:e8:b9:
         d6:b2:59:87:48:4e:20:5e:ec:2d:05:a3:c1:92:d8:3a:7a:c4:
         a8:75:f8:41:d6:e0:0d:0d:d6:e4:9f:42:6e:ce:6a:5a:cd:db:
         bf:a8:bf:72:e1:0d:cd:3d:bb:7d:99:43:b4:1d:e2:fd:5e:fe:
         88:4b:26:26:68:8c:57:ee:1d:d2:e0:ba:14:c2:26:c7:e8:d1:
         60:d0:36:58:ca:3a:c6:58:c5:7c:8b:de:21:70:07:4c:10:f2:
         33:6e:44:39:24:4b:ff:d0:35:7f:9a:35:74:00:05:01:87:e0:
         a9:00:42:74:03:62:70:0b:7d:02:b1:50:65:7e:9a:9f:d8:fa:
         40:7d:72:95:02:e0:1a:3a:32:86:2f:c0:bd:7d:c8:25:54:b9:
         38:e1:20:a8:65:2f:1a:09:20:6d:e7:b0:94:b2:35:bb:4d:6f:
         af:46:ef:29:bf:ce:7c:bd:1b:76:28:21:8d:98:34:7c:4c:8a:
         35:16:2b:12
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICOmkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw
ODQ3MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZDQkNERkNEMEVGRTZC
MUI5RDhBQkEwQkM5MkYwNEZCNDk4NUVGNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKbtCNH6JK0bmXQjUDym/XZf/zpDa3OdDlG0s7lEOVm0i6aZ3X
H7hM+M4tQ9rqdthY6zRvbo55OU9PdfvgJ3oNTHLL+EBcvBL2b/idqIodgEkNVJ7Z
POxxD7blkvtcTaAzdJMlBPmy5SINnu8WMD9meR8im7nfx1sDyHKSxjqiu6110cgw
I/bt1e5xgBRvCCvO3IZZr0tUdek/spdRbnCcZ8ucx3hYledBjO8UaFgsXT1BQfus
w3GlVEa5e8cUOlKwcW3W+mOoT0Kno3IN3HUEgmCnhf6QBlNv5+We0n6ZLbaBA7KT
diTsUFBsDJGHJUrnMBJXDqxwIbMjKmC/seYPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/LzfzQ7+axudiroLyS8E+0mF70gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19MemZ6UTctYXh1ZGlyb0x5
UzhFLTBtRjcwZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
wHAwDQYJKoZIhvcNAQELBQADggEBAESerQ5YbFjRkN29cWUUrOzcX4gKGIkk30lV
uZOtkx3QOpIj91RYAw4DFbh53es8+6HfAZ9o+7qCBt4T8P4osousJ4g9Hcrouday
WYdITiBe7C0Fo8GS2Dp6xKh1+EHW4A0N1uSfQm7OalrN27+ov3LhDc09u32ZQ7Qd
4v1e/ohLJiZojFfuHdLguhTCJsfo0WDQNljKOsZYxXyL3iFwB0wQ8jNuRDkkS//Q
NX+aNXQABQGH4KkAQnQDYnALfQKxUGV+mp/Y+kB9cpUC4Bo6MoYvwL19yCVUuTjh
IKhlLxoJIG3nsJSyNbtNb69G7ym/zny9G3YoIY2YNHxMijUWKxI=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:24:09 2025 by rpki-client