Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fBxtAj6pHePd6bVkZSMLzjYimcw.roa
File:                     fBxtAj6pHePd6bVkZSMLzjYimcw.roa (raw, json)
Hash identifier:          qI4Z4PB/OSIlszuVFTf1c6FXVpk/QtpxQRf1mNxbeqs=
Subject key identifier:   7C:1C:6D:02:3E:A9:1D:E3:DD:E9:B5:64:65:23:0B:CE:36:22:99:CC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3B06
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fBxtAj6pHePd6bVkZSMLzjYimcw.roa
Signing time:             Fri 22 Aug 2025 08:48:00 +0000
ROA not before:           Fri 22 Aug 2025 08:48:00 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15110 (0x3b06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:48:00 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=7C1C6D023EA91DE3DDE9B56465230BCE362299CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:db:ca:28:f3:11:db:d2:4b:fa:e6:e5:9d:ac:
                    73:a2:5c:4a:00:e1:0b:8a:21:07:bc:0e:15:fa:bd:
                    90:8d:c2:cb:0a:82:11:2b:be:37:cc:4a:1e:64:42:
                    0a:50:f6:aa:33:3f:2e:e3:bd:b7:2b:1e:48:4b:8b:
                    c2:2a:45:c1:72:be:0c:dd:5b:2a:35:80:d2:4a:a0:
                    9b:64:71:d0:a6:13:b4:fb:79:ac:1f:68:e5:73:1e:
                    6f:a6:55:ce:f1:b7:15:6f:76:4b:5d:ec:0f:59:19:
                    13:2a:86:6f:36:1b:a3:7c:aa:e0:7f:f8:57:fe:0b:
                    c5:48:14:38:95:6b:2d:63:10:4f:ff:c5:0d:5d:3c:
                    a8:25:8c:66:8d:c6:39:99:7f:d0:1f:03:1b:b6:7f:
                    15:c2:40:1f:b7:90:98:dc:42:e4:18:81:ef:58:ab:
                    9f:79:43:cb:03:7c:84:09:e4:57:d0:17:f2:66:56:
                    bf:73:d8:11:c7:83:75:73:54:69:19:b8:cc:9b:22:
                    f3:54:71:20:ff:aa:9b:1e:88:e2:48:93:08:07:97:
                    25:ee:40:66:96:29:a8:c2:f4:05:28:2c:af:95:f1:
                    6e:c8:fd:38:15:f9:93:65:4b:43:f4:56:4a:9e:30:
                    1a:81:3c:ed:36:5e:c0:49:d1:7e:bc:45:66:27:ff:
                    96:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1C:6D:02:3E:A9:1D:E3:DD:E9:B5:64:65:23:0B:CE:36:22:99:CC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fBxtAj6pHePd6bVkZSMLzjYimcw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff09::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:b6:f1:ac:60:71:de:22:a8:48:48:aa:16:27:90:23:47:4f:
         25:fc:88:0c:7a:4a:07:50:0c:ad:40:c0:c2:bd:39:8d:7d:24:
         73:95:a2:77:63:43:0c:aa:5d:15:35:cc:fb:90:16:1d:60:92:
         4b:ff:29:3a:24:12:72:e0:66:06:f0:04:d2:14:f4:cc:fe:fe:
         e3:b6:05:db:37:52:16:95:c3:86:8c:2a:6b:41:cb:33:39:14:
         85:34:77:12:ef:a8:76:53:f2:21:42:03:65:ee:f3:24:c2:3f:
         53:67:3b:2e:06:88:02:88:70:d6:7d:40:06:59:98:18:55:78:
         d1:1e:9f:ec:06:a5:23:bf:4a:48:7a:77:0c:93:08:40:52:67:
         9c:75:89:9b:99:8c:d6:25:69:05:02:39:5f:c4:17:50:d1:9e:
         83:ea:33:c4:14:af:c6:4f:36:c1:22:34:3b:aa:9a:06:58:9f:
         0d:96:18:bc:e5:9e:58:99:45:11:64:47:b2:80:17:ca:92:d6:
         e6:99:7b:66:bc:b3:a7:f8:8e:3e:e7:28:d4:48:ea:0c:57:0a:
         20:48:06:de:a6:4b:91:41:60:c6:65:7a:02:65:e2:2d:55:d2:
         48:3f:d0:78:77:51:6e:e1:e9:ee:0a:ac:48:a4:c4:3f:86:d2:
         47:19:81:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:59 2025 by rpki-client