Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wcjjuqX5iC84UBfNumkbLn9Hdg4.roa
File:                     wcjjuqX5iC84UBfNumkbLn9Hdg4.roa (raw, json)
Hash identifier:          9xzIr+HHNs1vHqiBhCoRnlyk9lKWHOpuichGhD9pPpE=
Subject key identifier:   C1:C8:E3:BA:A5:F9:88:2F:38:50:17:CD:BA:69:1B:2E:7F:47:76:0E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3969
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wcjjuqX5iC84UBfNumkbLn9Hdg4.roa
Signing time:             Fri 22 Aug 2025 08:46:16 +0000
ROA not before:           Fri 22 Aug 2025 08:46:16 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        106.1.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14697 (0x3969)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:46:16 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C1C8E3BAA5F9882F385017CDBA691B2E7F47760E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:41:a7:36:9c:83:29:85:53:b3:03:37:f0:
                    a8:a1:21:df:11:5e:6e:9a:32:3b:d5:07:52:da:65:
                    49:f7:d3:92:f8:5c:9a:71:d3:8a:a8:e7:d7:6f:12:
                    15:59:c6:06:ac:e0:96:eb:f4:2d:b5:ba:63:a2:08:
                    a6:38:20:9b:3a:45:50:8f:b7:ba:14:25:f1:f5:65:
                    b4:7e:68:ac:60:3e:8c:52:7c:db:a1:17:4d:63:64:
                    62:a0:04:6e:06:b1:85:ed:30:56:3a:69:59:3c:d5:
                    7a:77:a3:a8:5e:7f:63:ad:95:f1:08:32:84:74:d4:
                    46:2f:4d:ba:04:b9:40:be:a3:27:1a:5d:b0:8e:c0:
                    2a:ee:84:f2:c8:56:02:f8:82:cb:0a:4f:df:3b:3b:
                    c8:23:85:6f:7f:a3:a7:03:e5:9a:6e:fc:61:c7:8d:
                    c6:5b:81:09:55:ae:53:ae:06:e3:71:30:8f:28:d1:
                    43:af:fe:9c:1e:dc:12:96:48:41:35:ce:f3:b6:4e:
                    a8:20:53:d3:04:4a:4c:16:ee:0b:2b:a4:28:82:37:
                    1d:09:c4:fa:97:82:69:02:67:cd:59:43:d7:f2:24:
                    65:54:d8:5f:a7:48:89:d4:41:89:17:50:1c:ba:8e:
                    4f:84:51:71:9e:f2:38:f9:6f:e8:b8:5c:4f:92:9c:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C8:E3:BA:A5:F9:88:2F:38:50:17:CD:BA:69:1B:2E:7F:47:76:0E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wcjjuqX5iC84UBfNumkbLn9Hdg4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:aa:cb:e0:6c:9d:73:5f:50:ee:13:41:ec:88:4a:15:0b:
         8f:ef:01:c1:74:0e:b6:35:54:c9:63:f9:f1:cf:ec:4c:10:ef:
         62:72:3a:96:95:77:8f:e3:a8:47:dc:34:b5:ae:e2:ac:9b:af:
         62:59:a5:eb:51:20:93:15:8e:e1:f8:c8:6e:cd:b9:65:30:17:
         d6:c2:c5:9f:9c:af:2d:0e:dc:76:62:b8:8e:a8:d6:9b:52:40:
         ac:37:e7:5c:e6:96:d3:a7:6d:7d:69:9c:5a:de:7a:d1:11:7e:
         1f:c5:43:58:e4:b2:d9:83:96:c7:b3:83:9b:31:d5:10:1b:ce:
         00:22:18:83:28:c4:13:e8:c6:74:18:4b:36:ab:17:c8:25:3a:
         59:45:45:e7:b7:4d:f1:75:2e:22:36:fa:cb:a7:2c:0f:67:45:
         ce:26:8c:8a:06:6d:bb:ba:2f:61:02:43:59:50:66:18:b2:68:
         06:9c:5f:f7:83:ee:fc:14:d1:a1:20:fc:e3:d4:3b:2c:b5:70:
         71:1f:dc:9a:ea:b6:33:1d:c3:e7:fe:85:27:1f:e7:fc:ed:05:
         da:74:bf:7d:09:99:78:42:f8:c7:08:89:3a:64:c6:6c:5c:56:
         39:6c:b3:13:8b:dc:e6:e1:86:99:9e:f0:6c:90:f9:c2:2b:38:
         a7:6e:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:33:20 2025 by rpki-client