Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zRuHXu2IKn-WkI6xF7NUrDSAJks.roa
File:                     zRuHXu2IKn-WkI6xF7NUrDSAJks.roa (raw, json)
Hash identifier:          yRJd4Wbu4bX6p537PqI/8Nv0CAD+API2qTfLc8ND3yU=
Subject key identifier:   CD:1B:87:5E:ED:88:2A:7F:96:90:8E:B1:17:B3:54:AC:34:80:26:4B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       37DA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zRuHXu2IKn-WkI6xF7NUrDSAJks.roa
Signing time:             Fri 22 Aug 2025 08:44:42 +0000
ROA not before:           Fri 22 Aug 2025 08:44:42 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38841
IP address blocks:        106.1.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 08:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14298 (0x37da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 22 08:44:42 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=CD1B875EED882A7F96908EB117B354AC3480264B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cd:5b:f7:35:13:81:69:a0:34:3d:03:6b:a8:
                    71:0b:cd:79:6b:0e:b3:f0:da:af:fc:2c:bf:44:c6:
                    21:3f:2a:5f:d3:43:66:55:97:98:54:73:cc:37:cd:
                    73:c2:98:6e:63:5c:88:2e:0c:4f:03:6f:07:21:70:
                    7e:52:18:42:a8:e8:cd:7b:ad:e6:91:c0:48:cd:6a:
                    4e:c0:c9:dd:59:c0:35:45:a7:7a:d5:f3:49:ce:45:
                    11:a2:c5:09:46:3b:0b:c8:fc:37:36:af:e8:18:c6:
                    64:30:99:15:c0:fd:4b:0c:f6:76:71:92:1a:0b:3c:
                    c3:46:30:bb:c9:6a:c0:5d:52:81:6b:e0:55:3e:16:
                    09:58:83:8e:9a:02:ef:a2:ff:df:c0:d0:4c:18:4a:
                    fa:70:64:bd:34:9e:a4:5d:22:e7:02:54:35:3b:33:
                    03:f5:d0:2b:28:a8:09:4d:08:d8:69:f4:9a:18:ed:
                    de:2c:f1:08:55:8d:99:0e:59:1b:75:a9:7c:68:78:
                    d9:1d:ca:7b:d9:f4:57:e0:e6:d1:0d:c4:bf:e5:af:
                    9e:ae:8e:1e:ed:bf:14:bd:19:5c:0c:d5:4b:3d:a1:
                    b1:c0:13:3a:c7:e1:8a:a5:17:c3:3d:50:fc:5c:9c:
                    55:aa:f1:97:a6:46:e0:b8:b5:b8:7d:3d:1e:05:f7:
                    8e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1B:87:5E:ED:88:2A:7F:96:90:8E:B1:17:B3:54:AC:34:80:26:4B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zRuHXu2IKn-WkI6xF7NUrDSAJks.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:fb:84:4e:4e:20:10:87:92:df:dd:5e:9d:5a:c3:c2:49:b1:
         8b:c6:d2:22:ec:b8:72:c2:42:ba:c3:44:1a:1c:84:b5:4c:6d:
         09:5d:df:81:74:b3:2f:39:43:13:7f:bb:e5:11:02:22:91:fe:
         c1:36:1b:04:12:49:a7:1d:38:52:54:f0:3d:8b:1a:ad:24:80:
         6b:69:72:aa:cc:59:8d:c8:67:e8:57:37:92:04:34:89:5c:af:
         ce:3b:2e:38:67:de:aa:bc:d2:89:25:cb:15:0b:e6:a0:e8:ee:
         64:ea:77:c9:6a:5f:ff:b0:2f:92:d0:06:4e:7a:e5:94:60:4e:
         ac:85:c0:27:8c:ad:f0:3e:5d:55:24:c1:b5:0a:5f:ee:c5:e0:
         5b:f4:bc:cd:da:be:ce:59:cc:2b:3c:2c:a7:63:b7:d2:72:06:
         b5:2b:a0:da:08:ed:ae:4a:96:54:cd:a8:ab:44:f1:7f:55:0d:
         7c:1b:bf:9a:13:0b:d8:f3:f7:ae:4e:2c:06:e5:9e:48:26:04:
         5b:62:3a:ce:d0:da:1f:5e:b6:b9:92:e4:d7:81:9c:f1:27:6d:
         de:b6:9b:7f:9e:e0:c6:c8:12:20:16:5c:c9:49:fe:c6:c2:cd:
         61:3c:94:76:52:3f:f8:71:25:3b:f5:02:b2:0d:a4:6c:9c:a0:
         29:39:03:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:31:03 2025 by rpki-client