Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OF-TCXLUgjUJijEE2_n15SvOA60.roa
File:                     OF-TCXLUgjUJijEE2_n15SvOA60.roa (raw, json)
Hash identifier:          hKv0gwPtZqXb6ctOKya6Aepms6sU3Mqq8Sj4Lj1D4iI=
Subject key identifier:   38:5F:93:09:72:D4:82:35:09:8A:31:04:DB:F9:F5:E5:2B:CE:03:AD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3465
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OF-TCXLUgjUJijEE2_n15SvOA60.roa
Signing time:             Mon 10 Feb 2025 13:52:20 +0000
ROA not before:           Mon 10 Feb 2025 13:52:20 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.194.205.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13413 (0x3465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:52:20 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=385F930972D48235098A3104DBF9F5E52BCE03AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:bb:ab:6f:a8:11:83:a9:fd:76:4b:47:3b:
                    40:4a:ee:6e:3a:a3:0b:f4:ec:bb:01:60:0b:ec:e2:
                    63:09:61:c5:00:f4:a6:21:a1:bf:6e:86:b5:0b:3e:
                    38:b2:48:de:4b:5b:01:fc:51:98:77:ec:27:cc:8f:
                    c2:80:6c:0c:8d:01:8d:c2:34:a8:e8:36:a6:a1:1d:
                    f6:84:70:a8:8c:a5:09:40:97:7a:4a:0e:70:e6:44:
                    01:0b:31:50:69:9c:21:f2:3e:de:c1:a2:b8:92:c6:
                    9a:d7:36:15:db:b7:3e:4b:ab:4e:aa:e2:bb:cc:69:
                    aa:88:9c:26:87:33:95:11:af:60:0b:d2:5f:1d:c2:
                    93:08:eb:6c:59:5c:3d:b0:86:6a:c4:31:63:03:3a:
                    fc:f2:2e:3f:a9:a2:ff:5e:6a:0d:45:4b:89:7f:5e:
                    85:0f:89:ff:b6:91:a3:21:d0:bf:89:9e:fe:b2:89:
                    10:b9:6a:28:ba:c8:d9:f7:a3:f9:d3:a5:9c:5c:1a:
                    54:9a:a6:50:7d:85:0d:74:0a:d3:63:42:f1:4a:c4:
                    3b:db:2f:fc:16:b2:ef:3b:7d:aa:7c:43:4a:56:1a:
                    e6:2d:89:5a:48:ee:73:39:44:ef:77:16:5a:09:30:
                    a0:50:1c:0f:5d:58:69:be:d0:24:4b:06:b3:ca:c2:
                    72:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5F:93:09:72:D4:82:35:09:8A:31:04:DB:F9:F5:E5:2B:CE:03:AD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OF-TCXLUgjUJijEE2_n15SvOA60.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.205.64/26

    Signature Algorithm: sha256WithRSAEncryption
         1a:7c:53:16:4c:96:46:11:cd:6b:85:2b:ff:64:50:4e:c9:89:
         b9:6a:e8:be:ef:6d:0f:d5:14:c9:3a:82:77:5e:ba:a4:c7:e2:
         98:33:36:8c:74:51:85:e7:17:63:52:75:f5:6c:74:fb:12:13:
         e3:89:35:63:2f:93:da:af:28:4e:ce:ad:c4:a9:86:f4:63:99:
         5c:dd:74:c2:24:8a:8e:1b:ad:52:90:60:45:ea:2f:fe:21:12:
         34:4c:cc:12:63:6a:b9:62:b7:75:f4:e5:e5:c3:c3:bd:06:13:
         e2:63:46:9f:e2:4c:48:7c:4a:bd:70:dd:f1:c5:0b:96:3f:28:
         0d:59:43:c2:f5:c3:bd:e3:07:ee:b6:0a:e7:4e:2d:80:f8:b2:
         53:19:d7:c0:00:69:11:2f:1c:59:f3:5d:96:c7:cc:a2:07:c9:
         47:9e:c0:9f:a5:a7:27:7e:3a:be:b3:b4:e6:59:96:1f:47:d4:
         af:b0:bb:68:18:8a:7e:86:40:ab:e7:6c:6d:ae:f3:c2:21:a4:
         fc:dd:52:72:f0:4c:4b:da:af:55:3a:39:d6:82:d3:15:9f:67:
         b2:3b:a7:18:70:ae:ac:59:0c:9a:87:a8:2a:07:90:f5:15:12:
         48:d2:2a:25:ea:a3:1b:21:12:23:95:ec:41:7c:8e:f1:66:58:
         18:51:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:59 2025 by rpki-client