Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e0LcJ0B3eLX3UyMJccgbXHd85Oc.roa
File:                     e0LcJ0B3eLX3UyMJccgbXHd85Oc.roa (raw, json)
Hash identifier:          1hRjUNfuEUC56NFLyuvsgiBAiFDotQXUCIP7YwWtzn8=
Subject key identifier:   7B:42:DC:27:40:77:78:B5:F7:53:23:09:71:C8:1B:5C:77:7C:E4:E7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       395E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e0LcJ0B3eLX3UyMJccgbXHd85Oc.roa
Signing time:             Fri 22 Aug 2025 08:46:14 +0000
ROA not before:           Fri 22 Aug 2025 08:46:14 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9924
IP address blocks:        123.193.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14686 (0x395e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:46:14 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=7B42DC27407778B5F753230971C81B5C777CE4E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4c:ed:9e:d7:13:ba:b5:69:ae:77:9e:68:95:
                    0d:65:7f:e0:b1:32:a8:44:dd:7a:61:a7:09:2c:5c:
                    c5:d5:8e:79:07:e3:30:20:b2:1f:0f:25:df:96:82:
                    54:2d:46:77:68:b7:15:38:39:df:f4:5e:e1:74:86:
                    a9:d1:50:33:e3:f9:ce:e0:91:77:68:7e:85:7f:7f:
                    22:6a:f6:9a:3b:42:47:a5:df:5e:19:80:52:f8:f3:
                    52:26:09:e5:66:f9:ae:9b:da:bf:ed:80:1b:6c:45:
                    7f:f3:57:f8:5b:24:af:ab:c0:7c:d0:66:6b:62:23:
                    5f:ac:cb:a0:d2:62:54:94:fa:e3:33:2e:f4:b1:4b:
                    2b:2c:72:c0:28:0a:30:a6:56:4b:d3:5b:29:d4:16:
                    0d:78:0e:04:2e:01:ce:f2:84:8d:6d:4a:f7:2f:1b:
                    7d:fb:99:b3:e8:69:9f:b9:1d:a0:e0:9e:61:43:26:
                    76:5f:15:79:4a:7c:05:15:22:70:ca:7d:fa:42:af:
                    c0:44:af:1b:7e:2d:94:f3:fd:ea:80:0e:a2:2b:07:
                    cc:7b:03:85:96:2a:ff:9f:4c:f4:c3:5c:e3:8a:61:
                    18:37:cb:f0:78:da:44:01:e2:68:7e:4f:11:2a:b3:
                    e0:86:a3:7b:8a:7c:83:17:e8:6e:78:43:47:0a:e5:
                    7e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:42:DC:27:40:77:78:B5:F7:53:23:09:71:C8:1B:5C:77:7C:E4:E7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e0LcJ0B3eLX3UyMJccgbXHd85Oc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:f8:0c:c0:3f:50:83:99:96:65:f1:3e:87:99:4a:64:55:6e:
         f4:75:fd:99:a6:67:b0:c2:a5:bb:5d:05:f0:3d:70:69:15:c5:
         78:6b:74:f2:9d:38:e0:8e:cf:9f:5d:81:dc:0c:51:77:d3:95:
         e9:82:a7:fb:8e:76:0e:13:9f:8b:e1:56:e6:0d:44:f7:88:74:
         40:8e:ad:e6:72:84:b6:11:54:56:7d:e7:25:91:72:40:c6:3e:
         8f:14:ff:ec:bd:88:b5:99:eb:b0:79:d1:3b:86:ac:25:8e:5a:
         5e:ed:8d:8e:6a:1a:54:91:8c:d5:11:e6:ef:02:d9:a6:e4:6e:
         de:3f:cd:47:6d:2d:78:74:90:6f:67:29:ec:bd:9b:64:de:b9:
         b9:19:63:3d:5a:c5:25:42:70:ad:0f:86:6d:0e:5f:69:af:be:
         94:f3:82:e8:9b:a2:13:17:78:01:f6:4e:57:04:03:e3:51:8d:
         8c:e5:58:56:26:07:eb:2b:8a:6f:7b:3f:1b:f2:41:f6:f1:25:
         93:7c:cd:a9:b0:da:0b:86:62:35:d3:9a:4d:73:39:44:8f:92:
         9c:76:4c:7f:c4:90:92:89:e9:c6:ff:6c:d2:ba:05:1a:32:5b:
         e9:95:01:19:60:a7:4f:9a:29:a2:c9:64:b5:e6:58:9b:2a:4d:
         30:0b:16:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:28:24 2025 by rpki-client