Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g5e4TEboee3dmVEPfjAJ0-PRmaM.roa
File:                     g5e4TEboee3dmVEPfjAJ0-PRmaM.roa (raw, json)
Hash identifier:          nS8K6N0gAcVXmlV9nWZ4eJTLieQtyKF7iCoXTzxcQts=
Subject key identifier:   83:97:B8:4C:46:E8:79:ED:DD:99:51:0F:7E:30:09:D3:E3:D1:99:A3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       39A3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g5e4TEboee3dmVEPfjAJ0-PRmaM.roa
Signing time:             Fri 22 Aug 2025 08:46:29 +0000
ROA not before:           Fri 22 Aug 2025 08:46:29 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        180.176.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14755 (0x39a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:46:29 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8397B84C46E879EDDD99510F7E3009D3E3D199A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:c5:28:df:e5:42:cc:c2:c3:f2:46:0a:ea:
                    ce:e0:a4:05:5c:17:a1:43:7d:0e:d0:eb:b0:3b:01:
                    52:eb:01:bb:d6:6c:ac:68:6a:d3:65:e2:bf:8e:21:
                    a7:df:05:86:da:30:08:16:23:50:56:fe:69:9d:63:
                    fa:4b:cf:8e:16:d2:b7:7f:1b:8a:09:39:55:a9:04:
                    a5:f5:80:79:f7:b5:77:0f:d2:52:87:97:ae:b6:82:
                    36:fa:a6:7c:3e:c8:78:07:12:03:32:c8:5a:b6:cf:
                    65:a0:6e:97:c0:d7:0c:ce:04:ae:1f:12:09:4e:36:
                    de:bc:f1:6a:62:f6:1c:05:72:78:e5:6d:17:14:51:
                    e4:c7:9a:5b:43:88:42:36:6f:56:d6:33:39:ca:3b:
                    b3:16:23:c6:35:35:0c:9d:13:33:c1:bd:e5:6b:05:
                    d6:42:1b:34:76:fb:78:9b:01:af:b1:8c:2a:74:27:
                    68:1f:87:fc:01:ec:21:b7:82:65:2c:49:53:2d:d2:
                    63:17:3d:49:38:0e:5e:7c:25:a7:10:d1:dc:49:8b:
                    46:a3:70:25:a4:9c:80:04:c4:3a:a4:75:15:5d:39:
                    ff:ab:ab:fd:62:8c:d5:4d:f9:b0:4f:8f:27:6c:3a:
                    ea:70:48:81:0e:ff:42:93:56:c7:92:87:2c:3f:b8:
                    8f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:97:B8:4C:46:E8:79:ED:DD:99:51:0F:7E:30:09:D3:E3:D1:99:A3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g5e4TEboee3dmVEPfjAJ0-PRmaM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:28:fd:3f:21:eb:dc:27:74:26:6d:fc:11:78:8a:4b:2e:00:
         b2:74:d6:ad:3e:da:1d:6b:af:5c:da:59:fb:a4:6d:e8:cc:ed:
         cc:d0:43:ab:79:34:24:27:f4:e1:17:15:77:b8:59:a6:76:40:
         3d:9c:8e:98:77:0c:d2:ce:8c:03:a9:bc:59:e6:1c:e3:3d:e3:
         6d:44:ed:31:c9:fc:34:4f:7c:ec:0b:de:99:8f:c5:10:61:47:
         60:3c:02:b2:76:9f:85:75:3b:47:96:f3:f2:1e:95:c3:cb:73:
         a7:ec:92:25:95:1a:d8:3a:56:72:b5:a2:7b:e3:db:44:e2:62:
         f6:f5:a5:67:ad:89:66:37:23:df:bf:d9:88:0f:e9:d5:cd:49:
         3f:cc:cd:5b:7b:6f:51:dd:42:a3:84:32:bd:76:6c:56:c9:23:
         5b:13:d7:2f:d3:1f:b9:46:de:ff:1d:ee:6a:a6:e8:ac:10:9f:
         d7:2d:fe:83:2b:f8:df:0e:a8:13:85:10:53:b1:ab:37:81:97:
         45:bf:43:0f:f2:da:73:ca:27:bf:5d:f4:bf:a2:67:7e:a2:37:
         4d:f7:95:94:c7:83:a4:1e:3e:8c:31:c5:1e:d5:c8:43:bc:ce:
         ef:2e:c7:88:b7:ff:55:fa:eb:a8:b8:f0:cf:18:bc:56:d1:a1:
         eb:ae:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:16 2025 by rpki-client