Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/SEv_7HYpOdMNIHLS8tVABt4Do8I.roa
File:                     SEv_7HYpOdMNIHLS8tVABt4Do8I.roa (raw, json)
Hash identifier:          hCDorUpNN/6wycaZDjYZ1ahQ4USONgLh9KgqSNHgaTY=
Subject key identifier:   48:4B:FF:EC:76:29:39:D3:0D:20:72:D2:F2:D5:40:06:DE:03:A3:C2
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       10E6
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/SEv_7HYpOdMNIHLS8tVABt4Do8I.roa
Signing time:             Mon 10 Feb 2025 13:56:35 +0000
ROA not before:           Mon 10 Feb 2025 13:56:35 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     17809
IP address blocks:        182.155.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 21:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4326 (0x10e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Feb 10 13:56:35 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=484BFFEC762939D30D2072D2F2D54006DE03A3C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a6:16:69:7f:c4:d7:94:b1:4b:82:83:7c:60:
                    fe:fd:90:53:30:78:6c:e7:95:65:39:00:95:39:80:
                    3d:d0:74:52:cd:72:05:d3:cd:48:31:cb:65:55:0e:
                    6d:d2:5b:5b:d5:7a:5b:e4:1f:9d:72:af:8b:bd:aa:
                    52:78:36:49:cf:29:6c:ee:50:19:24:40:e4:cb:ea:
                    c2:c6:79:22:76:4f:62:6b:d3:d1:ae:d6:32:3e:76:
                    08:8f:14:7d:07:21:80:b0:d1:2a:c1:b1:00:cb:30:
                    56:4e:9e:8f:98:83:1f:39:68:e0:1d:55:7d:65:e4:
                    24:65:28:cf:ee:74:2e:a2:7c:0b:a4:09:99:0b:26:
                    c7:ca:98:0d:b8:a8:0a:0a:a9:9a:95:10:da:b4:df:
                    35:2d:8d:cc:ae:69:59:ec:b6:92:20:8f:81:b3:a1:
                    3d:0e:c3:47:a3:bb:79:3a:6c:8e:35:a8:52:bf:5b:
                    ed:64:c4:cc:d2:6e:9c:b4:dc:42:68:d9:18:0e:09:
                    a5:04:23:c1:f5:46:be:d7:34:f4:50:b3:a6:73:b9:
                    0b:4f:f6:19:fe:dd:57:62:6d:e7:4a:a9:d3:9e:56:
                    18:36:30:9a:37:1d:e5:af:c5:c4:a1:54:91:32:cb:
                    a6:ac:6a:9e:ad:e0:07:3b:19:89:4f:9d:04:79:5b:
                    77:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4B:FF:EC:76:29:39:D3:0D:20:72:D2:F2:D5:40:06:DE:03:A3:C2
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/SEv_7HYpOdMNIHLS8tVABt4Do8I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.155.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         41:42:63:8a:46:c7:e4:5d:b3:c1:00:45:cc:73:8f:db:52:a1:
         7e:f4:f2:a4:35:03:cc:a0:7d:a5:11:ce:06:10:0e:1e:fc:38:
         c8:19:24:d6:c4:3f:72:73:cf:52:93:5c:9b:61:87:cf:ec:18:
         8f:9f:44:25:58:73:6c:94:ed:b6:e7:81:ae:de:e5:0c:05:a7:
         23:6c:b3:71:d2:ff:98:2f:d7:89:44:e8:1c:37:df:7d:a3:56:
         20:69:8e:a3:4e:61:30:cb:66:5c:62:0c:44:fa:48:86:a3:b0:
         fc:0e:2d:b8:0e:02:76:2f:d1:10:b6:e1:d7:c4:34:d6:02:1c:
         0c:61:6b:b2:b0:a0:57:31:ab:8e:dc:a0:57:f2:e6:19:51:29:
         09:cd:ef:08:9d:e5:fd:64:09:c0:8b:88:b5:d0:8a:35:f4:b7:
         24:1c:60:f0:ba:60:7e:6f:36:06:b9:73:47:d8:be:c9:47:f2:
         29:45:ae:d8:87:0c:6a:d2:2f:a0:79:90:20:e6:b9:40:91:08:
         ee:72:eb:40:ca:60:4f:42:77:9d:d4:3f:56:b9:e7:b2:9e:9a:
         2b:ec:3f:28:7f:92:c9:cc:ac:c9:f5:bf:e4:58:b7:8c:d2:28:
         09:ea:b8:c5:71:5d:07:c8:3d:5b:1f:04:8a:9a:c3:6d:81:53:
         e7:46:95:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:07:44 2025 by rpki-client