Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l_0mz1UmGq76EQpfVa_hebtcyd0.roa
File:                     l_0mz1UmGq76EQpfVa_hebtcyd0.roa (raw, json)
Hash identifier:          1aoXOHAO7yj34H8pVK6Xs7eWqhe4g30nCrgVD4HvZlE=
Subject key identifier:   97:FD:26:CF:55:26:1A:AE:FA:11:0A:5F:55:AF:E1:79:BB:5C:C9:DD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       390B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l_0mz1UmGq76EQpfVa_hebtcyd0.roa
Signing time:             Fri 22 Aug 2025 08:45:53 +0000
ROA not before:           Fri 22 Aug 2025 08:45:53 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        118.232.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14603 (0x390b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:45:53 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=97FD26CF55261AAEFA110A5F55AFE179BB5CC9DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:4a:50:d2:d4:3f:6c:28:dd:cc:c9:ed:f0:
                    ce:44:c2:0f:e2:6c:20:b3:cd:cf:0f:1f:f8:ff:7e:
                    d7:67:3e:94:52:2d:a5:ec:da:a8:87:c3:7b:bb:54:
                    05:24:36:b7:2c:b3:31:ff:76:44:ed:07:e3:23:a2:
                    8c:40:9f:cb:19:6c:81:39:d0:5e:97:5d:d0:30:74:
                    4f:21:26:34:6c:db:ac:5b:5b:43:77:e4:78:32:ff:
                    33:ad:8f:ad:fd:8a:e4:64:d3:59:63:9b:28:4d:f3:
                    46:82:1d:fb:f2:07:b2:ed:01:b6:d7:db:61:22:b2:
                    f4:6b:d6:a0:e3:51:3c:f0:08:5b:41:84:84:58:d2:
                    aa:96:df:7f:c2:8c:f9:f4:70:6e:2d:2d:9a:1f:45:
                    d8:e7:28:91:75:d8:65:b7:4d:4f:6f:8e:36:e6:96:
                    60:65:05:aa:76:60:fb:3c:90:e9:76:92:88:22:a6:
                    84:a3:11:e2:bd:52:52:e1:7b:60:c1:f5:25:03:d5:
                    f3:78:33:f8:90:10:4a:a5:1f:05:3e:d0:13:93:12:
                    90:9e:81:26:29:fb:cb:7c:e1:66:a9:9f:42:8a:cb:
                    7f:b7:9f:d6:2e:0f:c7:9b:86:02:f3:53:c1:40:5d:
                    98:80:6e:89:50:7b:e4:ac:ed:80:ac:0c:67:a6:c8:
                    be:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FD:26:CF:55:26:1A:AE:FA:11:0A:5F:55:AF:E1:79:BB:5C:C9:DD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l_0mz1UmGq76EQpfVa_hebtcyd0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:bd:2d:00:23:51:2f:af:c1:98:4f:59:57:33:7d:d1:57:ee:
         bc:a1:8a:6f:8e:7c:03:c1:99:96:2f:02:6e:52:ee:cc:b6:4f:
         a0:42:55:9b:44:ef:b5:be:c8:40:b2:b6:f5:85:2d:99:e1:24:
         87:a8:27:ac:bf:a8:f9:58:3b:eb:b1:a8:5b:62:3a:72:81:ae:
         b7:8e:fb:39:e0:df:32:5e:68:57:3d:96:56:f1:99:5e:a2:c2:
         9a:4d:4c:34:10:b5:95:f8:6b:52:21:54:ce:1b:01:55:c8:4c:
         4d:58:d6:1e:c6:36:42:6a:33:d3:15:41:88:86:20:a9:66:45:
         c7:bb:78:5f:50:a6:e4:03:23:15:29:cb:2b:cb:4d:52:fe:b4:
         ed:a1:ea:10:00:47:35:ab:40:57:44:c6:55:8a:e7:d9:53:a3:
         83:4c:7e:46:88:65:91:98:38:7b:04:44:ce:a6:07:c8:b1:26:
         d8:a2:d4:70:7d:bb:66:f4:78:75:08:65:2a:b1:de:19:94:5a:
         1b:d3:82:d1:66:c5:be:52:f6:51:7e:9d:ed:3d:86:c7:9d:f8:
         29:61:7c:51:94:c2:de:b8:44:af:12:d2:da:c1:58:d1:a6:db:
         08:d2:55:c1:da:9f:77:ae:92:70:9d:14:b3:b9:2a:31:22:fa:
         0d:47:0d:cb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICOQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw
ODQ1NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk3RkQyNkNGNTUyNjFB
QUVGQTExMEE1RjU1QUZFMTc5QkI1Q0M5REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwmkpQ0tQ/bCjdzMnt8M5Ewg/ibCCzzc8PH/j/ftdnPpRSLaXs
2qiHw3u7VAUkNrcsszH/dkTtB+MjooxAn8sZbIE50F6XXdAwdE8hJjRs26xbW0N3
5Hgy/zOtj639iuRk01ljmyhN80aCHfvyB7LtAbbX22EisvRr1qDjUTzwCFtBhIRY
0qqW33/CjPn0cG4tLZofRdjnKJF12GW3TU9vjjbmlmBlBap2YPs8kOl2kogipoSj
EeK9UlLhe2DB9SUD1fN4M/iQEEqlHwU+0BOTEpCegSYp+8t84Wapn0KKy3+3n9Yu
D8ebhgLzU8FAXZiAbolQe+Ss7YCsDGemyL7tAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUl/0mz1UmGq76EQpfVa/hebtcyd0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xfMG16MVVtR3E3NkVRcGZW
YV9oZWJ0Y3lkMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2
6E4wDQYJKoZIhvcNAQELBQADggEBADS9LQAjUS+vwZhPWVczfdFX7ryhim+OfAPB
mZYvAm5S7sy2T6BCVZtE77W+yECytvWFLZnhJIeoJ6y/qPlYO+uxqFtiOnKBrreO
+zng3zJeaFc9llbxmV6iwppNTDQQtZX4a1IhVM4bAVXITE1Y1h7GNkJqM9MVQYiG
IKlmRce7eF9QpuQDIxUpyyvLTVL+tO2h6hAARzWrQFdExlWK59lTo4NMfkaIZZGY
OHsERM6mB8ixJtii1HB9u2b0eHUIZSqx3hmUWhvTgtFmxb5S9lF+ne09hsed+Clh
fFGUwt64RK8S0trBWNGm2wjSVcHan3euknCdFLO5KjEi+g1HDcs=
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:49 2025 by rpki-client