Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/gTBlazZWtASrCGSO6KW98sviGBg.roa
File:                     gTBlazZWtASrCGSO6KW98sviGBg.roa (raw, json)
Hash identifier:          pkZ1yWojcSLxLPHUMMlYaV3W7PbAEkNszksLFfHILMU=
Subject key identifier:   81:30:65:6B:36:56:B4:04:AB:08:64:8E:E8:A5:BD:F2:CB:E2:18:18
Certificate issuer:       /CN=A736CFF1948740614D0321E63B8403EB9AB9748D
Certificate serial:       C8
Authority key identifier: A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/gTBlazZWtASrCGSO6KW98sviGBg.roa
Signing time:             Fri 01 Sep 2023 08:31:11 +0000
ROA not before:           Fri 01 Sep 2023 08:31:11 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     983
IP address blocks:        103.36.24.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 15:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A736CFF1948740614D0321E63B8403EB9AB9748D
        Validity
            Not Before: Sep  1 08:31:11 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=8130656B3656B404AB08648EE8A5BDF2CBE21818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:65:98:59:0d:3a:75:b1:09:66:f6:d4:97:d6:
                    45:6e:04:b0:d5:ac:58:4e:50:c2:c9:16:69:7a:be:
                    f4:83:99:e8:a3:cf:fe:54:26:9d:60:14:e5:4c:34:
                    c1:27:8b:20:ae:3b:a7:4c:97:09:c4:05:82:c9:6f:
                    de:9a:70:e5:46:20:19:5e:3f:88:37:21:ff:ae:e3:
                    84:6c:8e:f1:4b:c3:28:cf:96:ad:ff:11:b2:46:47:
                    bf:c7:02:b7:03:63:e2:69:39:c8:cc:96:b6:8e:f5:
                    9f:50:4b:dc:10:b5:2b:86:a4:60:90:5a:49:53:53:
                    1d:91:dd:3d:0d:4c:de:65:55:eb:e6:55:0d:a4:fd:
                    70:d6:8c:49:a1:e2:c8:ea:36:10:9f:03:9f:67:eb:
                    4b:c2:4e:f0:92:ae:23:5d:5f:fd:cb:66:35:93:64:
                    06:9b:5f:05:f4:9f:66:3a:82:c3:9f:69:db:28:6b:
                    ad:6c:89:04:d7:ca:13:99:a3:d8:2b:d6:06:1a:c7:
                    2a:14:df:da:d6:32:89:54:21:20:b1:ea:6a:6a:26:
                    ea:5c:68:35:c1:84:8c:11:bc:1b:5d:6b:c0:90:11:
                    f8:83:e3:86:b1:86:d7:89:c5:e5:28:3c:86:27:23:
                    24:44:2a:21:ef:22:56:e1:f4:cf:51:bc:71:2b:c0:
                    29:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:30:65:6B:36:56:B4:04:AB:08:64:8E:E8:A5:BD:F2:CB:E2:18:18
            X509v3 Authority Key Identifier:
                keyid:A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/gTBlazZWtASrCGSO6KW98sviGBg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:0f:18:2c:b4:0d:27:16:6b:fd:12:c6:8d:6c:bd:a7:1c:61:
         a3:40:35:4b:f0:7a:fd:4c:32:ee:c9:91:a5:e8:d4:8b:d9:08:
         fb:ee:29:55:ec:21:6b:92:94:71:cd:71:62:15:c9:e8:3f:c9:
         55:9f:ea:26:08:87:8f:09:db:6d:d3:c9:94:5f:ee:b2:c5:a9:
         a1:07:2a:75:bd:75:f4:c5:b2:76:d5:28:77:b6:cf:9f:91:4a:
         e0:b2:11:38:47:03:8e:9d:15:19:40:e1:f2:6c:2e:d7:2f:cb:
         cd:ec:82:0a:8c:1c:4b:0d:7c:89:9e:b9:fb:c3:6a:0d:cf:35:
         28:8b:85:b1:d7:5f:54:3d:b2:a1:26:06:e5:11:43:af:7e:a6:
         b4:1b:87:7d:17:f0:fb:77:1f:12:ce:ed:d5:06:39:bc:09:1e:
         d2:18:b7:d4:7d:15:1c:74:11:20:b6:82:e4:1b:05:75:3d:2b:
         16:3a:b0:4b:02:8f:12:65:a4:91:0e:d5:d1:ef:bf:27:3f:38:
         4b:70:c8:6c:cc:84:76:5c:64:4b:22:79:0c:79:13:f2:5e:55:
         92:8c:5e:75:6c:35:73:4b:93:8f:74:04:b5:b4:bf:ad:bc:a6:
         c3:97:cb:a3:d8:c6:f2:dd:5d:eb:3b:20:5e:6e:f1:03:bb:23:
         a6:2f:48:f2
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTcz
NkNGRjE5NDg3NDA2MTREMDMyMUU2M0I4NDAzRUI5QUI5NzQ4RDAeFw0yMzA5MDEw
ODMxMTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDgxMzA2NTZCMzY1NkI0
MDRBQjA4NjQ4RUU4QTVCREYyQ0JFMjE4MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCZZhZDTp1sQlm9tSX1kVuBLDVrFhOUMLJFml6vvSDmeijz/5U
Jp1gFOVMNMEniyCuO6dMlwnEBYLJb96acOVGIBleP4g3If+u44RsjvFLwyjPlq3/
EbJGR7/HArcDY+JpOcjMlraO9Z9QS9wQtSuGpGCQWklTUx2R3T0NTN5lVevmVQ2k
/XDWjEmh4sjqNhCfA59n60vCTvCSriNdX/3LZjWTZAabXwX0n2Y6gsOfadsoa61s
iQTXyhOZo9gr1gYaxyoU39rWMolUISCx6mpqJupcaDXBhIwRvBtda8CQEfiD44ax
hteJxeUoPIYnIyREKiHvIlbh9M9RvHErwCn3AgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUgTBlazZWtASrCGSO6KW98sviGBgwHwYDVR0jBBgwFoAUpzbP8ZSHQGFNAyHm
O4QD65q5dI0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DSEVO
VEVLL3B6YlA4WlNIUUdGTkF5SG1PNFFENjVxNWRJMC5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcHpiUDhaU0hRR0ZOQXlIbU80UUQ2NXE1ZEkwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DSEVOVEVLL2dUQmxhelpXdEFT
ckNHU082S1c5OHN2aUdCZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFnJBgwDQYJKoZIhvcNAQELBQADggEBAG8PGCy0DScWa/0Sxo1svaccYaNA
NUvwev1MMu7JkaXo1IvZCPvuKVXsIWuSlHHNcWIVyeg/yVWf6iYIh48J223TyZRf
7rLFqaEHKnW9dfTFsnbVKHe2z5+RSuCyEThHA46dFRlA4fJsLtcvy83sggqMHEsN
fImeufvDag3PNSiLhbHXX1Q9sqEmBuURQ69+prQbh30X8Pt3HxLO7dUGObwJHtIY
t9R9FRx0ESC2guQbBXU9KxY6sEsCjxJlpJEO1dHvvyc/OEtwyGzMhHZcZEsieQx5
E/JeVZKMXnVsNXNLk490BLW0v628psOXy6PYxvLdXes7IF5u8QO7I6YvSPI=
-----END CERTIFICATE-----
Generated at Wed Jun 19 00:29:46 2024 by rpki-client on console-ams.rpki-client.org