Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/V5XcRwgykYRBwN6mHWm2a9gv0-M.roa
File:                     V5XcRwgykYRBwN6mHWm2a9gv0-M.roa (raw, json)
Hash identifier:          N/XEZNkR8hxNW5A9+NGGwhb/QEYp64utglVPlG3XF8Q=
Subject key identifier:   57:95:DC:47:08:32:91:84:41:C0:DE:A6:1D:69:B6:6B:D8:2F:D3:E3
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0FA2
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/V5XcRwgykYRBwN6mHWm2a9gv0-M.roa
Signing time:             Fri 01 Sep 2023 08:29:22 +0000
ROA not before:           Fri 01 Sep 2023 08:29:22 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131627
IP address blocks:        150.116.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 08:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4002 (0xfa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Sep  1 08:29:22 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=5795DC470832918441C0DEA61D69B66BD82FD3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d7:06:81:74:c5:d0:52:e8:47:c2:04:ac:67:
                    f3:c0:06:ee:8b:06:ed:8d:0a:53:1a:c7:c4:cf:10:
                    dc:82:0a:f2:14:cc:a1:76:f3:35:df:3c:f2:4f:8a:
                    f3:72:b5:8b:92:4f:7a:96:ef:4e:e4:3b:a0:b9:3a:
                    44:10:04:7d:60:b0:9a:de:11:93:c3:3b:6e:13:bd:
                    d6:d7:2d:5a:3d:f7:0f:59:c9:b3:c9:62:66:5c:63:
                    a4:17:0a:aa:b1:0a:74:a3:49:52:0a:f7:a2:24:d6:
                    2c:91:f1:f4:c0:b7:ee:0b:aa:8a:d8:e7:64:38:41:
                    f3:6b:05:43:78:ba:b1:55:9b:3c:fd:e3:04:c6:b3:
                    70:62:dc:a3:a4:1e:20:88:b1:f3:38:1d:b0:5d:e9:
                    e7:19:83:76:98:e2:62:c9:98:d9:fa:18:ab:fa:12:
                    f3:e6:d0:90:11:d9:c0:c3:b1:77:1a:45:19:ae:8a:
                    58:68:ae:97:b2:c8:b9:ec:81:4c:b9:82:77:0c:d3:
                    8e:76:3b:15:ca:2d:eb:7c:a2:4c:7e:b2:ab:71:8d:
                    18:43:f3:43:1d:bf:ee:18:77:25:d2:54:e5:69:43:
                    08:e6:3b:45:87:37:4c:31:65:3f:9b:87:f5:fa:0e:
                    97:60:37:cc:cb:dc:63:78:a9:9b:14:ca:3c:b4:a3:
                    e3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:95:DC:47:08:32:91:84:41:C0:DE:A6:1D:69:B6:6B:D8:2F:D3:E3
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/V5XcRwgykYRBwN6mHWm2a9gv0-M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:d1:f7:d4:14:fd:cc:98:d8:0b:5a:78:44:08:a3:33:1f:f6:
         ee:78:15:8f:84:d3:41:b6:60:a8:a6:e1:a2:f5:71:fd:95:97:
         f0:07:29:ec:8a:fc:37:08:bd:e5:05:7b:60:a6:5d:b5:f6:fd:
         60:39:87:db:51:c0:7f:71:2d:f3:8d:6f:43:7c:7f:ce:de:0e:
         20:1c:d5:b5:f6:61:77:a7:2d:3e:57:e7:7c:5c:85:07:7b:34:
         79:66:31:88:8b:eb:2c:bc:9c:09:31:63:c3:30:56:2c:3d:53:
         f0:15:e5:22:03:62:d4:bb:93:15:80:bd:05:73:18:2a:98:8c:
         e9:18:ca:f5:92:ad:18:07:ce:c3:0f:1d:97:49:3e:4c:f1:ec:
         60:d5:af:44:5c:2e:30:46:22:2f:27:07:ca:da:05:82:3e:65:
         dd:ca:bf:8b:5c:02:6a:12:46:a4:7a:03:54:8a:7f:e2:c2:86:
         53:50:37:97:b2:7e:af:0c:81:d2:9a:fd:3d:4b:94:e0:09:b6:
         2a:66:86:c5:09:72:f0:ea:a2:03:03:d9:9f:02:48:7f:34:9f:
         b1:0c:f1:27:96:60:76:b6:f2:c1:24:82:b4:1f:17:6b:4d:72:
         fc:a4:ee:75:ae:4d:5c:f6:83:2b:8c:85:e5:cd:03:ea:eb:80:
         a0:3a:ee:55
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICD6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw
ODI5MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU3OTVEQzQ3MDgzMjkx
ODQ0MUMwREVBNjFENjlCNjZCRDgyRkQzRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDl1waBdMXQUuhHwgSsZ/PABu6LBu2NClMax8TPENyCCvIUzKF2
8zXfPPJPivNytYuST3qW707kO6C5OkQQBH1gsJreEZPDO24TvdbXLVo99w9ZybPJ
YmZcY6QXCqqxCnSjSVIK96Ik1iyR8fTAt+4LqorY52Q4QfNrBUN4urFVmzz94wTG
s3Bi3KOkHiCIsfM4HbBd6ecZg3aY4mLJmNn6GKv6EvPm0JAR2cDDsXcaRRmuilho
rpeyyLnsgUy5gncM0452OxXKLet8okx+sqtxjRhD80Mdv+4YdyXSVOVpQwjmO0WH
N0wxZT+bh/X6DpdgN8zL3GN4qZsUyjy0o+MpAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUV5XcRwgykYRBwN6mHWm2a9gv0+MwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9WNVhjUndneWtZUkJ3
TjZtSFdtMmE5Z3YwLU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnRTMA0GCSqGSIb3DQEBCwUAA4IBAQC40ffUFP3MmNgLWnhECKMzH/bueBWP
hNNBtmCopuGi9XH9lZfwBynsivw3CL3lBXtgpl219v1gOYfbUcB/cS3zjW9DfH/O
3g4gHNW19mF3py0+V+d8XIUHezR5ZjGIi+ssvJwJMWPDMFYsPVPwFeUiA2LUu5MV
gL0FcxgqmIzpGMr1kq0YB87DDx2XST5M8exg1a9EXC4wRiIvJwfK2gWCPmXdyr+L
XAJqEkakegNUin/iwoZTUDeXsn6vDIHSmv09S5TgCbYqZobFCXLw6qIDA9mfAkh/
NJ+xDPEnlmB2tvLBJIK0HxdrTXL8pO51rk1c9oMrjIXlzQPq64CgOu5V
-----END CERTIFICATE-----
Generated at Tue Jun 18 12:53:57 2024 by rpki-client on console-ams.rpki-client.org