Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EyBvWwKI1misn5pJvbM9jOHYFcI.roa
File:                     EyBvWwKI1misn5pJvbM9jOHYFcI.roa (raw, json)
Hash identifier:          V61io2WdAYTNR3HfkXDk3lQL6q/yYbP5mV2VX4hq1C0=
Subject key identifier:   13:20:6F:5B:02:88:D6:68:AC:9F:9A:49:BD:B3:3D:8C:E1:D8:15:C2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3374
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EyBvWwKI1misn5pJvbM9jOHYFcI.roa
Signing time:             Mon 10 Feb 2025 13:51:26 +0000
ROA not before:           Mon 10 Feb 2025 13:51:26 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        106.1.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13172 (0x3374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:51:26 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=13206F5B0288D668AC9F9A49BDB33D8CE1D815C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:61:01:f4:24:80:c7:d9:dd:bb:d5:fa:28:a3:
                    e3:c8:30:3d:8f:d3:6c:45:c2:a2:27:5c:c6:3f:67:
                    29:7a:4c:10:fa:8a:22:4d:a5:0a:c9:c4:b2:ce:26:
                    2a:da:5a:fe:b8:02:17:01:e8:18:8c:a2:7d:27:29:
                    b7:70:9b:91:b4:8c:64:fa:8e:b9:ee:1c:e8:2e:5c:
                    ad:98:99:a2:4b:68:9d:eb:ac:0b:1c:6e:5a:09:86:
                    d3:c9:51:b2:21:27:cf:06:a5:c0:dc:5b:fc:fa:8f:
                    fe:d8:59:bf:d0:51:e8:09:1c:fe:23:9f:9d:58:07:
                    66:43:fa:82:7b:a4:c3:c8:9d:4a:dc:88:2f:53:6e:
                    e7:9e:2e:1f:1c:0b:cd:a5:de:42:a3:50:4f:93:a0:
                    0a:75:a3:02:e8:dd:5b:9c:e0:92:2e:86:32:09:64:
                    e3:09:01:38:bd:78:fc:60:00:d6:ca:39:2a:cb:9c:
                    45:43:8e:48:f2:7f:9a:40:ff:78:fe:31:e9:b2:b8:
                    cc:14:9d:31:3b:5d:bb:08:6e:2d:89:9c:41:e0:47:
                    f4:b2:1a:47:ab:38:17:ad:b3:8e:43:20:ff:24:b8:
                    3e:7b:6e:ad:41:6f:80:7d:52:45:4d:31:58:bb:56:
                    ec:19:72:55:44:f5:17:1b:43:bb:41:39:dc:6b:97:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:20:6F:5B:02:88:D6:68:AC:9F:9A:49:BD:B3:3D:8C:E1:D8:15:C2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EyBvWwKI1misn5pJvbM9jOHYFcI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:e0:11:a7:a9:6e:6d:8c:7e:84:a7:ce:69:28:36:a0:98:c2:
         af:68:ba:01:54:78:1f:c9:fb:c9:0e:50:0a:8f:21:bc:7a:3a:
         5e:38:63:b9:02:d4:32:10:e5:ca:e1:e2:0e:3e:c6:f8:e0:6b:
         53:78:8d:ab:f9:69:4d:6b:62:83:02:2d:1d:fb:1b:5a:98:4e:
         17:19:0d:38:e5:25:ec:cb:f7:42:9d:f7:f2:09:54:e3:ff:18:
         96:4e:1c:5c:66:36:4c:2a:76:6e:e5:45:ac:36:eb:75:7a:ff:
         40:ed:f7:0d:7e:93:0d:67:43:4f:da:f3:5d:92:6d:93:05:62:
         5c:06:8d:8d:c0:5a:1b:6d:6c:55:50:41:a5:7e:a8:7a:47:02:
         08:73:3d:09:8c:32:a5:42:76:4a:ee:a7:1d:b5:22:55:9a:96:
         17:00:81:dc:31:e9:26:46:8d:f4:a1:2c:22:d0:fe:71:17:70:
         cc:9a:89:0c:8e:2f:f9:a0:84:37:55:c4:f1:7d:08:43:c2:d3:
         69:bd:e5:ca:e0:2d:8e:0d:e6:d5:7f:33:6a:47:12:6d:bb:23:
         73:47:65:12:03:41:a3:92:da:54:24:dc:ca:d8:24:bd:dd:5b:
         48:e0:60:33:7a:82:c0:9d:4c:66:08:3e:90:22:79:0b:42:a0:
         f2:28:e7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:52 2025 by rpki-client