Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A8TWKKYvyhNywMPnPd_h40mgy4M.roa
File:                     A8TWKKYvyhNywMPnPd_h40mgy4M.roa (raw, json)
Hash identifier:          B6jE1goWTph3f6bV2xp7+1FJWyWyQnRKObRH7wChrpg=
Subject key identifier:   03:C4:D6:28:A6:2F:CA:13:72:C0:C3:E7:3D:DF:E1:E3:49:A0:CB:83
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       35C3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A8TWKKYvyhNywMPnPd_h40mgy4M.roa
Signing time:             Mon 10 Feb 2025 13:53:40 +0000
ROA not before:           Mon 10 Feb 2025 13:53:40 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.46.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13763 (0x35c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:53:40 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=03C4D628A62FCA1372C0C3E73DDFE1E349A0CB83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:44:95:8f:7a:e6:bc:72:b3:bb:45:24:93:
                    ca:7b:47:c9:a2:e4:f5:f1:7d:24:eb:3c:d9:00:48:
                    12:fa:21:bc:6c:77:47:c0:84:5a:b1:af:76:18:80:
                    54:ad:aa:48:d0:ad:4f:ae:00:0c:5e:3b:5d:e1:86:
                    96:0f:73:81:63:9f:e0:69:26:34:d7:d9:7d:28:b9:
                    bb:51:3f:aa:7e:c0:4e:d2:a8:02:16:35:5c:bf:cf:
                    24:f3:2a:45:18:3f:a8:2d:86:42:ab:b7:61:fc:57:
                    cd:bc:5e:52:0f:c5:ea:53:1c:94:9c:69:d8:e8:4f:
                    55:21:22:47:2b:8a:09:e9:3f:da:a5:1c:e9:a3:f2:
                    dd:93:e5:fe:63:0b:55:59:b9:ae:9b:8d:f4:3c:e5:
                    8f:e3:e8:33:e7:f1:69:e8:ee:71:00:3a:5d:b1:0a:
                    77:7c:48:19:ce:bb:59:74:26:f1:3d:96:00:1d:59:
                    fd:1a:54:50:89:94:21:0e:ed:fe:39:63:4f:96:69:
                    d2:07:a5:23:a1:f2:02:7f:ff:c4:90:d6:a6:b1:7c:
                    8f:4c:97:27:11:85:cc:95:d9:0f:83:ac:04:43:ae:
                    0a:75:c4:89:3c:6c:ac:09:7a:81:b3:50:75:5c:de:
                    fb:46:79:7b:1b:8d:00:1f:51:47:19:09:f7:bf:e3:
                    7f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C4:D6:28:A6:2F:CA:13:72:C0:C3:E7:3D:DF:E1:E3:49:A0:CB:83
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A8TWKKYvyhNywMPnPd_h40mgy4M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.46.64/26

    Signature Algorithm: sha256WithRSAEncryption
         76:19:21:28:13:c5:1a:06:4a:39:18:a3:57:83:56:e0:67:5e:
         c1:9b:7e:b3:5e:44:2d:f6:85:04:56:e5:4b:54:da:85:ec:94:
         45:98:1f:54:90:59:66:c4:11:c7:aa:d5:b2:eb:84:b0:5b:1c:
         01:aa:f4:26:8e:b7:4a:bd:cd:ef:b3:23:ce:4b:ea:a2:f4:50:
         73:cc:7d:e9:8e:54:52:08:94:76:4d:8c:8e:86:65:74:cf:b4:
         da:ba:df:2b:0d:fb:03:b9:a8:fe:97:85:00:39:84:1c:17:b6:
         ff:f3:ad:db:34:c9:72:2d:36:a4:60:44:49:44:7d:76:15:a8:
         e6:2b:94:af:57:0a:10:f5:c5:8d:13:f0:0a:7b:f8:74:1b:b0:
         c4:a1:99:ce:b9:d4:34:60:53:b4:c9:01:23:15:20:31:ef:18:
         fd:a2:0a:94:f0:29:9e:f4:7b:14:98:27:d2:10:ca:01:dd:d4:
         0b:d3:7b:03:6d:4a:77:27:41:a6:92:7b:5b:9d:01:c2:14:60:
         66:10:5d:ff:f6:f8:3e:96:7d:63:14:92:46:d0:07:9d:a2:75:
         73:d5:12:5d:27:33:92:26:c3:e5:40:fc:d3:fc:0a:bc:05:6c:
         1d:10:11:c1:06:6e:cc:84:32:3c:7f:4a:31:38:1c:26:9b:fc:
         99:96:fe:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:26 2025 by rpki-client