Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r6uQBORao5ajsWqYTReNe5QaVkM.roa
File:                     r6uQBORao5ajsWqYTReNe5QaVkM.roa (raw, json)
Hash identifier:          gXBUGUrFKwHfkhmKyLK1joUjDaUvv6zwUn3//QmLBTM=
Subject key identifier:   AF:AB:90:04:E4:5A:A3:96:A3:B1:6A:98:4D:17:8D:7B:94:1A:56:43
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3574
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r6uQBORao5ajsWqYTReNe5QaVkM.roa
Signing time:             Mon 10 Feb 2025 13:53:21 +0000
ROA not before:           Mon 10 Feb 2025 13:53:21 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.192.0.0/14 maxlen: 15
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13684 (0x3574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:53:21 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=AFAB9004E45AA396A3B16A984D178D7B941A5643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ed:b8:c9:92:34:1e:bb:73:ea:87:cc:27:7d:
                    ca:98:9e:60:5d:86:08:0f:f7:e7:0d:17:75:3c:09:
                    0a:00:f6:a9:8d:9e:de:77:bf:1d:dc:75:71:3b:f4:
                    9f:9b:23:bd:dd:1e:a2:db:f2:ea:8e:20:74:9c:47:
                    94:45:eb:db:ec:34:81:ff:6c:af:ca:d2:1a:a9:ef:
                    9e:18:30:dc:8e:c6:93:00:a8:4a:00:21:5d:d8:a3:
                    e4:39:51:87:94:28:f0:f7:23:c2:a6:53:2a:73:e5:
                    0a:9d:1c:62:43:ee:53:54:f6:63:2d:c3:70:de:5c:
                    46:1e:88:c7:f1:8d:d3:c2:87:73:d2:b7:ea:84:70:
                    b1:a2:24:4a:a5:7b:7e:2c:c3:50:47:81:46:cd:93:
                    da:09:60:59:22:58:c0:27:06:d5:15:65:13:b3:f2:
                    53:f1:28:d9:6d:83:1a:fb:23:77:fc:88:6e:05:e3:
                    e8:2d:7d:11:e9:a9:6e:11:4c:84:16:ae:9f:20:c1:
                    79:54:66:3e:bc:ee:0a:5f:55:77:f9:22:c2:5c:1d:
                    a9:4c:0f:4f:21:86:89:81:04:a5:b4:07:fe:4f:6b:
                    b4:6c:c1:e2:ec:57:79:b0:ca:ca:27:99:9b:62:04:
                    86:af:e4:0a:a6:5d:45:62:20:41:8d:9c:84:72:a3:
                    5b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AB:90:04:E4:5A:A3:96:A3:B1:6A:98:4D:17:8D:7B:94:1A:56:43
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r6uQBORao5ajsWqYTReNe5QaVkM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         39:e0:c1:c1:32:e4:2b:3c:19:4a:8f:d7:4e:36:d8:5d:ac:20:
         47:93:0b:db:5c:41:bc:90:5e:8b:6b:c2:01:0a:d8:24:e5:d0:
         df:59:2f:d9:e3:f1:31:48:9d:3e:9c:6e:b4:76:6f:70:5a:a0:
         e8:09:99:2b:d4:ab:bb:53:63:47:55:41:1b:c0:0e:ac:45:91:
         c2:e6:a8:bf:14:98:7f:d4:0f:a5:9a:0c:1e:f0:08:49:f5:3b:
         87:a9:1f:fd:59:63:37:a8:ee:71:67:d7:e7:ea:8d:d1:8c:97:
         22:22:f0:b1:21:fa:0a:f3:60:5e:4a:59:09:7b:e6:af:e8:c8:
         83:16:a9:f4:3b:dc:f1:45:81:02:c3:58:bb:8b:9f:b1:86:03:
         1e:98:c2:ef:64:d3:4e:1d:46:a9:c5:96:54:2c:9f:ac:5a:6f:
         74:b9:b0:42:e4:a6:b3:3c:cb:e6:3b:72:f1:1c:b5:53:61:70:
         8e:e0:70:55:b6:0e:f5:d8:2c:18:a3:d9:16:b7:67:f9:bd:11:
         6b:29:44:45:41:16:ae:e1:e1:5a:d5:4b:9b:ac:58:05:d6:96:
         1b:25:b3:37:c6:11:50:e1:44:a6:81:a3:96:f0:0b:18:17:b5:
         54:1a:a9:f4:ec:c1:cb:7e:bd:03:a3:c5:cb:10:84:ca:fa:65:
         49:5f:77:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:21 2025 by rpki-client