Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u8xpgcmzUCjVWXfQL611hymEbXA.roa
File:                     u8xpgcmzUCjVWXfQL611hymEbXA.roa (raw, json)
Hash identifier:          STCQFmgHeVBZeWCdm+KygonFZUcUA/YahcZW8LhU6Xc=
Subject key identifier:   BB:CC:69:81:C9:B3:50:28:D5:59:77:D0:2F:AD:75:87:29:84:6D:70
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       393C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u8xpgcmzUCjVWXfQL611hymEbXA.roa
Signing time:             Fri 22 Aug 2025 08:46:06 +0000
ROA not before:           Fri 22 Aug 2025 08:46:06 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        180.177.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14652 (0x393c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:46:06 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BBCC6981C9B35028D55977D02FAD758729846D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:18:dc:43:4c:c2:4a:b4:eb:73:db:f2:07:34:
                    3c:5f:a1:9b:3f:87:b6:b9:41:46:fe:7b:c4:e6:80:
                    f7:05:f3:fe:97:a5:31:57:ce:3f:e0:fe:61:93:49:
                    a5:bd:69:7c:33:10:f1:e1:2e:91:9a:9a:24:aa:aa:
                    92:84:72:d9:8e:5f:f9:21:63:6f:46:3a:ea:dd:44:
                    59:71:04:ea:6c:6f:3d:e8:c4:00:6c:03:de:b2:aa:
                    97:41:6c:3a:93:04:58:ba:25:4c:1a:ed:ef:67:e9:
                    cd:cd:e4:3f:1c:c1:4a:14:92:34:f0:a8:0e:e7:0a:
                    f6:65:e4:77:65:06:5a:70:20:2d:3f:39:c9:98:3a:
                    3f:27:02:3d:25:4b:0c:2b:fb:a1:09:f4:b6:26:af:
                    9f:f3:9a:15:0a:31:67:a1:72:5b:ac:52:f7:14:97:
                    51:44:a0:c9:ab:36:ab:dd:c8:ec:8b:b4:79:7e:b2:
                    fb:c3:ed:7e:47:a6:99:74:25:c9:6c:8f:47:b2:24:
                    6e:6a:4e:bd:72:16:13:42:8d:22:90:04:04:ae:c8:
                    83:a0:db:ac:68:ef:d3:b5:ad:28:13:c3:31:ec:64:
                    a9:09:12:b1:d1:74:aa:0d:18:60:a3:39:94:4a:70:
                    13:f8:be:a1:80:76:d5:29:0b:9a:4a:e7:1f:fd:92:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CC:69:81:C9:B3:50:28:D5:59:77:D0:2F:AD:75:87:29:84:6D:70
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u8xpgcmzUCjVWXfQL611hymEbXA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:91:9e:6c:77:5b:88:54:bd:d8:1a:da:bd:68:d4:fc:ea:8d:
         bb:ca:50:bd:bb:6e:18:e7:0d:81:52:cf:eb:41:2a:03:7c:97:
         83:c5:90:9f:85:ca:da:2b:f4:03:66:13:a8:0c:c8:48:b2:f3:
         c3:d5:c8:09:e6:65:ee:5e:27:57:e6:5b:de:19:6d:90:f7:7e:
         c9:cf:4d:4b:67:34:bd:a0:9b:71:a1:83:8b:01:e5:e5:3b:ac:
         60:d9:34:cd:ac:71:b2:f9:4a:35:dd:f2:db:a4:6b:3f:04:05:
         d4:a7:03:e5:a2:45:15:8c:36:0e:99:85:ef:14:36:d9:c5:89:
         05:1b:51:7a:78:c1:3d:79:6d:cd:22:33:5d:59:6e:55:43:e3:
         e9:7a:f4:b4:8d:67:2a:6a:6f:fe:98:b1:90:42:0b:8d:f8:b9:
         36:42:50:8a:7e:e2:ae:ec:ce:58:35:dd:99:43:a7:48:56:61:
         3a:8c:d6:40:9b:5e:3d:31:aa:1e:55:59:b7:cc:b1:82:e8:8b:
         af:7c:9e:d8:f5:73:df:97:d1:03:45:c2:df:f4:6c:c7:47:f8:
         03:14:e4:4c:fe:13:b5:92:48:91:c5:7e:68:a1:d8:48:5c:7b:
         f7:6a:b4:6c:b8:74:0a:34:c0:d7:f0:c0:b7:93:81:01:60:a6:
         2f:5f:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:31:58 2025 by rpki-client