Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/flFDJKw3jHvRECsLNO_QPbEvu2s.roa
File:                     flFDJKw3jHvRECsLNO_QPbEvu2s.roa (raw, json)
Hash identifier:          +uZsCp7psCBqWn5bNH39xt4zlbIM/mOa+g096AWFukA=
Subject key identifier:   7E:51:43:24:AC:37:8C:7B:D1:10:2B:0B:34:EF:D0:3D:B1:2F:BB:6B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       38A4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/flFDJKw3jHvRECsLNO_QPbEvu2s.roa
Signing time:             Fri 22 Aug 2025 08:45:29 +0000
ROA not before:           Fri 22 Aug 2025 08:45:29 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        123.195.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14500 (0x38a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:45:29 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=7E514324AC378C7BD1102B0B34EFD03DB12FBB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fb:13:24:dd:35:1f:bd:00:eb:e9:74:5b:0e:
                    af:57:93:94:90:4e:d9:70:47:9f:71:51:ed:e8:09:
                    8a:00:7f:3b:08:9a:de:4b:9a:30:c2:95:21:d9:6b:
                    42:7b:7f:d5:db:78:f7:7e:bb:1b:e8:38:19:52:ab:
                    ff:3c:8e:7a:77:7a:0f:48:4b:93:0e:57:7c:7c:a5:
                    fa:f0:f6:9e:02:aa:83:cc:d4:ff:d9:9c:58:be:0c:
                    01:a7:e8:44:e2:84:5e:3f:ec:c6:5b:df:3f:1c:bd:
                    0b:49:02:71:9d:40:89:a4:ff:5f:07:38:24:9a:e1:
                    96:01:47:4c:27:b8:9c:fd:df:58:5b:fe:ed:b9:cf:
                    9c:e7:5c:a7:de:c5:6f:af:a0:08:3a:85:c9:8a:b4:
                    33:fd:64:b0:9b:0e:d5:64:03:f4:1b:0f:fa:6e:31:
                    1c:e1:a2:ea:42:4e:f1:99:05:e5:a3:04:94:1f:b8:
                    28:5a:b2:bc:8a:24:10:a1:37:62:aa:7e:d2:37:1d:
                    f3:e9:34:9b:4f:62:df:82:d7:c9:78:65:94:88:05:
                    e6:88:30:f1:21:41:ea:f8:f5:fe:32:a3:e5:05:10:
                    a7:c3:47:9d:fa:53:d0:8f:23:7d:55:b3:46:7e:c1:
                    67:fe:dd:bc:cd:74:23:62:32:ca:bf:15:9d:7e:44:
                    57:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:51:43:24:AC:37:8C:7B:D1:10:2B:0B:34:EF:D0:3D:B1:2F:BB:6B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/flFDJKw3jHvRECsLNO_QPbEvu2s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:6c:67:e9:53:60:fb:43:01:96:fe:7d:57:63:06:94:96:7c:
         dd:30:e6:67:90:e5:ce:da:94:e7:27:06:06:6c:35:41:e4:6f:
         ae:89:26:a5:e2:20:53:82:59:1d:6a:39:70:af:5a:d6:36:d8:
         ba:8b:8b:b3:35:c3:27:94:10:da:d6:01:95:de:46:d6:06:df:
         e7:61:3e:11:53:a0:5f:05:5b:ed:3e:22:76:df:af:92:46:8e:
         08:28:16:6d:46:d1:34:ed:a5:a9:1f:6e:eb:0c:f8:50:33:53:
         5e:a5:1b:d6:ad:04:dd:f9:1e:4f:b1:96:c4:c1:19:12:23:63:
         9c:ba:0d:98:32:d0:1d:c5:89:f9:9e:65:37:f2:3c:a6:53:4b:
         6b:1d:6e:d6:71:05:54:4c:07:08:69:6e:7a:05:92:d0:89:34:
         90:76:75:de:25:8d:49:0b:fb:75:98:ea:fc:33:bd:35:f2:1e:
         58:32:02:98:87:c1:d1:ae:78:5c:27:38:88:9a:0b:73:d7:ce:
         56:42:4c:87:9a:6a:26:cc:5a:0e:00:cd:ad:43:59:02:90:cd:
         09:8c:86:94:92:6c:dc:86:0e:51:0d:c7:df:cf:70:d4:22:a7:
         2a:4b:3e:f0:d6:32:f0:c8:47:93:00:63:72:42:ec:1a:e3:af:
         96:5d:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:32:08 2025 by rpki-client