Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vREX9gh4Ia-inudCpl7P2PZQm64.roa
File:                     vREX9gh4Ia-inudCpl7P2PZQm64.roa (raw, json)
Hash identifier:          IXM11fMZTqyHGtqsllHtmzqyz4m4rr6+gUftm9oq1CM=
Subject key identifier:   BD:11:17:F6:08:78:21:AF:A2:9E:E7:42:A6:5E:CF:D8:F6:50:9B:AE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       38EF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vREX9gh4Ia-inudCpl7P2PZQm64.roa
Signing time:             Fri 22 Aug 2025 08:45:46 +0000
ROA not before:           Fri 22 Aug 2025 08:45:46 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        123.194.24.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14575 (0x38ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:45:46 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BD1117F6087821AFA29EE742A65ECFD8F6509BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e8:08:79:74:87:b2:eb:b6:ed:4f:a1:db:3e:
                    4f:8b:67:66:c9:fa:60:51:78:40:74:af:39:20:13:
                    dd:78:47:08:95:a3:ca:e1:05:37:c1:bf:5b:d6:3f:
                    5c:7d:4e:10:11:f2:28:e6:48:3a:d6:33:01:58:ea:
                    7e:6b:ed:d5:c3:1f:9b:0f:e8:a4:85:2c:86:a5:ab:
                    a2:8b:a0:40:a2:05:05:77:b4:bb:84:13:7f:b6:1a:
                    44:4b:77:d6:27:6e:d8:fc:e6:5d:1c:4a:35:fa:4d:
                    9d:56:4a:f4:58:d4:32:fb:a7:ef:97:69:96:ca:9c:
                    15:21:82:f7:d8:20:22:ec:30:88:89:d0:db:a8:04:
                    9c:b9:4c:a7:73:9c:5c:23:28:63:0c:61:43:55:c6:
                    f8:0e:75:7c:3c:14:90:8a:a9:d2:b7:bd:49:e5:88:
                    82:bc:0f:aa:30:4e:86:80:e6:3c:ab:4c:77:b1:2f:
                    a5:c1:4d:6a:1d:be:63:6f:d3:48:5b:a6:e1:14:e4:
                    11:19:89:d9:90:3a:f4:ac:5f:00:a3:20:87:2c:7a:
                    31:c1:00:c1:9e:25:cb:43:1c:48:37:84:c1:7b:97:
                    5c:4e:d1:51:c6:98:08:65:c6:dc:53:54:a3:1f:c9:
                    66:02:a3:0b:20:dc:c2:76:18:7f:3d:bc:02:47:1f:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:11:17:F6:08:78:21:AF:A2:9E:E7:42:A6:5E:CF:D8:F6:50:9B:AE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vREX9gh4Ia-inudCpl7P2PZQm64.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:0e:e5:2b:8f:89:77:02:6a:6f:89:c0:a0:58:34:52:f9:70:
         b2:79:c1:1c:5f:17:7f:ea:6c:80:20:cb:77:6e:44:b6:95:9a:
         5a:bc:7b:f0:77:d9:4c:92:75:61:96:ac:d2:b7:33:d1:45:7a:
         9a:1c:67:87:78:28:ad:36:0c:0e:06:bb:95:aa:e0:85:15:9c:
         98:24:68:06:11:fa:ca:df:82:f7:16:77:29:f3:10:3a:af:3a:
         f2:55:95:7e:00:12:9e:89:75:46:50:bc:7c:a7:05:50:16:44:
         68:c9:f5:cc:30:a4:e5:f6:54:e2:56:cf:72:e6:1e:b6:8d:fc:
         ed:88:b6:c9:86:6a:16:54:33:d4:32:05:69:d7:48:b1:3b:c0:
         25:65:a1:be:b4:37:0a:d5:e1:91:3e:f3:30:31:09:4d:23:5f:
         d6:24:17:46:b5:02:33:e9:c4:85:2c:1e:d5:6a:c1:30:a8:df:
         27:17:ad:d2:69:3a:f8:d6:5a:e6:6b:d4:f8:20:4c:f1:ca:76:
         df:63:b3:cf:52:a6:e7:da:4b:7c:51:95:18:7b:60:f1:5d:83:
         b1:95:93:30:20:88:d5:80:f9:5b:1a:67:a2:18:3a:c5:a9:03:
         94:b5:50:dd:04:0e:06:72:fc:2a:52:e8:c4:e3:fc:5d:78:b7:
         75:71:bb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:54 2025 by rpki-client