Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n4S46GAXaPS-2ybFwilYd_Lek8w.roa
File:                     n4S46GAXaPS-2ybFwilYd_Lek8w.roa (raw, json)
Hash identifier:          DPCs3EIYTP1U0pLM9nY7GxQy21u+Ic7oHmLAOaOQr7o=
Subject key identifier:   9F:84:B8:E8:60:17:68:F4:BE:DB:26:C5:C2:29:58:77:F2:DE:93:CC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3942
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n4S46GAXaPS-2ybFwilYd_Lek8w.roa
Signing time:             Fri 22 Aug 2025 08:46:07 +0000
ROA not before:           Fri 22 Aug 2025 08:46:07 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        106.1.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14658 (0x3942)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:46:07 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=9F84B8E8601768F4BEDB26C5C2295877F2DE93CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:b2:93:c6:14:28:a9:a7:43:8e:3e:ee:ad:
                    08:08:49:04:20:4a:89:f5:16:3b:1f:a9:46:2f:cb:
                    d0:48:cc:33:9d:90:54:f5:91:84:c2:a1:11:4c:11:
                    cc:06:5a:0c:35:0f:fa:52:da:82:52:d2:a5:1b:71:
                    c4:26:30:6f:36:6a:5a:09:cb:5b:eb:d8:6c:82:c1:
                    ae:03:c5:18:da:93:0c:90:42:19:4e:89:d0:7e:21:
                    d7:a2:a6:0a:6a:e5:9b:cb:cb:a9:1d:da:72:d9:32:
                    38:f2:15:68:ec:e2:2e:b4:c8:cb:62:2c:60:d0:8a:
                    8e:d6:cc:7b:86:b5:74:53:9f:02:d5:11:01:bf:cf:
                    cf:a5:97:ea:e2:19:57:a4:44:07:7a:69:8d:a8:d4:
                    1b:bb:1c:19:fc:fb:66:d8:87:cd:4a:2f:23:b3:f2:
                    4a:4f:a6:99:bf:c9:b8:fb:ae:d9:25:03:c6:da:21:
                    0b:64:35:58:02:82:7e:a3:9e:96:71:9d:d1:9c:a3:
                    61:37:7c:3a:93:ae:06:69:d9:5e:04:f5:ce:b5:5b:
                    a4:55:c6:92:97:18:ca:48:bd:c2:2e:62:4b:10:c7:
                    d4:8e:92:d4:33:26:14:60:3d:42:07:4a:19:cb:d8:
                    97:bf:fd:56:a4:54:66:97:a8:b4:59:e5:90:1a:45:
                    d8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:84:B8:E8:60:17:68:F4:BE:DB:26:C5:C2:29:58:77:F2:DE:93:CC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n4S46GAXaPS-2ybFwilYd_Lek8w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:23:0c:2f:4e:0a:19:81:30:0b:a1:43:a2:87:fe:66:fc:89:
         73:15:1b:f9:28:5a:42:38:65:09:d6:94:65:b3:96:77:1c:67:
         04:80:9e:da:3e:fd:79:a1:17:66:21:a0:f8:6d:d3:da:a6:b4:
         ee:c9:4a:41:e9:4f:7c:c4:86:4d:85:4a:14:3b:73:45:d2:d3:
         d5:f5:57:5b:48:fd:40:1b:54:73:c0:ff:ce:9f:9a:16:99:20:
         51:c7:ec:a5:da:3b:cb:24:38:7c:1d:12:9f:61:a7:2c:cd:bf:
         6b:bb:67:c1:c9:41:60:51:90:d2:93:7a:74:ce:34:de:05:0d:
         37:5f:f3:f7:cb:e9:d7:3a:14:1c:ae:4c:a9:77:e9:e1:68:16:
         ad:b1:18:7d:0f:90:b9:cc:dd:4a:f2:f5:d5:53:cb:d8:c0:fb:
         a0:8e:15:d3:8c:12:0c:16:75:df:7c:f8:0a:4b:b3:45:83:2c:
         2d:55:49:c8:32:53:9a:51:e0:b7:0d:f3:4f:b8:42:42:72:2f:
         fc:58:e7:44:df:9d:57:2f:c1:a1:e1:58:62:5c:be:ef:d2:59:
         ab:89:c9:9c:b2:c8:59:45:95:d9:5c:f2:99:bb:29:72:b8:c4:
         ed:3e:ff:75:62:d5:62:97:ae:14:bb:1c:82:21:c3:f9:b0:b2:
         1f:4b:5f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:44 2025 by rpki-client