Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sdsXhSKc-0jGEjQYX5qzGI0_kJ0.roa
File:                     sdsXhSKc-0jGEjQYX5qzGI0_kJ0.roa (raw, json)
Hash identifier:          sJjd5vYyuU1q1HQOeORmBB9va+GULJhnji0HfWiLpQA=
Subject key identifier:   B1:DB:17:85:22:9C:FB:48:C6:12:34:18:5F:9A:B3:18:8D:3F:90:9D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       360D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sdsXhSKc-0jGEjQYX5qzGI0_kJ0.roa
Signing time:             Mon 10 Feb 2025 13:53:56 +0000
ROA not before:           Mon 10 Feb 2025 13:53:56 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        106.1.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13837 (0x360d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:53:56 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=B1DB1785229CFB48C61234185F9AB3188D3F909D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:a8:76:c0:f4:c7:3f:ed:d5:b9:13:6a:36:
                    e3:48:40:ae:fe:f9:61:3f:fd:f5:18:68:a3:9a:f0:
                    46:81:c8:08:a9:0f:4a:61:99:68:77:27:e9:dd:9e:
                    e3:97:56:3e:70:c3:7d:b5:30:cd:48:eb:cd:fb:25:
                    7a:96:23:b5:7c:d5:63:b7:b0:28:90:91:76:60:69:
                    e0:9e:ca:38:93:95:82:65:cc:8a:73:da:f2:41:73:
                    5e:23:00:0c:43:d8:ee:5f:d2:99:4e:10:f4:a1:40:
                    f5:a6:da:a9:d2:d3:47:cf:a5:78:cb:34:3e:3c:c6:
                    42:75:88:24:b6:f3:16:6a:c8:55:f7:dc:c5:b3:98:
                    37:fd:43:da:60:c4:88:71:4e:3a:b3:06:8d:fe:a0:
                    28:68:f4:55:16:4f:76:fd:ee:2a:73:0f:42:86:2b:
                    8a:99:b0:ba:64:7a:e3:e3:10:9d:b7:8a:2f:c2:14:
                    59:e6:17:e5:75:de:a3:ec:0a:0e:c8:04:f6:2f:fc:
                    0f:aa:24:9b:8c:30:bd:0d:a1:44:e2:9a:05:bc:ae:
                    5e:80:37:02:bc:d0:b4:a0:50:7b:d4:d2:b3:e5:c0:
                    30:e9:d1:c8:c9:52:b1:10:fa:55:c3:4a:1a:da:f5:
                    a4:ba:be:47:ed:eb:51:fe:f1:1a:1b:96:c8:97:6c:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DB:17:85:22:9C:FB:48:C6:12:34:18:5F:9A:B3:18:8D:3F:90:9D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sdsXhSKc-0jGEjQYX5qzGI0_kJ0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:7c:f2:56:f5:67:9f:0a:39:88:6d:b5:72:a2:0f:66:eb:c1:
         c3:f4:42:44:a5:eb:c1:e2:77:1f:57:9a:b8:78:29:62:19:b4:
         22:53:37:83:ab:72:d7:9d:a8:29:26:60:4c:e1:0d:7f:14:21:
         2d:ff:06:15:0a:c6:f6:30:76:63:f0:c7:f7:0c:2b:75:61:e2:
         de:9f:50:80:60:ea:03:e6:3d:2a:f3:f3:7d:1b:87:a2:e1:43:
         6b:61:16:a3:6d:36:57:90:9d:b4:ce:b0:77:c8:64:a9:4b:2f:
         7a:7b:82:73:17:bb:38:af:76:c4:3c:02:ec:a4:0a:7b:f1:2f:
         df:08:66:3f:d9:5c:3d:bc:d4:d8:a7:5c:f0:8e:c6:9d:df:48:
         44:08:24:bb:21:e9:ab:4d:b4:c4:fd:44:a8:ad:d7:27:0e:43:
         fd:4c:11:55:de:fd:c1:a5:c5:b9:0a:54:8d:95:b9:1c:47:c0:
         92:61:36:c1:d4:8b:e2:7e:0a:92:e6:4a:c4:94:1a:ac:64:0a:
         d1:a0:72:47:49:38:77:d8:90:2e:b3:72:27:00:15:56:22:a0:
         c8:74:20:d0:c2:fd:ba:10:ad:c1:fb:ad:7b:97:f3:78:37:d4:
         19:d6:0f:eb:24:fe:98:fe:20:c0:bb:37:3d:72:41:62:b8:ad:
         68:20:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:07 2025 by rpki-client