Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e-mPYqRxNxZDJGJMtjnT70hACFo.roa
File:                     e-mPYqRxNxZDJGJMtjnT70hACFo.roa (raw, json)
Hash identifier:          M77jtzRTm3Ybv7k2MFoMLWUxIx6OXP5kU40H8t53sug=
Subject key identifier:   7B:E9:8F:62:A4:71:37:16:43:24:62:4C:B6:39:D3:EF:48:40:08:5A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3ABA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e-mPYqRxNxZDJGJMtjnT70hACFo.roa
Signing time:             Fri 22 Aug 2025 08:47:42 +0000
ROA not before:           Fri 22 Aug 2025 08:47:42 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        118.232.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15034 (0x3aba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:47:42 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=7BE98F62A47137164324624CB639D3EF4840085A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:71:1b:d8:08:72:1f:ef:e5:64:e4:54:de:2f:
                    c4:02:0e:e0:06:84:30:a2:c2:91:98:16:83:0e:7e:
                    db:63:6e:49:78:b6:82:51:3c:9e:63:a4:bf:c7:a7:
                    6b:af:51:ac:6a:3f:bd:42:bf:bd:40:1f:9f:03:60:
                    62:82:0a:6c:1a:d7:5c:d2:84:22:a1:77:0c:62:e0:
                    dd:08:d9:4c:03:7d:5f:07:55:c6:1d:38:ca:f3:09:
                    4d:65:54:4e:95:f9:bf:fa:ec:c1:65:bc:6e:80:36:
                    b4:c5:ea:3d:d0:c3:43:58:06:61:25:3f:fc:b1:81:
                    d1:87:a9:1b:b0:37:d3:f4:47:85:07:49:90:50:43:
                    95:a1:07:80:eb:c1:8d:05:a3:cf:db:71:da:1d:81:
                    c6:48:0a:ca:2b:fb:55:eb:bf:77:31:e8:c7:b6:89:
                    ef:f1:de:ef:77:8b:d7:c9:46:5b:19:82:6a:50:8c:
                    36:29:c7:d1:2f:a6:fc:57:03:58:a8:ff:92:59:54:
                    9e:94:35:53:1f:23:94:29:49:20:aa:bb:59:9e:d3:
                    5b:c8:23:f6:ca:70:92:d0:08:0c:83:7b:f1:28:b9:
                    25:e5:ea:d7:02:0e:36:71:99:78:15:2f:22:7d:88:
                    df:94:e6:7f:56:8d:7d:48:67:e2:7b:b3:7e:5d:ab:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E9:8F:62:A4:71:37:16:43:24:62:4C:B6:39:D3:EF:48:40:08:5A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e-mPYqRxNxZDJGJMtjnT70hACFo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:60:d6:e9:91:8c:5e:f6:d9:8e:0c:46:f4:47:7e:35:33:67:
         30:c7:44:f0:d7:2a:9d:65:31:07:f5:4d:d5:eb:33:4d:d6:2f:
         6f:15:f2:bf:4f:6e:61:c4:9d:8f:d2:57:2b:80:83:29:35:41:
         12:31:73:11:45:8b:72:a5:80:aa:45:13:c9:35:93:06:25:86:
         cd:63:41:01:d9:d0:09:a6:22:54:26:7e:25:83:9a:ef:74:d9:
         43:18:83:42:41:64:23:5d:fa:dd:91:fa:b2:d6:ac:f7:dd:47:
         87:2a:59:30:f7:c3:13:be:3b:34:bd:94:7b:4e:d8:e9:5c:3b:
         1c:9a:41:1d:fa:dc:4e:60:25:98:eb:eb:fa:3a:f2:bc:09:ec:
         a4:46:73:61:4e:da:19:ee:7c:a9:c1:16:d7:ef:86:a5:5a:d3:
         af:59:bf:59:d0:e6:ee:59:2c:9d:bc:c6:a2:6b:95:66:75:d8:
         57:68:ff:9d:87:2d:ca:bb:37:c2:09:d1:80:25:ce:22:52:bd:
         8e:b9:36:cf:33:c1:65:4f:1d:cf:e0:1c:38:3b:47:95:28:8e:
         9e:57:1d:03:fd:54:39:5c:06:d8:fb:f7:ac:4e:d1:9e:37:9a:
         dc:59:de:7f:f9:09:77:71:bf:00:fd:2e:f9:7a:e5:72:12:e2:
         d1:1f:48:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:24:10 2025 by rpki-client