Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MZQZCdj--MxOjhYCoJZWohYelzA.roa
File:                     MZQZCdj--MxOjhYCoJZWohYelzA.roa (raw, json)
Hash identifier:          l00UJ1nUoDvFoYyKQgpAZ6O9GJ1mQcunOAX6fb2F1lI=
Subject key identifier:   31:94:19:09:D8:FE:F8:CC:4E:8E:16:02:A0:96:56:A2:16:1E:97:30
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       342B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MZQZCdj--MxOjhYCoJZWohYelzA.roa
Signing time:             Mon 10 Feb 2025 13:52:08 +0000
ROA not before:           Mon 10 Feb 2025 13:52:08 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.176.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13355 (0x342b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:52:08 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=31941909D8FEF8CC4E8E1602A09656A2161E9730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:37:1b:df:a1:3e:7f:78:53:fe:81:16:4c:
                    90:cf:4f:89:44:e9:35:a4:06:61:03:ab:fb:d7:6f:
                    f8:fe:99:ce:f2:3f:1d:50:84:ae:9b:dd:52:ba:57:
                    b3:e9:a6:42:48:85:ca:5c:ab:3f:a6:d3:91:ca:14:
                    f4:1d:25:a3:45:1a:f8:d0:e6:1c:80:d1:10:da:ed:
                    f8:3a:63:51:d0:0f:5b:d0:40:d0:ae:3e:97:88:4a:
                    1c:74:7e:fb:f7:d6:07:94:31:dd:91:19:3d:9a:b6:
                    6d:27:54:a0:87:c4:28:ff:01:ed:9e:46:3b:75:a8:
                    ce:49:60:10:45:87:a7:82:4b:2a:a8:2b:2f:38:34:
                    49:fa:ae:7b:35:30:46:4f:27:ef:6f:f3:f6:06:fa:
                    b7:5d:7c:dd:63:b5:ed:d0:c6:83:d3:f0:da:4a:3b:
                    bc:d1:00:ab:ec:65:b5:af:84:8c:1f:57:a8:2c:d5:
                    0f:c6:bb:a4:9a:92:0a:f2:f7:de:8c:be:7d:ec:19:
                    92:64:5f:74:74:6b:09:2e:ae:38:bf:52:90:0a:47:
                    ef:d7:40:69:bf:1e:4a:4c:c9:e9:fe:27:28:95:ac:
                    93:46:04:6f:87:c7:2b:11:d3:a2:0c:01:b0:a2:01:
                    75:5e:f8:58:47:4a:ab:32:0a:66:4a:7d:14:2c:61:
                    aa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:94:19:09:D8:FE:F8:CC:4E:8E:16:02:A0:96:56:A2:16:1E:97:30
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MZQZCdj--MxOjhYCoJZWohYelzA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:5c:da:2e:c0:a0:05:f7:d0:dd:98:39:fc:ce:60:ab:1b:01:
         b1:a8:a0:dc:4f:5e:33:50:6e:83:ae:99:13:1b:b3:02:e0:ad:
         82:ac:9e:8e:3f:3b:16:3b:ba:90:26:a0:14:7a:d1:e5:0a:9d:
         d8:11:fe:ea:3f:d9:e1:25:79:e5:6e:9d:a3:97:1e:e3:52:c8:
         72:2b:ce:e3:15:50:b3:cc:33:bb:23:ff:0e:93:2f:08:6d:9a:
         eb:67:c9:d1:dc:7c:37:da:d3:8c:5d:25:2f:b1:e0:89:8f:2f:
         9b:b3:15:76:c4:1f:d8:dc:72:d3:ed:00:e2:c7:c2:ca:c0:dd:
         91:ba:dd:15:8b:7e:5d:e0:25:24:35:d6:48:e6:7b:22:19:5c:
         9f:a0:bf:48:05:a8:1c:c8:e8:6e:3a:86:95:92:58:75:21:40:
         8c:ae:e9:e0:35:6f:63:00:ac:ab:61:86:6f:16:9c:d8:5d:b7:
         1c:4d:ef:01:b3:86:ad:bc:0b:d9:81:65:d0:d1:b5:68:1b:55:
         3b:43:2c:70:9a:92:ac:0f:96:43:3f:ad:ba:18:c3:80:9f:8b:
         bf:b0:7e:d9:16:df:a1:16:8e:5a:ec:ae:42:97:a1:ac:18:c8:
         7a:4c:93:72:88:9f:f8:21:09:f8:72:95:d5:77:d1:11:d1:c4:
         d6:a7:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:59 2025 by rpki-client