Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/MuhV1foixVi17jWqAw5qoDyK0ao.roa
File:                     MuhV1foixVi17jWqAw5qoDyK0ao.roa (raw, json)
Hash identifier:          M0PLt7ezvqr4h+nnEeQ8Z/+MCRc+8e8exHHwr1ox6Rc=
Subject key identifier:   32:E8:55:D5:FA:22:C5:58:B5:EE:35:AA:03:0E:6A:A0:3C:8A:D1:AA
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       0437
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/MuhV1foixVi17jWqAw5qoDyK0ao.roa
Signing time:             Fri 01 Sep 2023 08:03:43 +0000
ROA not before:           Fri 01 Sep 2023 08:03:43 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     60614
IP address blocks:        103.156.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 15:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079 (0x437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Sep  1 08:03:43 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=32E855D5FA22C558B5EE35AA030E6AA03C8AD1AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:89:e9:ef:66:05:9f:a8:9a:5b:4c:e5:93:
                    fd:d2:eb:e0:17:ae:bd:06:29:8b:9d:d8:4d:d7:f7:
                    2c:8b:91:26:ef:55:44:57:db:23:00:f4:8a:08:4e:
                    92:ca:76:28:5c:aa:97:46:7f:19:cb:f2:6d:e3:52:
                    ba:47:14:d0:3d:67:c6:67:69:24:36:c6:ed:e3:8b:
                    4b:0b:b3:17:7d:11:76:99:25:9a:b0:58:1d:b3:a4:
                    23:a1:3c:f0:f9:86:ee:e2:21:60:9d:1b:6a:5d:b0:
                    68:d6:bb:41:9d:04:8d:b5:52:e5:8e:2f:e3:d0:8e:
                    92:be:78:e7:43:72:52:ce:2b:d4:77:ac:f5:c3:81:
                    84:b4:90:6c:27:67:f0:b1:55:29:a9:f9:1a:b0:31:
                    6f:b9:f2:18:e9:66:fa:1b:47:9f:e8:2a:b6:5a:b1:
                    3a:19:ad:db:39:81:7c:f6:71:c4:77:57:91:7b:ea:
                    5a:b1:96:66:e7:21:14:a7:1d:e3:55:c0:85:a8:ba:
                    25:6f:3c:97:ac:0c:43:3d:7f:5e:2a:54:9b:97:e0:
                    03:84:ca:fd:14:23:4c:63:a4:5f:dc:3c:08:e4:06:
                    7e:16:4b:a8:7b:ec:1c:3a:b9:0d:6d:08:70:b1:cb:
                    22:ca:01:65:44:29:60:e9:a5:9d:32:41:3c:22:09:
                    97:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E8:55:D5:FA:22:C5:58:B5:EE:35:AA:03:0E:6A:A0:3C:8A:D1:AA
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/MuhV1foixVi17jWqAw5qoDyK0ao.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:3f:81:76:01:b9:7b:54:52:0d:18:11:77:4e:7c:de:d6:a3:
         ce:b0:f3:c4:0f:15:20:56:ea:d0:a3:88:97:47:86:02:fa:2f:
         26:75:e8:84:29:ee:84:df:56:55:59:9e:8a:25:01:96:e2:cd:
         cf:b4:d5:ac:f0:3b:15:a9:0d:10:48:cd:7c:92:78:73:f4:75:
         22:2a:03:f7:93:d0:2b:4e:31:a3:be:49:02:7d:16:ef:9f:f4:
         ce:4d:86:79:3a:a9:ef:fe:25:87:0e:28:7d:c3:74:d9:fe:4f:
         06:61:bc:f0:15:9b:f7:eb:40:d0:96:bb:13:76:a9:24:ee:e4:
         ac:d2:84:eb:72:bb:89:aa:36:d8:0e:7f:02:2e:9d:4a:a7:5f:
         48:55:76:18:58:12:25:da:8c:d1:cd:ac:78:d5:2f:ae:9c:0a:
         12:14:c8:d2:8b:b7:1d:79:55:8d:64:1b:72:30:16:8b:5f:35:
         a8:bc:11:d2:66:74:53:54:f4:30:1e:40:7b:0f:f3:8b:0f:61:
         c8:10:65:b6:ab:32:2f:b0:09:68:70:0e:e3:3b:df:44:49:d5:
         82:5c:21:10:e5:f2:eb:fc:45:a1:71:c4:ee:5c:53:99:27:15:
         dc:ac:80:89:c4:ed:bc:77:f9:87:cd:ed:2c:3b:9b:19:67:b4:
         3f:7e:ef:60
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB
OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMzA5MDEw
ODAzNDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMyRTg1NUQ1RkEyMkM1
NThCNUVFMzVBQTAzMEU2QUEwM0M4QUQxQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3L4np72YFn6iaW0zlk/3S6+AXrr0GKYud2E3X9yyLkSbvVURX
2yMA9IoITpLKdihcqpdGfxnL8m3jUrpHFNA9Z8ZnaSQ2xu3ji0sLsxd9EXaZJZqw
WB2zpCOhPPD5hu7iIWCdG2pdsGjWu0GdBI21UuWOL+PQjpK+eOdDclLOK9R3rPXD
gYS0kGwnZ/CxVSmp+RqwMW+58hjpZvobR5/oKrZasToZrds5gXz2ccR3V5F76lqx
lmbnIRSnHeNVwIWouiVvPJesDEM9f14qVJuX4AOEyv0UI0xjpF/cPAjkBn4WS6h7
7Bw6uQ1tCHCxyyLKAWVEKWDppZ0yQTwiCZfdAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUMuhV1foixVi17jWqAw5qoDyK0aowHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc
apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT
Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvTXVoVjFmb2l4VmkxN2pX
cUF3NXFvRHlLMGFvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGecuDANBgkqhkiG9w0BAQsFAAOCAQEAzz+BdgG5e1RSDRgRd0583tajzrDzxA8V
IFbq0KOIl0eGAvovJnXohCnuhN9WVVmeiiUBluLNz7TVrPA7FakNEEjNfJJ4c/R1
IioD95PQK04xo75JAn0W75/0zk2GeTqp7/4lhw4ofcN02f5PBmG88BWb9+tA0Ja7
E3apJO7krNKE63K7iao22A5/Ai6dSqdfSFV2GFgSJdqM0c2seNUvrpwKEhTI0ou3
HXlVjWQbcjAWi181qLwR0mZ0U1T0MB5Aew/ziw9hyBBltqsyL7AJaHAO4zvfREnV
glwhEOXy6/xFoXHE7lxTmScV3KyAicTtvHf5h83tLDubGWe0P37vYA==
-----END CERTIFICATE-----
Generated at Sat May 4 12:13:41 2024 by rpki-client on console-ams.rpki-client.org