Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vgur2pCkZ-Nly4A05y5W0kKk_7c.roa
File:                     vgur2pCkZ-Nly4A05y5W0kKk_7c.roa (raw, json)
Hash identifier:          yVwD/1U3tFTKzSkq3AbYvWUeCLhkthexuVsJS1Jq6hg=
Subject key identifier:   BE:0B:AB:DA:90:A4:67:E3:65:CB:80:34:E7:2E:56:D2:42:A4:FF:B7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3964
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vgur2pCkZ-Nly4A05y5W0kKk_7c.roa
Signing time:             Fri 22 Aug 2025 08:46:15 +0000
ROA not before:           Fri 22 Aug 2025 08:46:15 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        180.177.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14692 (0x3964)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:46:15 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BE0BABDA90A467E365CB8034E72E56D242A4FFB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:78:3d:32:59:19:b9:d0:67:6c:c7:62:2b:
                    ba:3c:dc:d6:ee:8c:d0:d9:73:11:43:cd:24:cb:cc:
                    81:b1:16:9d:78:ff:77:f4:9b:29:8d:37:ef:a2:c1:
                    62:0f:72:12:7e:4f:51:ae:c0:d3:32:2a:cb:82:1f:
                    1d:3d:19:80:32:3d:9c:6f:8a:b1:13:58:8f:ed:c2:
                    cf:f6:52:6f:a3:8c:f6:73:47:d8:d1:94:77:ee:b8:
                    ae:8f:82:70:50:59:32:c3:ed:10:5f:7a:ad:6c:8c:
                    df:c4:02:36:cc:9b:43:2f:8d:3e:7c:00:34:10:6f:
                    05:78:7c:10:57:0e:15:52:20:e9:59:08:88:ab:ba:
                    96:de:fd:85:8c:86:ae:28:e3:8f:e3:0c:9c:84:1e:
                    c4:8d:58:a5:c8:38:b4:55:dc:72:fb:17:5a:9c:ac:
                    ea:52:13:65:49:a2:6b:9a:dc:37:3e:55:29:43:8c:
                    c3:89:1b:65:c5:86:e0:08:77:e2:d8:72:99:07:d2:
                    c6:91:5f:c8:af:97:30:2e:da:3c:75:48:6c:e9:30:
                    d5:d8:28:f6:c7:22:5c:91:b4:f7:0b:91:b5:12:7e:
                    1d:f8:9a:3e:10:c3:48:62:09:87:9d:4a:32:0b:12:
                    be:da:2e:88:3f:eb:51:6a:e5:ab:13:ad:1c:91:f1:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0B:AB:DA:90:A4:67:E3:65:CB:80:34:E7:2E:56:D2:42:A4:FF:B7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vgur2pCkZ-Nly4A05y5W0kKk_7c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:fe:e6:9e:fd:74:2d:43:66:62:72:52:6c:a0:50:5c:f6:66:
         3e:94:9a:c9:f4:4d:35:68:fa:20:81:da:6b:7d:64:1c:69:09:
         4c:c2:90:fd:df:32:ce:d3:2c:27:33:68:91:d7:0c:91:d6:24:
         d5:cf:20:4d:4b:8f:f0:4b:98:9b:10:44:54:3a:7b:14:a0:0d:
         0e:29:1e:d5:61:6a:48:b4:98:25:14:c7:b7:af:d7:f5:a6:a8:
         5d:72:7d:2c:ae:b1:5b:e3:eb:09:90:73:7d:ac:e7:21:9e:f4:
         26:ab:90:49:c5:d3:e6:04:ae:e2:6c:f0:a1:54:4c:f9:21:86:
         2d:73:e2:77:bb:91:64:c9:e8:ad:44:f6:f8:e0:2c:6d:b3:17:
         6e:ed:51:f8:24:2b:64:1e:3f:93:ea:3a:72:9e:cc:e7:2a:a1:
         f1:7b:0a:79:de:a8:2b:03:73:9d:c8:87:64:f9:17:f7:61:f0:
         51:70:63:f7:7d:76:98:ca:b8:81:13:3d:28:f8:a8:99:ef:e8:
         9a:2c:48:ba:26:6e:b1:32:35:f9:72:9d:32:ae:a6:b2:0f:9d:
         fc:cb:d4:51:76:1e:d5:d2:af:90:fe:17:7b:8d:e2:4c:eb:f0:
         e3:0d:81:30:ef:f7:f3:8a:a7:38:f0:a5:70:95:0a:e5:79:52:
         41:ff:e3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:42 2025 by rpki-client