Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u3Pr2r9oTNQUgnaO7P65WV5JsEY.roa
File:                     u3Pr2r9oTNQUgnaO7P65WV5JsEY.roa (raw, json)
Hash identifier:          aJAANk7ck0Pulo5mh10yu0+wyzUuM8xB1n2leihuJqs=
Subject key identifier:   BB:73:EB:DA:BF:68:4C:D4:14:82:76:8E:EC:FE:B9:59:5E:49:B0:46
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       38FB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u3Pr2r9oTNQUgnaO7P65WV5JsEY.roa
Signing time:             Fri 22 Aug 2025 08:45:50 +0000
ROA not before:           Fri 22 Aug 2025 08:45:50 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9924
IP address blocks:        118.232.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14587 (0x38fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:45:50 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BB73EBDABF684CD41482768EECFEB9595E49B046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:6e:1e:8a:04:f5:cc:3d:3a:55:86:24:49:
                    29:f0:51:a3:9e:dd:82:86:85:46:96:a6:a0:4d:bc:
                    52:ca:b0:75:b0:5f:85:f5:22:cb:07:35:d8:ad:6d:
                    ed:f5:d2:3f:e8:81:bc:e9:b2:1d:07:6d:44:cb:4f:
                    b7:eb:19:45:8d:73:a3:5d:3f:9f:0b:37:02:1b:c8:
                    19:b7:6d:b0:13:4e:9b:0f:a7:95:a5:54:22:c3:10:
                    dc:f4:fb:08:3a:a3:17:f1:7a:36:42:6a:13:eb:50:
                    e5:35:24:b8:b6:96:a1:5c:18:4b:93:c7:21:2e:7c:
                    5c:1b:f8:6a:e0:21:72:12:d1:d9:a1:44:a3:42:4e:
                    4f:8c:bc:64:e9:6f:b3:f7:30:8d:c4:59:b7:1d:2c:
                    70:e9:9a:5f:aa:13:3a:79:b4:7f:b2:9e:ce:2c:59:
                    26:57:26:94:f8:8e:bd:d6:fe:6e:72:fc:80:f5:19:
                    4c:b9:ad:02:29:a7:a9:45:bc:55:a4:c8:86:a8:f6:
                    cc:91:52:70:87:59:c7:f6:fa:da:73:9b:5e:4b:37:
                    c3:d8:26:d3:d2:25:fe:06:bf:f5:cd:59:1a:46:da:
                    f3:19:55:40:6b:b6:7c:5d:4c:54:68:2f:15:f4:bd:
                    6d:27:aa:24:42:84:ea:2e:b3:b0:29:81:a7:e5:fc:
                    eb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:73:EB:DA:BF:68:4C:D4:14:82:76:8E:EC:FE:B9:59:5E:49:B0:46
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u3Pr2r9oTNQUgnaO7P65WV5JsEY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         28:e9:49:64:32:06:71:44:05:8f:38:b2:30:d5:94:ea:4f:0d:
         1b:ed:fb:2c:3e:f9:2c:00:c2:28:7a:00:76:0f:ff:46:30:7e:
         39:f3:12:86:bc:b7:d5:d0:49:1d:ff:2a:77:04:89:e2:f7:f8:
         59:55:1f:fe:28:31:ed:ea:01:52:21:56:3c:6f:ed:a8:e7:f4:
         d1:37:df:a5:f9:35:cb:5b:fa:5a:29:a9:0d:2d:e4:23:76:25:
         ef:b6:0b:4e:83:0a:08:d6:5c:af:af:cb:46:0c:6e:bf:13:59:
         1d:28:ab:b1:a0:9f:5e:dd:83:14:77:c4:8a:cb:83:c1:58:44:
         70:0c:44:1e:ee:8c:09:a6:52:c3:c9:eb:d8:e0:20:5c:a8:00:
         2b:93:8b:80:89:15:b6:69:ab:bb:14:cc:56:f2:97:b8:7e:3b:
         d0:72:7e:6c:fb:77:e6:f5:85:ae:b0:99:42:bd:28:ba:a3:ed:
         31:95:91:44:19:24:10:39:4c:69:bc:94:60:6f:de:38:d7:58:
         86:e9:ba:04:c6:26:d4:5c:56:f8:21:86:68:84:77:5e:d7:ef:
         a8:f8:76:cc:57:fc:a3:4b:e6:e6:3b:cd:20:22:c0:14:51:0d:
         6b:05:04:4c:0d:72:91:71:1d:9f:b8:69:c4:ec:19:cc:1e:cb:
         05:47:db:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:32:07 2025 by rpki-client