Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SBu4Vxg2om5yi_reLpDzUnoOEBs.roa
File:                     SBu4Vxg2om5yi_reLpDzUnoOEBs.roa (raw, json)
Hash identifier:          mdVi3lOiG9gIALDvoALhX8GtIMBVbBcOQjArQVW5uiI=
Subject key identifier:   48:1B:B8:57:18:36:A2:6E:72:8B:FA:DE:2E:90:F3:52:7A:0E:10:1B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3419
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SBu4Vxg2om5yi_reLpDzUnoOEBs.roa
Signing time:             Mon 10 Feb 2025 13:52:04 +0000
ROA not before:           Mon 10 Feb 2025 13:52:04 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        118.232.0.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13337 (0x3419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:52:04 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=481BB8571836A26E728BFADE2E90F3527A0E101B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:ce:8e:9c:ec:56:26:3f:7a:8d:2e:6b:3e:
                    ac:6a:c9:f2:a0:a5:31:b4:3d:a6:fe:c2:6c:c8:01:
                    c8:11:2b:c8:fa:2b:01:a9:75:4c:4c:5f:43:1c:83:
                    e4:08:c7:6b:87:53:90:bd:f0:5d:f3:74:5d:2c:e8:
                    42:41:48:a1:76:57:b6:32:02:49:61:5c:b5:17:a5:
                    2b:41:72:28:16:b4:5a:fa:0b:5a:28:7e:b2:86:2c:
                    29:43:d4:de:75:d2:0d:eb:77:0e:3b:60:61:e8:c2:
                    c8:34:43:09:af:a7:53:44:d7:59:98:07:6f:07:94:
                    e4:9a:ef:71:07:30:35:dc:e8:a9:9f:23:85:b9:cf:
                    2f:6c:3a:72:3a:95:5e:4c:04:f2:81:4e:16:61:9c:
                    b1:2f:6e:eb:0d:7f:2c:07:d5:aa:e0:fc:6d:3d:e8:
                    5e:ee:59:40:36:fa:0a:7c:34:34:8b:76:d3:47:97:
                    90:1d:a1:99:25:29:69:c6:c7:1f:c3:8f:57:0c:33:
                    c3:2d:94:72:f0:ba:9e:86:4c:88:8d:e8:2e:6e:ab:
                    26:f4:b1:76:8b:6f:c3:45:e9:09:e5:e8:3d:bc:86:
                    25:85:03:3e:7e:a2:11:71:a2:49:4e:4f:f0:fa:2d:
                    cc:f2:ca:a6:a3:3f:7d:92:19:d3:ba:8d:f2:ed:ba:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1B:B8:57:18:36:A2:6E:72:8B:FA:DE:2E:90:F3:52:7A:0E:10:1B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SBu4Vxg2om5yi_reLpDzUnoOEBs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:5f:88:78:5c:7d:01:14:8b:15:d7:8b:e2:2a:33:d8:3f:48:
         57:5a:0d:d1:ab:4d:99:83:0e:c1:1c:d5:48:61:0b:a7:c8:b5:
         54:fe:70:41:0d:30:cc:b6:c9:04:dd:50:03:4d:fc:f0:18:89:
         b5:1e:66:6e:77:c2:16:14:62:2b:cc:27:de:ab:af:81:12:48:
         66:2e:6e:eb:1b:a6:93:8f:8a:cd:b1:8b:e6:1c:a2:fa:b5:68:
         d6:a5:9c:ae:dc:28:18:80:6d:26:95:1f:da:e3:35:fe:8e:a1:
         28:18:64:7b:39:da:3e:07:73:8f:62:dd:3b:6a:89:af:8d:63:
         36:36:67:ea:25:2d:ae:19:05:c9:d1:88:0f:96:40:d0:16:85:
         fa:3c:77:2a:61:9e:db:9c:a8:da:75:72:1b:a7:11:7d:91:1b:
         4f:78:80:02:55:ba:ac:23:e3:56:2e:80:73:2e:2d:56:bc:dc:
         6d:48:d4:e5:56:09:f6:49:4a:b1:46:13:f6:59:aa:12:80:ae:
         b2:32:a2:d6:e9:74:4e:28:37:ca:4b:7b:7a:5e:76:d8:88:73:
         8b:9f:ae:13:88:56:fc:46:2d:9d:d9:3c:21:7b:ec:26:5a:31:
         d5:04:20:99:5c:0b:df:7d:4e:3f:c3:ed:3a:c5:d1:47:59:5b:
         bc:02:3b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:50 2025 by rpki-client