Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vHqfuhp9XfMu3ExeAngRGRbyWmA.roa
File:                     vHqfuhp9XfMu3ExeAngRGRbyWmA.roa (raw, json)
Hash identifier:          hI0wWBJgVzVqfhaXBLSghr1o8JffFFMmEJ+j/Qm0OAs=
Subject key identifier:   BC:7A:9F:BA:1A:7D:5D:F3:2E:DC:4C:5E:02:78:11:19:16:F2:5A:60
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3906
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vHqfuhp9XfMu3ExeAngRGRbyWmA.roa
Signing time:             Fri 22 Aug 2025 08:45:52 +0000
ROA not before:           Fri 22 Aug 2025 08:45:52 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        180.176.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14598 (0x3906)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:45:52 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BC7A9FBA1A7D5DF32EDC4C5E0278111916F25A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8b:de:ed:0f:66:89:7a:95:c3:75:a9:ca:b6:
                    ae:ab:b1:a6:d0:7a:6a:d3:74:39:04:a3:d8:10:ea:
                    35:1d:9e:fc:c4:00:d3:70:17:da:5f:8c:01:0c:a7:
                    7e:d4:92:46:e5:33:be:77:f8:bb:00:95:54:a1:e9:
                    0c:f5:ea:29:44:71:e4:8d:31:81:8e:6b:95:75:99:
                    c3:ef:71:37:17:77:96:e0:80:e5:7a:3f:b1:57:d6:
                    4f:6c:32:64:1b:05:7e:26:1c:da:2f:ed:17:a9:6e:
                    63:62:f6:2e:fc:ab:98:dc:69:a8:e7:69:d0:e3:6b:
                    fc:5e:0e:e4:0f:95:32:0f:d0:7a:e1:32:cc:34:ec:
                    12:3b:46:f0:8c:43:c2:f1:86:41:d0:0e:51:cf:7f:
                    e5:88:08:22:2c:81:a4:db:34:93:58:3a:d4:1f:27:
                    3b:35:44:0b:ff:0d:c7:07:06:3a:c3:04:f6:67:b3:
                    55:56:67:8e:17:82:66:61:f4:28:64:1d:05:f4:c3:
                    89:c8:e9:fd:dd:fe:4c:a1:0b:f7:c5:9d:be:51:1a:
                    bd:0e:be:87:5e:0b:dd:b2:01:26:c4:9d:8a:f3:43:
                    51:c4:49:bc:22:4f:d9:2d:63:63:1b:9c:72:a1:48:
                    b5:fd:35:b8:87:98:cd:9b:ca:5c:9c:98:9b:7c:8e:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7A:9F:BA:1A:7D:5D:F3:2E:DC:4C:5E:02:78:11:19:16:F2:5A:60
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vHqfuhp9XfMu3ExeAngRGRbyWmA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:6d:9f:18:18:7a:30:29:ee:c3:43:b3:96:bb:b3:89:fc:58:
         a7:57:82:fa:46:a2:07:c2:2d:ae:47:82:c4:bd:c4:e0:76:fc:
         b4:d6:fa:ba:38:18:4d:73:56:a4:1e:67:ea:19:58:28:ed:01:
         b1:68:eb:b1:23:39:c6:cb:8c:70:21:73:6b:b8:85:e1:47:0d:
         c7:82:0a:bb:55:c7:49:05:99:9a:e3:ab:60:b1:5a:10:5a:13:
         1e:a9:8c:ae:3a:4f:23:b3:91:51:aa:26:38:c0:f6:b7:2d:01:
         5b:a9:09:9c:aa:44:3a:16:2c:e1:fe:24:fd:7b:95:2c:fa:90:
         ec:68:1f:d0:d4:cd:f6:3c:95:e8:da:68:06:52:bd:52:36:33:
         ce:21:b9:e9:24:2c:33:18:71:f9:c0:9a:c6:56:ef:64:1f:a7:
         d1:3a:a1:38:f9:61:17:f1:7b:53:3d:f4:f7:16:44:ab:e5:f1:
         9f:3b:76:e5:70:67:0e:05:20:e3:26:42:f3:d4:a6:76:cb:c2:
         6e:a8:a6:8d:41:34:0a:54:91:de:75:58:92:13:9b:a3:28:f5:
         fd:e4:08:32:0f:82:9a:fd:16:03:34:83:7c:75:6b:69:ff:43:
         10:50:4a:08:1a:d3:c0:2e:30:ee:00:72:60:5f:28:33:61:9e:
         e9:df:ce:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:47 2025 by rpki-client