Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wuNp951WjDbdrf5OsJ1Lu9jK2fc.roa
File:                     wuNp951WjDbdrf5OsJ1Lu9jK2fc.roa (raw, json)
Hash identifier:          wXwdrYOxRyAx5TwE4H80xycIS1qwMHQtT9HaHehh020=
Subject key identifier:   C2:E3:69:F7:9D:56:8C:36:DD:AD:FE:4E:B0:9D:4B:BB:D8:CA:D9:F7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3971
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wuNp951WjDbdrf5OsJ1Lu9jK2fc.roa
Signing time:             Fri 22 Aug 2025 08:46:18 +0000
ROA not before:           Fri 22 Aug 2025 08:46:18 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        180.176.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14705 (0x3971)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:46:18 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C2E369F79D568C36DDADFE4EB09D4BBBD8CAD9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:3a:06:d4:24:fc:4c:75:1b:68:90:2f:ce:
                    dc:f7:85:77:34:ab:a1:5b:b4:29:ff:3b:3e:ac:c7:
                    a6:85:8a:7b:eb:82:b5:6f:3e:89:50:bc:b8:e1:3f:
                    87:33:a3:9a:af:73:15:af:7c:1c:e2:e3:87:fc:cb:
                    fc:b3:91:4d:97:19:46:44:64:ad:90:74:5e:67:2a:
                    22:11:ea:fd:94:63:f5:86:d3:6d:48:66:54:2e:ae:
                    be:59:c2:f5:19:02:65:c0:f4:21:63:d7:5d:07:ab:
                    ea:a5:cd:f9:34:f9:31:38:1e:95:60:0a:a1:91:c4:
                    3a:54:03:b3:75:13:cd:ef:14:b2:1d:f3:68:24:b7:
                    f1:e1:0f:9f:0e:5e:b6:00:ff:0e:b3:43:b4:35:e3:
                    a1:72:7c:28:81:83:9a:0c:29:af:80:54:82:04:e4:
                    e0:20:a4:5e:62:bc:75:3e:2a:18:be:34:9a:69:34:
                    44:09:a9:34:5e:bf:97:86:a5:af:53:b9:46:99:62:
                    eb:23:36:16:90:95:c6:da:d8:8d:ca:ce:f2:41:c7:
                    2b:6e:72:24:77:33:0d:cd:18:99:6f:6e:11:38:90:
                    2d:26:f1:e5:42:a8:b6:d3:21:ad:94:eb:f3:81:b6:
                    23:c7:a3:2b:f2:34:50:a1:ce:05:9e:fb:43:c4:fa:
                    60:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E3:69:F7:9D:56:8C:36:DD:AD:FE:4E:B0:9D:4B:BB:D8:CA:D9:F7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wuNp951WjDbdrf5OsJ1Lu9jK2fc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:ec:cc:d2:76:61:60:2f:e2:5d:63:70:02:d4:d2:e2:7b:6c:
         27:90:b6:be:ed:0d:5f:b8:21:69:e9:a7:59:fe:31:d9:b3:23:
         6b:9f:3d:57:3e:23:98:d1:02:a4:8d:47:f0:1d:e2:cc:7d:85:
         e4:55:27:c2:c1:1a:fb:c5:a3:42:56:5f:be:a6:ac:20:41:7e:
         aa:07:c0:c9:f2:93:1b:00:64:60:81:2b:08:66:1b:34:93:26:
         3e:08:67:d1:04:d6:c5:b0:c0:37:0c:32:9c:bb:b5:97:19:c2:
         9f:c8:2e:cc:59:66:37:3c:58:1f:3d:68:32:9c:35:94:61:35:
         55:4c:4d:a2:7f:4d:c2:52:64:5b:ed:61:3e:b0:90:87:ab:68:
         ab:1a:e0:cb:49:b5:d9:cd:26:a5:4a:d2:a7:bb:bc:43:6d:4c:
         1f:63:0d:e6:fa:e0:52:da:a4:70:a4:f1:95:b5:9b:12:17:db:
         dc:fa:46:3a:34:33:cd:64:f1:b5:25:09:3c:0a:e1:cc:e2:23:
         8e:f2:03:ee:dc:73:7a:fb:90:90:b5:e7:97:47:1f:f4:b9:8f:
         21:fe:36:37:7e:8c:df:22:44:0c:60:17:25:eb:52:a7:98:4e:
         53:ac:a5:7e:a5:ed:b2:58:2c:75:81:59:6e:69:05:16:9c:5e:
         73:52:77:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:25:24 2025 by rpki-client