Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/i10_3dHagSf_C3JgCMY1a46a9mU.roa
File:                     i10_3dHagSf_C3JgCMY1a46a9mU.roa (raw, json)
Hash identifier:          bNgbp/WvYjjwOvVwt3a5GV/uZy4meNarw7V/1gFd3RY=
Subject key identifier:   8B:5D:3F:DD:D1:DA:81:27:FF:0B:72:60:08:C6:35:6B:8E:9A:F6:65
Certificate issuer:       /CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Certificate serial:       0C77
Authority key identifier: 05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/i10_3dHagSf_C3JgCMY1a46a9mU.roa
Signing time:             Mon 10 Feb 2025 14:24:03 +0000
ROA not before:           Mon 10 Feb 2025 14:24:03 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     147035
IP address blocks:        2403:8ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Apr 2025 07:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3191 (0xc77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
        Validity
            Not Before: Feb 10 14:24:03 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8B5D3FDDD1DA8127FF0B726008C6356B8E9AF665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ec:fa:0f:0a:e6:5c:29:db:ef:3f:66:6b:d4:
                    a5:f4:11:7d:6c:1b:d4:bf:ae:a6:c3:09:c4:44:79:
                    f9:fb:35:1f:53:ac:88:19:76:55:a5:e9:5c:ed:52:
                    8e:78:eb:24:fc:30:b1:59:ea:76:3a:05:a5:d4:4b:
                    03:de:fa:e3:81:ee:a5:e4:92:0e:83:bf:80:8e:82:
                    5d:f5:a3:93:d0:e9:e4:e3:88:87:b7:6a:10:a1:6a:
                    f6:e1:e7:b7:2c:e4:4b:3b:9c:02:fb:c7:c4:a6:38:
                    6a:82:e8:4f:11:d4:02:71:37:94:73:39:f4:65:4f:
                    7e:22:7a:b7:d9:e0:8a:15:14:1c:ea:40:4d:eb:b0:
                    27:74:76:07:88:48:32:3d:f6:2a:9a:c3:2e:16:75:
                    98:48:c4:bc:a5:3c:e9:f7:0e:7a:16:cd:84:e6:7f:
                    a5:23:d4:3f:b8:84:55:0c:86:8b:ab:44:30:45:a8:
                    33:13:8b:2b:ae:41:61:5e:65:4a:8a:3a:f9:6e:9a:
                    db:c6:6d:c5:9b:f9:3d:b7:f3:3c:34:52:2e:f4:33:
                    ef:af:d6:34:68:61:14:59:c2:14:60:ba:83:ac:98:
                    a2:5e:0d:00:6a:3c:07:a4:97:17:35:f2:49:d3:ec:
                    47:4e:5c:f2:33:0d:8a:1a:86:c1:e6:e6:71:f9:25:
                    d5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5D:3F:DD:D1:DA:81:27:FF:0B:72:60:08:C6:35:6B:8E:9A:F6:65
            X509v3 Authority Key Identifier:
                keyid:05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/i10_3dHagSf_C3JgCMY1a46a9mU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:2a:2d:e2:5b:ec:fa:86:78:75:c3:0c:c5:80:41:a4:5f:3d:
         26:42:84:d0:3e:c0:9e:f1:86:aa:e0:9b:fb:61:35:c0:55:8c:
         ef:89:a6:80:c0:83:c3:ca:4e:27:6e:4c:44:f1:c7:0c:a9:2c:
         ca:ff:d9:06:7b:c5:c9:09:b4:a5:24:b5:a4:5d:5a:46:fb:63:
         d2:74:95:89:3a:38:e0:d5:a1:77:49:8c:d9:c9:68:2d:be:81:
         4d:53:79:f2:1e:55:7a:6a:7b:5b:21:c2:d6:3d:4d:fa:f4:bc:
         15:8f:fb:e6:89:81:b1:f9:04:15:39:48:71:00:47:72:33:25:
         37:35:28:3e:3e:10:b7:99:fa:b4:57:27:45:9a:2f:3d:d8:26:
         ea:5a:e6:59:84:f7:1b:a7:e7:bd:98:88:ab:ed:a4:d0:8d:c7:
         7a:a8:80:0b:31:d4:d0:e8:c8:1b:a4:94:c6:a1:a6:3e:51:25:
         70:59:1c:e4:1e:1b:a2:30:3e:3e:ac:cd:fa:4a:50:f9:d9:3c:
         19:04:0c:72:e2:b6:8e:c9:11:93:2d:cd:c5:73:b6:a8:14:95:
         99:42:0b:90:02:6f:05:5a:82:86:e6:56:5d:fd:69:86:ec:a4:
         20:22:24:20:8d:ca:05:60:82:be:11:5c:76:48:56:5b:66:06:
         3e:45:f5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:57:53 2025 by rpki-client