Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/twi_k4x1UVXFlRPX-hvG22WDggw.roa
File:                     twi_k4x1UVXFlRPX-hvG22WDggw.roa (raw, json)
Hash identifier:          ZOQjSWDtGWo1a0kCzyUf2/H5PYSd9X0M9o1MO4kEEtM=
Subject key identifier:   B7:08:BF:93:8C:75:51:55:C5:95:13:D7:FA:1B:C6:DB:65:83:82:0C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3597
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/twi_k4x1UVXFlRPX-hvG22WDggw.roa
Signing time:             Mon 10 Feb 2025 13:53:30 +0000
ROA not before:           Mon 10 Feb 2025 13:53:30 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.176.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13719 (0x3597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:53:30 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=B708BF938C755155C59513D7FA1BC6DB6583820C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:98:cd:98:c5:26:5b:a5:16:f7:9f:4b:5a:bf:
                    37:18:b3:ac:8e:4a:64:81:86:a0:84:e6:73:e6:05:
                    20:04:3d:7a:c4:10:af:a4:ce:84:1b:fd:c1:90:ad:
                    b9:e9:ec:ff:92:50:30:d5:df:c3:fd:5c:48:97:3a:
                    1d:a6:ee:ba:04:dd:d8:6b:61:01:7d:03:8b:a7:97:
                    f1:3a:a3:b9:d6:5c:31:70:e1:d2:c9:4b:cd:13:61:
                    df:c4:6f:73:60:20:a4:41:d5:ed:c9:30:4a:0a:54:
                    a3:1a:60:bc:35:72:0c:b7:72:3f:16:99:1e:4e:58:
                    79:bd:c7:3f:be:fc:dc:57:3c:bd:64:0c:86:91:a3:
                    32:0b:e2:da:df:e4:a3:d2:74:2c:11:e1:37:b0:d4:
                    29:ab:bf:17:1b:c0:3c:9d:ba:83:ac:67:be:ec:78:
                    13:a2:d5:08:3d:2f:25:c1:b0:c8:21:2e:d3:78:f5:
                    66:56:57:bc:4f:96:86:bd:33:a0:6b:1c:2f:ca:03:
                    85:ec:ae:e5:1c:65:5c:3e:03:53:79:62:4e:b0:ce:
                    7b:75:01:f3:c4:4b:34:01:f3:b1:36:4a:5f:25:b4:
                    d9:d7:50:d2:15:30:61:0c:56:1b:f2:1b:f8:69:f5:
                    2f:77:c5:51:3b:c0:07:49:6e:49:f8:9a:3e:a0:cd:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:08:BF:93:8C:75:51:55:C5:95:13:D7:FA:1B:C6:DB:65:83:82:0C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/twi_k4x1UVXFlRPX-hvG22WDggw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:75:c6:e1:c0:50:71:b7:84:94:63:b9:64:31:d2:32:31:dc:
         95:0b:47:f9:10:d4:8a:c1:f3:e7:30:e6:65:61:6e:30:c2:ed:
         b8:bd:e2:93:62:a7:3c:a4:03:0d:c5:e1:d0:d2:95:81:27:46:
         52:57:50:72:1d:72:77:11:c3:f3:9d:f9:4f:42:78:c2:52:5c:
         e8:a8:53:7c:c0:f5:34:1b:6e:4a:71:29:e1:9a:69:d0:e1:f3:
         be:03:d3:d9:a1:b0:96:91:02:63:23:f6:cd:c2:43:bf:3a:58:
         b4:e7:f5:f7:ac:ba:a5:c7:32:a5:f8:dc:d9:c9:01:ea:6c:f0:
         b2:2f:c5:d2:74:45:9a:5b:a2:0c:7f:af:6a:23:ef:91:e7:39:
         a7:7b:93:e4:3a:0d:91:94:dd:a2:af:5f:b8:92:3f:4b:55:29:
         e7:81:72:6d:10:e6:ff:8a:33:b3:23:0e:7f:fc:27:70:bf:a4:
         12:97:da:a8:6c:b7:74:6f:0c:0c:c0:d5:56:15:5a:b0:35:50:
         8d:42:36:97:a4:85:30:09:e0:20:57:bb:ff:98:66:d5:be:39:
         99:32:95:96:73:f0:e2:69:a7:75:d2:37:27:d9:5c:66:78:1d:
         81:20:de:cd:3c:d5:27:81:cc:81:d9:9e:bd:c4:d4:eb:9e:08:
         50:46:fe:6d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUzMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI3MDhCRjkzOEM3NTUx
NTVDNTk1MTNEN0ZBMUJDNkRCNjU4MzgyMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrmM2YxSZbpRb3n0tavzcYs6yOSmSBhqCE5nPmBSAEPXrEEK+k
zoQb/cGQrbnp7P+SUDDV38P9XEiXOh2m7roE3dhrYQF9A4unl/E6o7nWXDFw4dLJ
S80TYd/Eb3NgIKRB1e3JMEoKVKMaYLw1cgy3cj8WmR5OWHm9xz++/NxXPL1kDIaR
ozIL4trf5KPSdCwR4Tew1CmrvxcbwDyduoOsZ77seBOi1Qg9LyXBsMghLtN49WZW
V7xPloa9M6BrHC/KA4XsruUcZVw+A1N5Yk6wznt1AfPESzQB87E2Sl8ltNnXUNIV
MGEMVhvyG/hp9S93xVE7wAdJbkn4mj6gzfUrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtwi/k4x1UVXFlRPX+hvG22WDggwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3R3aV9rNHgxVVZYRmxSUFgt
aHZHMjJXRGdndy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sCgwDQYJKoZIhvcNAQELBQADggEBAG91xuHAUHG3hJRjuWQx0jIx3JULR/kQ1IrB
8+cw5mVhbjDC7bi94pNipzykAw3F4dDSlYEnRlJXUHIdcncRw/Od+U9CeMJSXOio
U3zA9TQbbkpxKeGaadDh874D09mhsJaRAmMj9s3CQ786WLTn9fesuqXHMqX43NnJ
Aeps8LIvxdJ0RZpbogx/r2oj75HnOad7k+Q6DZGU3aKvX7iSP0tVKeeBcm0Q5v+K
M7MjDn/8J3C/pBKX2qhst3RvDAzA1VYVWrA1UI1CNpekhTAJ4CBXu/+YZtW+OZky
lZZz8OJpp3XSNyfZXGZ4HYEg3s081SeBzIHZnr3E1OueCFBG/m0=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:21 2025 by rpki-client