Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rausivJPoXOWxNVXEmxHQgi_aRI.roa
File:                     rausivJPoXOWxNVXEmxHQgi_aRI.roa (raw, json)
Hash identifier:          LZRnyAXKs2DE7BlswGTroKJyENwy/S74yugE9Yq3RAc=
Subject key identifier:   AD:AB:AC:8A:F2:4F:A1:73:96:C4:D5:57:12:6C:47:42:08:BF:69:12
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3636
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rausivJPoXOWxNVXEmxHQgi_aRI.roa
Signing time:             Mon 10 Feb 2025 13:54:06 +0000
ROA not before:           Mon 10 Feb 2025 13:54:06 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.193.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13878 (0x3636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:54:06 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=ADABAC8AF24FA17396C4D557126C474208BF6912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:54:9a:2f:29:37:d2:c6:ef:23:68:9d:b6:
                    71:ab:8e:d9:4f:3d:9d:40:4a:fc:db:c5:dc:bf:c3:
                    e3:db:7f:8d:76:40:c4:97:ff:9d:13:2f:84:ab:44:
                    2f:50:c6:1c:ac:7d:20:b0:a1:73:05:f9:bc:8b:38:
                    dc:31:4b:6d:7d:9e:0e:9a:ee:73:75:3a:71:b2:fe:
                    5f:16:80:57:0c:01:45:47:8e:83:a8:a3:52:52:cd:
                    22:a6:fb:11:df:dd:0b:ef:b3:c6:5a:2f:04:1a:81:
                    28:38:2a:3d:1b:4a:30:83:8e:7c:9c:c1:98:c9:0e:
                    23:99:0b:55:34:68:82:93:5f:ca:36:ea:11:23:a9:
                    80:aa:62:d8:ff:ea:15:96:92:0f:5b:1b:3c:42:10:
                    b9:98:e7:c4:aa:bf:b8:6e:b3:66:51:a0:ba:05:d8:
                    ae:9c:4c:f4:8a:63:a4:6f:b2:49:07:17:a9:a2:75:
                    25:73:2f:5f:a3:e3:27:f2:a5:23:f6:89:08:20:30:
                    90:ce:8d:ca:ea:08:46:35:73:fd:9e:3e:27:67:f7:
                    77:9e:8c:c2:8d:b5:31:d6:25:c0:2d:bd:fa:fa:2d:
                    80:ce:14:86:f7:6b:cd:a3:f1:f5:6f:39:e7:94:b0:
                    c9:08:2a:d6:54:3d:84:59:4d:a8:73:b9:18:e9:31:
                    81:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AB:AC:8A:F2:4F:A1:73:96:C4:D5:57:12:6C:47:42:08:BF:69:12
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rausivJPoXOWxNVXEmxHQgi_aRI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:c5:ea:8b:d1:5c:c4:b7:3b:2d:17:86:60:1f:fa:79:04:f2:
         dc:1c:78:68:2a:ae:39:20:e3:3f:f3:00:38:a0:32:a2:38:46:
         8b:ab:58:b8:b1:47:48:84:8f:be:79:7d:ca:77:f0:04:9a:43:
         f8:f0:f9:f3:b0:f5:2a:1a:ff:5a:10:e5:34:84:55:c6:c1:87:
         76:bb:20:69:fd:d0:0f:f2:1d:b1:0b:b9:43:f4:e7:54:8d:00:
         21:a3:a3:d0:fe:06:70:33:9a:50:97:51:8a:cf:d2:53:3b:31:
         70:07:64:9b:e3:3a:a4:0a:27:7d:7d:05:05:03:99:bd:f7:02:
         30:45:4e:07:75:76:39:4e:e8:a5:3a:5f:4f:16:78:b0:0b:62:
         26:df:a9:3a:48:9a:06:28:d4:a4:b9:e8:46:1f:e9:72:7e:19:
         41:e7:44:d7:b3:4e:3f:39:40:d7:80:20:7a:e6:29:2f:0f:c8:
         3b:0a:c8:94:fc:1f:70:ef:36:f1:ef:0b:4e:07:a0:e0:ca:d9:
         f0:6b:0e:18:aa:f7:5f:b7:55:b3:d3:51:8c:d4:3a:c5:63:84:
         17:95:a4:42:9d:e6:65:26:ab:1a:46:35:97:57:0b:df:56:9b:
         31:8f:f8:d3:02:02:6f:79:f4:03:31:82:d4:9e:60:25:b0:5b:
         b0:2c:5a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:48 2025 by rpki-client