Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/orEWLI0pstaTkhFPerM_bwsgjW8.roa
File:                     orEWLI0pstaTkhFPerM_bwsgjW8.roa (raw, json)
Hash identifier:          pQrjgxCsynQiLYlw2K8Yo7LgYqnC2RRo0f4/rHenXcU=
Subject key identifier:   A2:B1:16:2C:8D:29:B2:D6:93:92:11:4F:7A:B3:3F:6F:0B:20:8D:6F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       388B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/orEWLI0pstaTkhFPerM_bwsgjW8.roa
Signing time:             Fri 22 Aug 2025 08:45:24 +0000
ROA not before:           Fri 22 Aug 2025 08:45:24 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        106.1.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14475 (0x388b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:45:24 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=A2B1162C8D29B2D69392114F7AB33F6F0B208D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cc:30:1c:63:2f:e5:6b:54:47:30:00:ef:77:
                    36:bb:65:e5:82:04:95:25:af:51:7d:12:6d:dd:33:
                    f0:a8:a9:85:61:f2:05:30:70:34:c1:21:50:ba:25:
                    e6:0c:e5:7b:89:c4:d2:eb:25:ae:93:ed:fd:fd:f6:
                    3b:1d:26:45:5b:17:5f:f0:1a:ba:3b:ed:a2:4b:21:
                    d8:4d:a6:9a:98:73:9e:53:94:40:09:38:30:03:27:
                    ff:d9:a2:66:4c:6d:50:5b:4c:d7:a2:8d:7b:d9:77:
                    59:9a:46:45:eb:93:f0:39:8f:9e:9b:10:e9:7e:f0:
                    a3:ea:4b:4b:91:24:75:1f:83:e2:41:99:21:e9:81:
                    74:87:e1:6e:58:aa:d4:bf:f3:b1:49:16:37:3f:c3:
                    d2:46:30:95:f8:cc:f6:16:00:da:62:2e:d9:cb:83:
                    e7:3a:8c:05:07:7c:0d:08:d5:63:35:80:c4:6f:91:
                    db:d2:8c:42:f5:84:45:9c:9b:25:88:c0:cf:4d:16:
                    84:d4:87:26:64:8b:a9:98:37:48:f9:1c:ef:4c:c7:
                    07:32:fe:eb:c1:7a:cf:89:60:62:f7:83:d5:53:4e:
                    c7:9a:ae:94:7c:0b:79:b8:b9:c8:f1:2a:ca:e2:da:
                    a4:3d:97:1b:5a:f6:2b:85:b9:33:9b:68:e8:94:7a:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B1:16:2C:8D:29:B2:D6:93:92:11:4F:7A:B3:3F:6F:0B:20:8D:6F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/orEWLI0pstaTkhFPerM_bwsgjW8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:16:ff:b4:c5:f7:c5:b7:55:19:a1:03:bb:5b:84:da:6f:e8:
         2d:73:02:3d:33:d1:b1:d7:82:05:a2:8c:f1:f1:3a:7d:54:1b:
         23:71:6e:03:eb:9a:97:31:c1:fa:18:7c:93:74:4c:46:3a:38:
         e5:51:a1:88:76:88:44:3e:ff:9b:ba:7f:a7:1f:1b:19:3d:75:
         2b:0e:52:aa:bd:af:07:c1:0e:31:f5:60:07:fc:46:65:36:c2:
         bf:0c:fa:48:35:71:7d:9f:9a:d5:ab:4a:9e:b6:5d:0f:73:5f:
         bf:2d:ca:db:13:7c:2a:37:a0:ed:f5:5a:19:d9:a4:c8:b6:ee:
         95:f3:d1:46:66:02:f5:5f:bb:33:c6:b0:54:6d:67:8f:62:6c:
         ff:0d:27:88:26:e8:eb:d3:e1:61:24:0f:85:6b:16:a2:25:05:
         c9:cd:64:44:a4:dd:7f:7b:d6:e6:bd:e1:25:1c:40:b2:6f:56:
         7d:d1:7c:fe:3c:a9:c0:59:59:18:04:70:e2:1f:d6:f3:19:af:
         1c:5d:34:ff:f4:d8:2f:ba:b5:ef:26:ee:8e:e4:0b:d6:a0:64:
         2b:7c:76:bc:fe:f8:b8:87:1e:8b:73:85:ad:e4:07:fb:74:26:
         cf:f5:06:cf:f0:59:1b:56:45:d9:d1:e9:fa:7f:cc:0d:14:24:
         26:14:29:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:26:36 2025 by rpki-client