Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h06_L_iUxp6UpuTRfK63C5okBC4.roa
File:                     h06_L_iUxp6UpuTRfK63C5okBC4.roa (raw, json)
Hash identifier:          gj3bhdAgMXytR6UYiDoVDp+391r9eL2nFhaine4E9sc=
Subject key identifier:   87:4E:BF:2F:F8:94:C6:9E:94:A6:E4:D1:7C:AE:B7:0B:9A:24:04:2E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3674
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h06_L_iUxp6UpuTRfK63C5okBC4.roa
Signing time:             Mon 10 Feb 2025 13:54:20 +0000
ROA not before:           Mon 10 Feb 2025 13:54:20 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.194.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13940 (0x3674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:54:20 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=874EBF2FF894C69E94A6E4D17CAEB70B9A24042E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:1f:28:95:ae:c8:42:95:5d:27:72:91:38:
                    cd:f0:d2:61:ce:18:cc:c4:e0:06:c2:8f:80:42:5c:
                    ac:0e:cb:f9:c6:c5:11:c7:b9:95:5d:82:1c:3c:4e:
                    78:23:08:36:07:09:14:2b:3f:54:c7:7e:72:6b:19:
                    c1:09:84:79:36:a0:98:8e:43:58:2d:59:fc:50:63:
                    13:ef:84:89:49:6b:15:af:3e:72:57:e9:ec:3a:c3:
                    07:7e:e1:34:b4:db:36:8d:0a:81:6d:eb:d4:5c:ab:
                    2b:8f:1a:d2:99:29:03:b0:ad:d9:ad:57:d7:2a:da:
                    96:7a:7a:e7:33:75:0b:83:cc:cb:4c:26:5f:23:cc:
                    0d:7f:a7:1d:62:97:0d:a9:fe:da:1e:cc:ed:06:fd:
                    be:cf:c1:97:78:2b:00:37:b9:bc:b7:7e:03:aa:70:
                    bc:75:4c:a9:51:9e:32:ff:14:40:82:95:84:fe:4b:
                    b3:97:73:10:64:f3:f3:ac:26:98:3f:89:74:3f:bb:
                    2a:35:81:e8:4d:0b:b6:c3:89:97:d7:f0:90:1e:78:
                    6b:d9:ce:85:3f:d6:a6:27:50:ab:51:97:16:95:c6:
                    c1:60:8f:78:74:ff:62:d7:58:9b:e3:5c:9e:7d:29:
                    b1:52:6a:a7:fe:bb:d3:91:f3:93:b2:62:8b:75:f1:
                    c5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4E:BF:2F:F8:94:C6:9E:94:A6:E4:D1:7C:AE:B7:0B:9A:24:04:2E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h06_L_iUxp6UpuTRfK63C5okBC4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:cd:10:88:e2:71:fc:ce:db:2b:4e:09:4c:cb:43:4c:c3:ee:
         fd:fc:f2:36:fd:02:f7:94:1b:da:e2:cd:98:e6:a4:c6:b0:15:
         25:04:2d:e1:7a:93:55:21:41:1f:98:b1:5b:40:df:b3:d1:f3:
         e9:b1:f4:62:c9:bc:1e:b7:49:16:36:b0:b8:c1:8b:9e:22:0a:
         86:5f:ca:9d:07:8e:22:89:39:32:05:71:f6:a2:f0:37:97:9c:
         bc:f8:a7:74:e9:24:28:5c:bf:a7:82:f9:14:51:92:57:94:2d:
         e3:1a:43:c8:28:c6:79:cf:e5:59:08:6b:6f:75:0f:74:aa:d9:
         68:4a:de:aa:f0:d4:dd:d3:de:59:59:e0:7d:48:34:15:f3:2d:
         a1:26:d4:3c:c8:6b:04:42:57:e6:d5:5b:21:a3:d2:73:e2:f3:
         b1:d7:66:3e:ed:0c:62:cc:f3:bf:c4:8a:d7:f5:45:f0:76:81:
         f9:a4:08:98:a6:3d:6b:b2:69:37:19:20:04:17:3c:42:69:cf:
         14:93:b0:80:ac:27:cf:c6:d2:c8:7c:5a:66:52:ff:c3:5e:42:
         6d:a9:96:49:22:3e:69:08:d6:23:a2:d1:0a:83:55:61:e5:fe:
         32:b5:8f:c6:c6:aa:2a:2a:83:36:bf:78:cd:7b:2d:e4:e7:3b:
         86:09:89:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:04 2025 by rpki-client