Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GbwLk9gy6F_OW_9D1_W61bjmogg.roa
File:                     GbwLk9gy6F_OW_9D1_W61bjmogg.roa (raw, json)
Hash identifier:          R/a1DRhc26J0SJtBWe9nMYUBFhwY3UvBnf4p6L3qHbU=
Subject key identifier:   19:BC:0B:93:D8:32:E8:5F:CE:5B:FF:43:D7:F5:BA:D5:B8:E6:A2:08
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       34BE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GbwLk9gy6F_OW_9D1_W61bjmogg.roa
Signing time:             Mon 10 Feb 2025 13:52:39 +0000
ROA not before:           Mon 10 Feb 2025 13:52:39 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        118.233.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13502 (0x34be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:52:39 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=19BC0B93D832E85FCE5BFF43D7F5BAD5B8E6A208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f7:c0:e8:c2:dd:4a:68:35:7a:f0:58:22:a6:
                    ad:e9:f6:87:5d:8e:48:78:9f:97:8b:a8:67:c5:9f:
                    49:f9:1a:7a:39:de:e6:23:be:58:ac:70:8d:34:e8:
                    13:ef:65:f7:97:aa:61:97:9a:a4:5f:7f:c6:95:d5:
                    e7:93:3d:48:2a:af:64:9a:f6:a4:ac:dd:b5:e9:d2:
                    73:b6:49:f9:1b:38:f6:45:bf:5e:c3:dc:26:91:65:
                    dd:58:b7:a9:37:68:02:fb:a0:38:28:c7:3b:ab:f3:
                    6a:21:63:9e:e2:14:5b:27:c6:ab:83:64:b4:d8:f1:
                    cb:71:76:e4:4d:86:d3:e2:68:60:93:98:db:c4:e6:
                    32:83:94:60:b2:0f:61:0e:9a:44:aa:4e:e9:ea:57:
                    8c:3a:eb:bc:88:bc:b3:21:00:dd:fd:ab:b3:e7:24:
                    22:74:ad:ae:01:00:e2:e6:9e:4f:62:30:de:c7:05:
                    90:44:21:73:d1:33:a6:01:a8:1f:86:76:a2:ab:31:
                    9b:9d:90:bb:e9:76:fb:7a:1d:f6:1c:a1:2d:04:f1:
                    b7:17:cd:d6:79:cf:a4:a8:2a:0f:7a:ff:7c:9d:96:
                    7d:b9:a5:ea:93:47:50:1c:8c:91:b3:d5:77:59:17:
                    8e:52:7f:e5:0c:7d:7b:80:f0:b2:42:b6:4a:56:5a:
                    72:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BC:0B:93:D8:32:E8:5F:CE:5B:FF:43:D7:F5:BA:D5:B8:E6:A2:08
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GbwLk9gy6F_OW_9D1_W61bjmogg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:1f:8e:9d:63:d9:8c:41:38:6e:79:78:01:48:e8:23:04:83:
         d4:9e:0e:2a:a9:a5:02:57:b3:d3:9d:64:60:cf:f8:d8:07:25:
         df:c8:8d:6f:7d:8b:a0:1a:6d:64:0c:18:ca:e6:46:5b:78:74:
         96:da:f6:b6:af:07:35:04:27:77:df:48:66:2f:bf:1c:52:76:
         7c:37:b3:36:7d:11:3b:35:cc:f1:54:d6:92:f6:d3:dc:18:bc:
         4c:a6:8f:01:db:c1:71:32:fe:bf:86:2b:8a:4d:f2:8e:b4:dd:
         e7:14:e3:9f:74:52:3b:53:bc:9f:aa:bf:2f:2b:29:b9:0c:4f:
         ac:16:c0:e4:5d:d1:fb:25:40:02:33:50:89:b5:9c:35:00:ef:
         37:02:24:0d:18:39:85:9e:f5:b2:56:7a:ab:cf:ff:24:ec:42:
         5d:b4:32:2e:30:07:45:d3:8c:96:9c:d0:be:74:9e:6e:e6:0f:
         1d:11:17:07:5a:e5:4c:f0:b0:ce:b8:58:d0:1c:7c:74:62:44:
         21:35:e0:19:12:36:fe:67:d2:64:cd:65:93:5c:d1:e1:d5:4d:
         05:9c:0a:32:f3:99:59:e5:8e:70:08:a0:38:c5:9f:78:4d:c1:
         8b:41:61:40:ff:d1:06:e9:88:d6:34:6d:82:bb:13:05:35:44:
         68:ad:a2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:51 2025 by rpki-client