Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/bib8pss8R89djKh_Jw4ohyFGCJ4.roa
File:                     bib8pss8R89djKh_Jw4ohyFGCJ4.roa (raw, json)
Hash identifier:          6N/lJWy8Li+E+lsVYwwQcb3bG4/2pjlVxOTaSm66VRM=
Subject key identifier:   6E:26:FC:A6:CB:3C:47:CF:5D:8C:A8:7F:27:0E:28:87:21:46:08:9E
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       11D4
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/bib8pss8R89djKh_Jw4ohyFGCJ4.roa
Signing time:             Mon 10 Feb 2025 14:27:46 +0000
ROA not before:           Mon 10 Feb 2025 14:27:46 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24154
IP address blocks:        60.244.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 22:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4564 (0x11d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Feb 10 14:27:46 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6E26FCA6CB3C47CF5D8CA87F270E28872146089E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:23:fa:f8:85:11:5c:58:9c:74:1e:7f:0a:d0:
                    c6:68:af:42:55:ab:5c:eb:45:28:57:75:d8:6a:4c:
                    f7:2f:ad:7b:60:7e:8b:c9:ec:be:dd:00:91:76:cb:
                    53:98:35:98:b8:df:72:66:25:07:65:b0:59:1d:ae:
                    58:c1:05:f9:dd:d0:72:14:ba:66:c5:40:c9:95:d1:
                    2c:f3:a6:3c:4b:80:51:6f:43:b6:54:99:36:42:cd:
                    de:ef:69:db:76:d7:f9:22:28:ae:32:04:f9:99:b0:
                    d9:1d:ba:a5:74:8c:92:df:0c:8e:ed:6a:b2:e0:3c:
                    15:a8:32:75:b7:39:bc:73:92:03:24:fb:45:db:de:
                    06:b5:2c:08:98:9a:03:d2:1a:d3:be:8a:a3:c8:e4:
                    1c:32:c2:8f:9f:2c:4a:4f:45:6f:cb:0a:27:7b:ab:
                    b1:b8:66:44:bc:f7:a8:6c:10:ce:91:9a:d8:52:36:
                    61:e8:fd:e4:aa:1b:49:4f:c1:0e:32:6e:e4:45:0c:
                    aa:d5:ef:c3:ab:d0:e7:7f:82:9f:7b:d9:e2:b4:53:
                    8a:b6:9c:a5:ea:6a:ee:96:0b:65:42:fe:cb:29:75:
                    10:eb:86:eb:ec:59:a6:61:bf:16:86:e8:5f:a4:dd:
                    82:17:dc:ba:c9:68:6b:4f:a9:d9:8d:97:73:0a:7b:
                    12:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:26:FC:A6:CB:3C:47:CF:5D:8C:A8:7F:27:0E:28:87:21:46:08:9E
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/bib8pss8R89djKh_Jw4ohyFGCJ4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.244.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:c3:01:2f:93:11:b5:98:96:fe:1e:10:b5:7c:8a:8e:6b:54:
         b9:57:c9:a0:86:b6:92:4d:f1:4c:07:b9:4f:96:74:e3:67:26:
         91:b0:a0:3c:f8:6d:a9:d9:56:ae:ab:94:44:eb:15:5f:2a:58:
         46:ca:66:a6:d9:21:2e:ae:65:6e:e8:7f:6f:52:0f:99:58:58:
         17:93:91:3e:03:2a:ff:aa:30:7b:b5:ae:92:eb:21:45:34:62:
         2c:27:04:6e:83:74:e9:e7:89:f9:4d:78:2b:d9:e3:d8:e2:f3:
         ae:b7:64:84:f6:bb:d7:86:90:26:94:fc:9b:07:b7:eb:8f:0c:
         c3:03:16:31:3b:94:5f:ab:d0:03:02:d2:88:bf:45:03:fa:62:
         72:2e:80:b2:8f:84:fb:94:67:87:dc:bd:7e:01:c4:55:e0:ca:
         40:1d:de:c0:90:69:bb:18:bc:00:23:65:9a:8e:f0:db:5b:09:
         0e:e0:b9:98:62:52:46:1a:54:99:e8:82:f8:2f:7f:59:e8:fd:
         e9:a3:16:b5:b6:8f:11:cf:aa:25:53:5a:de:2c:5d:44:ee:dd:
         c4:ec:00:e2:ba:13:33:e2:09:1c:7f:58:1d:e0:a2:20:0e:dd:
         fc:9d:8c:6e:97:99:7c:ff:ea:5e:48:29:68:a0:97:a9:22:05:
         95:92:42:90
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICEdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx
NDI3NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZFMjZGQ0E2Q0IzQzQ3
Q0Y1RDhDQTg3RjI3MEUyODg3MjE0NjA4OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxI/r4hRFcWJx0Hn8K0MZor0JVq1zrRShXddhqTPcvrXtgfovJ
7L7dAJF2y1OYNZi433JmJQdlsFkdrljBBfnd0HIUumbFQMmV0SzzpjxLgFFvQ7ZU
mTZCzd7vadt21/kiKK4yBPmZsNkduqV0jJLfDI7tarLgPBWoMnW3ObxzkgMk+0Xb
3ga1LAiYmgPSGtO+iqPI5Bwywo+fLEpPRW/LCid7q7G4ZkS896hsEM6RmthSNmHo
/eSqG0lPwQ4ybuRFDKrV78Or0Od/gp972eK0U4q2nKXqau6WC2VC/sspdRDrhuvs
WaZhvxaG6F+k3YIX3LrJaGtPqdmNl3MKexJpAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUbib8pss8R89djKh/Jw4ohyFGCJ4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2JpYjhwc3M4Ujg5ZGpLaF9KdzRvaHlG
R0NKNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA89AIwDQYJ
KoZIhvcNAQELBQADggEBALfDAS+TEbWYlv4eELV8io5rVLlXyaCGtpJN8UwHuU+W
dONnJpGwoDz4banZVq6rlETrFV8qWEbKZqbZIS6uZW7of29SD5lYWBeTkT4DKv+q
MHu1rpLrIUU0YiwnBG6DdOnniflNeCvZ49ji8663ZIT2u9eGkCaU/JsHt+uPDMMD
FjE7lF+r0AMC0oi/RQP6YnIugLKPhPuUZ4fcvX4BxFXgykAd3sCQabsYvAAjZZqO
8NtbCQ7guZhiUkYaVJnogvgvf1no/emjFrW2jxHPqiVTWt4sXUTu3cTsAOK6EzPi
CRx/WB3goiAO3fydjG6XmXz/6l5IKWigl6kiBZWSQpA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:56:37 2025 by rpki-client