Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YEj-0nc1sITbs0RqQwWmanvM1Os.roa
File:                     YEj-0nc1sITbs0RqQwWmanvM1Os.roa (raw, json)
Hash identifier:          JGhOtmX9E4Od+JE5YGt+H8o9APrYCR1IZqydZqclSvU=
Subject key identifier:   60:48:FE:D2:77:35:B0:84:DB:B3:44:6A:43:05:A6:6A:7B:CC:D4:EB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       33EF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YEj-0nc1sITbs0RqQwWmanvM1Os.roa
Signing time:             Mon 10 Feb 2025 13:51:54 +0000
ROA not before:           Mon 10 Feb 2025 13:51:54 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        2407:4d00:fd02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13295 (0x33ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:51:54 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6048FED27735B084DBB3446A4305A66A7BCCD4EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:ab:07:48:73:4f:f8:43:61:a4:23:4c:a3:
                    09:cb:92:be:68:52:d4:1c:bb:63:9b:d1:9a:77:39:
                    4e:db:f5:6d:52:c2:ce:53:77:91:60:7b:40:1b:90:
                    cf:22:07:66:e9:e0:e3:67:15:5d:75:fe:17:4b:dc:
                    51:f2:65:10:c6:77:b0:18:28:28:a5:53:8e:a4:5d:
                    4d:af:b1:b1:4f:50:ad:1b:36:e8:bd:0c:ec:4a:c6:
                    7f:23:a3:77:91:9a:7f:ff:05:de:8c:9f:bd:4c:f5:
                    0b:2e:02:d3:7c:09:35:a3:0e:9f:c3:f4:3c:f8:df:
                    0d:14:3e:ab:68:38:c0:bd:5d:97:4b:62:10:e6:28:
                    a7:bd:f0:e1:f6:a3:6f:b5:cd:e4:70:06:49:64:b7:
                    ce:8a:bc:2f:77:e7:82:17:27:91:c8:e0:33:77:43:
                    82:fb:39:fc:ba:2b:c7:a6:8d:7e:6c:9f:73:84:89:
                    cb:63:76:e3:7e:fc:dc:f4:be:f5:b8:55:66:3c:1f:
                    71:b5:cf:a6:37:ae:ac:80:0d:d3:e8:ba:33:5e:06:
                    06:68:92:c9:0b:b9:4e:8a:d4:4f:9a:d7:31:9b:a4:
                    0d:6b:94:68:0e:3e:0c:d6:f4:1d:5f:29:09:ea:1d:
                    97:cc:ca:e1:6b:ec:89:ad:13:e7:bf:4a:aa:6e:14:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:48:FE:D2:77:35:B0:84:DB:B3:44:6A:43:05:A6:6A:7B:CC:D4:EB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YEj-0nc1sITbs0RqQwWmanvM1Os.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:fd02::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:54:08:76:f1:16:44:0e:82:01:40:e2:8e:50:3f:67:54:f9:
         6f:8c:ef:08:fa:40:83:43:89:be:ff:2f:8b:37:e9:7c:d5:e6:
         ce:3c:b7:a3:80:59:d5:50:50:90:e7:59:25:6f:90:84:4d:e2:
         3c:1b:a9:7e:c4:04:67:27:22:b0:29:da:5d:40:fc:d0:23:3f:
         66:08:c7:f2:00:e0:c6:84:85:99:28:13:e6:e6:2f:08:5a:69:
         80:7d:df:e9:6c:a8:25:18:db:26:66:0d:6b:b7:1c:1a:e8:e0:
         2f:72:46:23:28:29:32:b6:ed:fc:75:81:47:7e:6d:07:89:b0:
         d6:b2:d6:77:b2:30:ae:63:33:57:c3:3b:a2:ff:05:86:3b:f7:
         a4:fc:23:d0:3c:03:01:a4:bb:9c:0f:ec:4b:98:cd:f9:e5:cb:
         83:df:7a:a5:99:f5:1f:26:ad:d3:80:01:4d:9a:50:0c:c4:fd:
         5d:bf:56:f8:62:b1:28:23:99:f6:2b:28:ed:20:c8:55:c5:31:
         8f:f7:cb:1a:a4:eb:19:d0:40:71:2e:c7:22:11:db:60:09:39:
         88:4a:4a:15:aa:b3:62:c6:69:b0:a0:78:5a:5f:ca:52:bd:fb:
         80:cc:84:4d:2c:5c:d8:e1:23:20:bf:bd:13:82:32:b1:ab:18:
         b3:21:c4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:21 2025 by rpki-client