Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxU-G50TeuLrqc2HgdtwFxB8V3o.roa
File:                     uxU-G50TeuLrqc2HgdtwFxB8V3o.roa (raw, json)
Hash identifier:          msIbD5CaL0qv22d0VkbfhupJRLClSYF3z9Ps9beJDcw=
Subject key identifier:   BB:15:3E:1B:9D:13:7A:E2:EB:A9:CD:87:81:DB:70:17:10:7C:57:7A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3ABC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxU-G50TeuLrqc2HgdtwFxB8V3o.roa
Signing time:             Fri 22 Aug 2025 08:47:42 +0000
ROA not before:           Fri 22 Aug 2025 08:47:42 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9924
IP address blocks:        123.193.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15036 (0x3abc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:47:42 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BB153E1B9D137AE2EBA9CD8781DB7017107C577A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:56:e1:eb:4b:f7:25:a8:ad:a1:a4:ca:87:
                    1a:22:78:86:aa:bd:20:a8:66:57:95:5d:62:ba:b8:
                    56:c0:b4:e0:0d:c9:2e:fa:6d:8b:16:48:7e:f3:d5:
                    1c:04:7d:5e:f6:13:17:c2:0e:c0:b9:61:5a:24:7f:
                    70:e6:b3:8e:56:da:e9:69:71:e4:47:ab:60:da:92:
                    89:25:aa:88:85:99:fd:07:8c:87:f1:4c:54:0c:8d:
                    a5:b9:22:d9:a4:64:11:67:f8:27:b4:35:5d:80:ea:
                    bc:ac:f7:4d:a2:69:0b:de:0f:a8:09:e4:aa:15:d9:
                    81:09:32:4a:b7:c5:0e:12:45:2c:30:19:48:b1:00:
                    c9:5c:fb:51:32:1c:2e:c1:37:58:13:a0:1a:b6:c1:
                    28:05:14:48:c0:1d:c8:97:75:ee:18:f5:85:df:15:
                    ac:4a:fd:f5:05:be:e9:dd:cf:1c:67:2d:19:82:88:
                    69:f5:b0:c7:74:24:a5:51:cf:0f:11:8e:e2:e8:03:
                    85:05:95:fb:32:7c:13:27:3e:87:44:be:5e:49:5b:
                    ea:1a:20:ae:ab:92:7a:0a:45:1e:c3:cd:4c:d9:89:
                    24:00:49:cf:52:65:c4:04:b2:69:db:6e:8d:79:fe:
                    15:d8:0e:f4:d8:49:fc:31:25:1c:be:1f:3a:72:4c:
                    fd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:15:3E:1B:9D:13:7A:E2:EB:A9:CD:87:81:DB:70:17:10:7C:57:7A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxU-G50TeuLrqc2HgdtwFxB8V3o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         91:33:59:ea:ef:3e:05:d9:36:68:ee:0b:e7:83:a4:fe:1a:59:
         e0:06:a9:fb:16:00:27:06:0c:83:78:02:aa:27:dc:fb:93:1c:
         15:64:8d:44:94:4e:06:9b:72:83:fb:b9:07:ee:b8:52:18:02:
         fc:a4:a8:9f:9e:92:4d:e8:81:36:d6:42:df:5c:93:95:f5:8f:
         2c:07:13:d8:dc:91:bc:66:f0:e4:ff:80:35:97:2a:27:cf:90:
         06:d7:1c:a2:e8:2d:06:eb:43:78:2a:ce:8b:35:ed:74:ea:6b:
         74:c9:23:4e:19:03:c5:47:93:0e:23:df:c8:74:26:77:ce:dd:
         e4:df:60:4b:e7:52:03:66:a2:5d:98:23:2b:b0:ca:ef:cd:07:
         ff:cf:f5:f8:c8:f8:c7:7b:19:24:a2:7a:73:a8:45:03:bd:92:
         03:bc:c5:69:bc:35:b0:a9:78:e9:b4:3a:ab:ab:24:0e:ef:46:
         df:a7:62:56:77:ef:59:0a:8d:54:f1:f9:65:bb:bb:5b:7d:f7:
         31:da:87:f9:2e:4c:46:a9:1d:44:9a:c7:ce:a2:39:55:ee:db:
         73:40:37:37:17:8f:e2:54:69:ac:b5:f1:6c:23:f1:f7:ea:d5:
         82:bc:ab:94:5a:1f:95:08:b8:cd:4b:aa:6e:b2:be:97:35:c5:
         86:58:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:29:35 2025 by rpki-client