Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qV_aTiDw4i5I4vuqYSv05p-qS5w.roa
File:                     qV_aTiDw4i5I4vuqYSv05p-qS5w.roa (raw, json)
Hash identifier:          j6frEYrQeuD3Q3Rab02IC3g7hVR1RtJirEPYBY8lunk=
Subject key identifier:   A9:5F:DA:4E:20:F0:E2:2E:48:E2:FB:AA:61:2B:F4:E6:9F:AA:4B:9C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3862
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qV_aTiDw4i5I4vuqYSv05p-qS5w.roa
Signing time:             Fri 22 Aug 2025 08:45:14 +0000
ROA not before:           Fri 22 Aug 2025 08:45:14 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        180.177.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14434 (0x3862)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:45:14 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=A95FDA4E20F0E22E48E2FBAA612BF4E69FAA4B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e8:ce:53:1a:2f:2f:eb:8d:9a:bd:af:b5:7d:
                    6c:e9:1c:7f:99:08:e0:9e:80:78:ff:51:0c:fb:dc:
                    f6:4e:89:40:cb:d5:6f:c7:41:e2:38:e9:da:50:a9:
                    37:16:92:b6:72:bb:aa:4e:4f:a6:39:01:69:d7:90:
                    8d:0e:a8:29:1d:1c:6f:57:7e:d6:e3:62:06:00:3a:
                    6d:d6:be:2e:a3:2e:94:ee:11:66:ab:d2:9a:c4:22:
                    46:21:02:49:1d:09:bb:05:20:5a:74:bd:ce:76:6a:
                    be:d3:56:bd:8c:c8:bd:f6:35:fe:9d:5c:ba:97:6d:
                    b9:ee:88:be:13:28:65:d3:c1:98:ff:6c:5e:df:83:
                    3f:a2:e4:24:a6:6c:5c:2e:27:75:47:12:be:9e:3e:
                    4f:82:92:c3:4f:92:54:ee:44:27:41:80:27:c7:e3:
                    91:54:59:de:be:57:a6:fb:a5:dd:e8:26:68:28:12:
                    e9:b5:a0:29:2e:11:38:4f:9f:77:2f:26:d8:15:75:
                    cd:5c:b8:69:df:e6:88:8c:4b:2b:6a:08:57:bf:9f:
                    a6:05:fe:78:54:f0:29:24:ba:21:8e:e4:95:0d:b9:
                    00:c5:47:5e:b3:8f:f1:a0:5e:2f:a9:eb:c7:cc:c4:
                    de:1b:f6:ac:d5:80:3d:ca:b2:2a:1f:de:b7:a3:a1:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5F:DA:4E:20:F0:E2:2E:48:E2:FB:AA:61:2B:F4:E6:9F:AA:4B:9C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qV_aTiDw4i5I4vuqYSv05p-qS5w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:62:b9:06:90:c2:ef:5d:79:b6:a4:f6:ca:7e:7a:82:52:1c:
         16:f4:58:c2:a5:62:25:49:e0:11:ba:ab:33:cc:48:d7:6b:6b:
         9b:81:2a:e5:f1:65:3d:7d:af:65:a0:7b:eb:f2:51:9d:07:c7:
         93:df:11:a3:73:f5:be:52:c0:33:91:09:29:bb:a2:5d:3e:c5:
         33:9d:9e:86:df:47:cc:db:b7:a9:99:47:95:14:ba:2e:d5:1a:
         0a:f8:7c:a2:67:6b:c2:5c:3e:db:4a:8c:fa:b5:7d:d1:a8:18:
         cb:75:96:ce:ea:c8:c0:8b:8e:45:30:c5:75:11:38:d1:9c:9b:
         15:15:7b:7e:8f:48:20:1a:17:b2:90:74:61:2e:bd:35:a2:5f:
         46:3c:b1:35:3a:8b:4b:33:9f:b9:8c:11:2e:78:fe:5a:dd:7e:
         83:98:97:13:d1:fb:8a:f2:ea:c0:b8:99:ce:df:9d:82:48:a6:
         eb:54:88:bf:21:a1:1d:45:61:e5:2e:ab:e8:0a:2c:7e:6b:ea:
         45:55:b8:53:42:f0:71:06:25:c7:7a:75:b1:8f:78:a0:dd:6a:
         1f:29:ae:a5:1a:e8:c9:86:dc:d5:61:02:27:d4:d5:7d:38:f1:
         5f:dd:5f:c9:ae:1c:13:43:37:54:83:97:4d:99:58:d2:62:6d:
         05:e7:34:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:53 2025 by rpki-client