Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mVR22c-APQa4ZYrcR7MMF7MeY9M.roa
File:                     mVR22c-APQa4ZYrcR7MMF7MeY9M.roa (raw, json)
Hash identifier:          Xb8HQfDP7dISsNg2Z8p7765ZKP4EWN9BjAHXz77MCNY=
Subject key identifier:   99:54:76:D9:CF:80:3D:06:B8:65:8A:DC:47:B3:0C:17:B3:1E:63:D3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       399F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mVR22c-APQa4ZYrcR7MMF7MeY9M.roa
Signing time:             Fri 22 Aug 2025 08:46:28 +0000
ROA not before:           Fri 22 Aug 2025 08:46:28 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        123.192.144.192/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14751 (0x399f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:46:28 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=995476D9CF803D06B8658ADC47B30C17B31E63D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:39:51:f0:ff:02:c7:81:fc:79:82:3a:5e:
                    66:93:d3:75:dd:39:e8:79:b4:6f:24:47:cd:1e:97:
                    19:a3:4e:e7:b4:b9:0b:41:9f:da:f4:e1:72:b0:0d:
                    14:c8:5d:29:a8:93:99:c0:22:11:59:69:2c:e3:93:
                    c3:3f:52:b8:36:7d:cb:52:ad:4f:c9:22:1e:7a:e9:
                    e9:a5:47:5e:18:fd:45:d7:75:1e:7b:4c:f1:9d:20:
                    1a:a9:5c:a4:79:1f:6a:4f:47:58:e9:d6:0b:0d:88:
                    a7:b2:1e:3f:35:d5:2c:f8:14:aa:ed:88:9c:9c:85:
                    ae:06:b9:e6:f1:8e:8c:1c:84:0e:77:be:ee:92:4f:
                    43:96:54:79:e6:44:54:6c:84:f5:fd:cc:55:68:00:
                    c3:22:ee:30:fd:9e:42:b6:26:ac:58:bb:5f:f6:da:
                    8f:95:b9:7b:fb:81:2e:31:18:50:7b:e0:3e:a6:2e:
                    96:51:fc:ba:de:ac:33:24:e0:91:95:7b:58:27:2c:
                    35:dd:1a:16:54:c3:11:18:b7:bd:10:1b:a4:93:01:
                    b0:d7:fd:b8:b5:77:34:10:dc:4e:e7:07:75:03:eb:
                    ca:50:c2:f6:dd:91:f6:ff:65:9e:c8:3b:35:0b:0e:
                    fd:51:23:0f:a9:b1:2f:e2:9f:2f:91:4e:45:24:90:
                    d5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:54:76:D9:CF:80:3D:06:B8:65:8A:DC:47:B3:0C:17:B3:1E:63:D3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mVR22c-APQa4ZYrcR7MMF7MeY9M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.144.192/26

    Signature Algorithm: sha256WithRSAEncryption
         07:b5:a8:ef:a7:80:df:9f:98:06:85:21:f2:76:69:e1:e5:d3:
         ca:b7:97:d1:86:9c:62:bc:74:c3:1f:21:e8:ba:83:15:ed:2d:
         bc:f4:c9:de:bf:91:c0:95:c8:24:e6:4a:91:30:ea:01:ca:12:
         f5:8c:16:fd:86:d1:e9:54:ee:64:dd:c9:ef:b6:73:b9:eb:dd:
         b5:44:ce:38:d9:ee:b5:33:83:8a:0a:41:9f:af:0b:78:03:0a:
         03:26:15:62:cf:f3:65:f4:4e:61:87:c2:9e:d3:5a:9a:f7:a0:
         e5:bb:05:7d:2b:e3:b1:d2:64:e9:a7:dd:74:1c:ff:0b:0f:7c:
         31:87:e6:9b:98:c0:af:9c:91:d2:21:2e:3e:10:4e:89:00:85:
         40:bc:e9:89:94:a8:65:5e:28:df:92:0e:d5:2f:f5:7c:46:9b:
         ea:b6:90:03:4a:f8:66:55:27:5d:ce:26:79:07:bd:93:2a:99:
         b7:dc:78:ad:24:d6:4b:ed:51:94:1f:65:dc:c8:43:e7:a8:46:
         3b:4d:1e:64:a1:1f:d9:ae:6b:52:70:ab:f7:64:f5:b5:ed:21:
         44:fc:bb:45:50:1d:fe:df:fd:32:33:fc:75:36:56:a4:4e:2e:
         74:e1:03:6a:a0:0e:b3:97:01:36:b9:f9:28:bd:90:64:fb:d7:
         29:a1:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:47 2025 by rpki-client