Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aYHqICgmGlj_ILZQDMsXQOxtQII.roa
File:                     aYHqICgmGlj_ILZQDMsXQOxtQII.roa (raw, json)
Hash identifier:          n0+t/2F7hKu6ZUBds+3k57zvj+UmazRAMdS2j8wYkTg=
Subject key identifier:   69:81:EA:20:28:26:1A:58:FF:20:B6:50:0C:CB:17:40:EC:6D:40:82
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       390E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aYHqICgmGlj_ILZQDMsXQOxtQII.roa
Signing time:             Fri 22 Aug 2025 08:45:54 +0000
ROA not before:           Fri 22 Aug 2025 08:45:54 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        180.177.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14606 (0x390e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:45:54 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=6981EA2028261A58FF20B6500CCB1740EC6D4082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c1:7f:ca:f6:f4:0c:5f:cd:b0:db:52:4b:f4:
                    a2:88:4f:08:c4:0a:83:2b:53:d4:33:85:61:55:81:
                    25:20:44:7e:8f:fb:6e:44:f3:a6:7f:24:7d:97:bc:
                    6c:ca:02:92:ef:20:aa:67:1d:3b:94:f6:32:ed:31:
                    9d:13:72:8a:c9:8c:17:f6:63:6d:5a:6e:e6:78:3b:
                    3c:5e:06:2c:2a:46:ab:91:b0:49:95:c2:15:03:81:
                    d6:37:a2:b0:1a:e4:6b:70:2e:3a:19:07:99:47:9c:
                    be:b0:43:2e:a6:50:09:01:d4:1f:99:b9:fd:da:26:
                    fe:46:f2:3b:c5:52:e7:33:7c:5a:35:aa:db:c2:29:
                    0a:7a:de:e0:e7:2c:e1:bb:dd:14:ed:b1:b6:cb:dc:
                    d6:e4:64:16:3b:e8:4a:f7:97:9d:c9:f5:4a:eb:0d:
                    b8:4f:1e:5c:7f:55:84:98:2a:6d:0b:61:3b:69:a5:
                    e0:cc:57:52:26:35:85:0f:48:fa:a7:49:1a:45:93:
                    53:fb:90:7e:3d:52:74:cf:24:c9:a1:8f:3f:35:b3:
                    a2:12:23:32:8c:c3:f2:db:0b:7f:34:53:10:c3:25:
                    c9:f3:52:47:b2:e8:b1:0f:23:a8:35:49:c5:9f:24:
                    87:68:8e:83:51:da:1c:71:54:f5:64:81:0b:70:ec:
                    40:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:81:EA:20:28:26:1A:58:FF:20:B6:50:0C:CB:17:40:EC:6D:40:82
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aYHqICgmGlj_ILZQDMsXQOxtQII.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:6f:f1:06:09:d7:cd:91:f8:2b:14:63:04:52:9c:df:e8:10:
         38:f0:69:66:1d:00:aa:5d:18:d3:c8:a8:76:00:ea:23:7d:49:
         ab:f3:b1:40:b4:dc:b5:41:49:00:c3:47:2a:c8:a2:df:a4:38:
         4e:32:0c:bc:4d:92:5d:46:88:99:ca:f5:22:6e:ff:b0:b5:a5:
         06:20:45:ad:07:19:16:bf:61:b2:27:4c:11:13:98:ac:33:2e:
         70:3b:b9:fa:a0:96:d9:92:6b:cd:5e:8c:ac:05:eb:9b:c4:0a:
         65:99:cb:3d:97:b2:b1:44:71:92:09:64:db:c2:5a:cc:b8:78:
         8f:9b:1d:d4:df:13:e1:a1:b9:e2:25:48:6e:10:d1:4e:fb:8b:
         e5:7c:8e:fe:db:e2:e1:a7:95:d2:8f:cc:06:4b:f0:20:60:ca:
         82:fb:f7:80:7b:8c:6d:be:57:94:61:d7:fa:c4:9f:c1:30:52:
         4c:48:d0:ee:34:17:fb:8c:f3:8f:48:21:b4:6f:ec:0c:73:20:
         6e:67:a1:7d:9e:04:6c:38:52:ad:bb:fe:ec:1d:59:77:21:11:
         ee:b6:4f:2d:87:b2:f5:7d:26:d1:a0:d3:86:8a:17:de:c6:d2:
         09:3d:ad:56:e6:c8:96:55:75:d7:59:af:8c:38:4c:6e:9a:9a:
         8f:ad:7f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:34:02 2025 by rpki-client