Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t57C_3SDsOXxa5aJPwv_mQog_t0.roa
File:                     t57C_3SDsOXxa5aJPwv_mQog_t0.roa (raw, json)
Hash identifier:          QqjwAQxeT2IagspbOIcZqEVb9btxDxXItSCp7Pf7PIg=
Subject key identifier:   B7:9E:C2:FF:74:83:B0:E5:F1:6B:96:89:3F:0B:FF:99:0A:20:FE:DD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       388F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t57C_3SDsOXxa5aJPwv_mQog_t0.roa
Signing time:             Fri 22 Aug 2025 08:45:25 +0000
ROA not before:           Fri 22 Aug 2025 08:45:25 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9924
IP address blocks:        123.195.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14479 (0x388f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:45:25 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B79EC2FF7483B0E5F16B96893F0BFF990A20FEDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e3:ef:70:e2:98:c6:70:05:41:66:19:0d:82:
                    43:d9:eb:38:fb:db:69:5a:91:bc:17:2c:ed:e4:71:
                    9f:65:da:f8:48:18:05:ec:c0:89:c1:f5:66:72:68:
                    8e:01:22:62:bd:50:a2:74:6f:f7:8f:b4:be:62:9b:
                    79:cb:24:23:7e:21:ac:af:a2:18:64:af:68:25:60:
                    1e:ad:5e:c2:e7:b9:7e:df:4c:1a:bf:d4:fe:69:32:
                    35:fd:5e:0d:a8:05:e5:1c:3c:2e:49:2b:33:08:d1:
                    dd:fb:80:d6:7c:5c:31:3f:cd:42:91:b5:7f:98:ad:
                    7c:b2:66:d9:19:35:f7:33:b4:4f:65:bd:ba:18:b7:
                    8c:7b:6a:50:4b:ed:67:21:c6:be:fd:7c:d4:1d:fe:
                    d8:a4:eb:be:19:89:14:6a:c8:1d:2f:9e:89:de:69:
                    79:f5:08:be:fc:64:7b:dd:ae:b4:e4:a4:24:9d:b7:
                    13:b7:e8:8b:65:9e:3b:71:0f:68:5b:f5:95:2d:0a:
                    17:a3:53:74:9e:cb:08:ee:e0:04:bd:b4:25:c7:0a:
                    5f:fd:a3:64:c0:8f:66:a8:bb:63:60:7e:24:a9:f3:
                    00:e3:80:96:88:b6:c5:94:79:12:22:6a:63:bc:0c:
                    42:6c:5e:3a:33:b7:f4:2b:8b:f8:20:8a:4d:9d:cd:
                    5a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9E:C2:FF:74:83:B0:E5:F1:6B:96:89:3F:0B:FF:99:0A:20:FE:DD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t57C_3SDsOXxa5aJPwv_mQog_t0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:36:58:1f:37:39:4d:cf:6e:bf:8e:52:7d:61:fd:b3:a8:25:
         2f:b3:3b:db:c1:fa:38:ab:db:92:fe:da:05:a3:db:f5:2d:bb:
         8a:8a:d2:c7:64:a2:12:af:fe:d3:0b:e8:42:ea:72:b2:50:f9:
         c0:5a:fc:d4:18:79:aa:66:bb:8e:b5:71:3a:47:6c:9c:35:68:
         fb:e2:04:ec:53:9d:52:79:d2:c6:af:12:66:5d:72:f7:5e:05:
         8e:b8:e2:75:2b:83:ef:7e:2f:9c:00:e5:df:48:a6:49:41:a2:
         92:b3:f3:4f:dc:dc:d7:d1:fb:6d:c8:45:7c:d2:cf:f1:aa:ff:
         33:35:9d:ad:fa:e5:f5:de:1b:e9:78:db:79:40:6c:9e:df:dc:
         e2:7b:72:dc:5e:85:37:be:f8:35:99:7c:a4:ce:b8:df:26:52:
         74:f2:fa:6b:1a:d2:68:5a:22:da:e7:b9:b3:a4:9a:61:3b:ee:
         5b:99:75:14:34:3c:b8:ff:46:d9:ae:a6:8b:03:93:b9:e6:da:
         2b:15:f0:77:a2:94:25:ae:5a:04:fd:b3:14:c9:46:0d:02:e9:
         74:ef:17:9e:7c:c2:10:38:e7:24:4d:0f:b6:f0:2c:b4:62:26:
         a2:98:e9:3a:55:69:77:fa:27:de:11:5c:fa:3b:08:90:79:54:
         4d:38:db:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:23:13 2025 by rpki-client