Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLGOAgUDZz1Y65HtRPaS2lgtc5E.roa
File:                     gLGOAgUDZz1Y65HtRPaS2lgtc5E.roa (raw, json)
Hash identifier:          HI34GF5oa3WDcij8X4ulQnMRiRY26XrZTIZECoBSuJ4=
Subject key identifier:   80:B1:8E:02:05:03:67:3D:58:EB:91:ED:44:F6:92:DA:58:2D:73:91
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       38C0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLGOAgUDZz1Y65HtRPaS2lgtc5E.roa
Signing time:             Fri 22 Aug 2025 08:45:35 +0000
ROA not before:           Fri 22 Aug 2025 08:45:35 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9924
IP address blocks:        106.1.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14528 (0x38c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:45:35 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=80B18E020503673D58EB91ED44F692DA582D7391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:46:45:ef:32:03:3f:e5:9c:4c:99:37:d1:
                    77:4d:ca:ed:87:1b:87:f8:64:52:ac:42:0d:03:d2:
                    d6:07:1c:6b:6b:d1:07:d6:e7:2a:4b:6f:93:15:21:
                    b1:58:30:4a:68:52:09:7a:35:08:90:16:68:57:cb:
                    92:88:49:c8:48:e4:1a:8f:32:42:02:4d:9b:54:73:
                    31:1b:16:87:62:cc:2d:04:43:ca:e6:b3:24:f2:ea:
                    5b:bd:8b:0b:b8:ba:1e:e4:1c:80:0b:98:fe:aa:bd:
                    eb:6a:1a:a4:03:fd:24:32:c0:c7:e5:a9:f6:b1:bb:
                    dc:36:b9:a3:ac:4b:8a:c3:50:25:5e:1d:28:f2:63:
                    3c:fa:cd:e4:21:a6:0e:56:68:bd:00:b7:46:5b:36:
                    19:62:23:80:2a:bc:cd:c1:bc:3b:0c:d2:c4:cd:d3:
                    14:91:28:fc:b5:45:63:a5:8f:4b:00:a7:42:ee:07:
                    83:9e:40:dc:29:21:7f:25:9a:19:ea:d5:86:45:87:
                    eb:73:8e:9b:67:c4:f6:03:ac:10:72:50:b1:23:a8:
                    b7:b1:1a:46:2a:dd:ef:57:43:e5:cf:fc:f9:88:53:
                    d0:ec:81:08:81:18:7c:19:02:13:63:5d:f4:ca:29:
                    09:d9:a8:e2:d3:5c:ca:b1:09:bb:23:a1:d6:6f:a9:
                    8e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B1:8E:02:05:03:67:3D:58:EB:91:ED:44:F6:92:DA:58:2D:73:91
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLGOAgUDZz1Y65HtRPaS2lgtc5E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:e6:51:2a:36:b7:33:b8:61:e6:ef:98:ca:37:18:7c:0e:b8:
         f2:45:f6:69:99:24:ab:7b:95:76:1d:cc:be:d3:bd:a0:2e:c2:
         10:32:6a:f5:8b:c0:7b:df:4e:12:e6:8a:9f:50:e2:d3:23:37:
         b4:c8:c1:3b:40:49:83:f9:d8:08:fa:ed:e6:e4:40:20:6e:04:
         e8:aa:a3:f2:64:90:3f:4e:f4:3a:5d:42:b8:7f:1a:01:38:19:
         77:63:84:cc:8c:69:92:ae:83:e9:25:01:51:09:b1:4b:b0:4f:
         3d:32:ac:36:71:d4:0b:56:1e:09:de:0f:74:8e:65:a0:71:c2:
         d6:3c:7c:e8:8d:9d:db:1f:55:10:01:df:44:d1:70:c2:6d:a0:
         ed:84:9f:95:4a:bf:aa:b1:9e:18:17:1c:60:b5:a4:9b:cf:f4:
         c3:e7:6e:89:12:70:ad:98:33:68:f9:c6:cf:c8:30:e3:75:59:
         92:90:41:9e:9e:d7:73:f3:4b:4b:c1:08:ed:19:2e:3f:c1:df:
         24:90:ce:61:b1:8f:bd:a9:0a:3d:b4:c1:95:d5:7d:e2:76:a3:
         2e:c9:3a:2f:81:39:87:0c:fe:49:84:d1:35:21:0c:b6:dc:49:
         d2:1a:dd:e3:94:df:5d:7d:15:09:7c:3b:ff:42:a0:56:c8:00:
         65:73:cb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:23:16 2025 by rpki-client