Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/DLYJJDSgMragcAxliCs0Ff6-yBw.roa
File:                     DLYJJDSgMragcAxliCs0Ff6-yBw.roa (raw, json)
Hash identifier:          3BpKr0JmsgkrvkshmsXWtOP04VTeiLFMN+cChT8T1zw=
Subject key identifier:   0C:B6:09:24:34:A0:32:B6:A0:70:0C:65:88:2B:34:15:FE:BE:C8:1C
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       108C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DLYJJDSgMragcAxliCs0Ff6-yBw.roa
Signing time:             Thu 30 May 2024 03:29:49 +0000
ROA not before:           Thu 30 May 2024 03:29:49 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     198949
IP address blocks:        203.74.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 03:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4236 (0x108c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: May 30 03:29:49 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=0CB6092434A032B6A0700C65882B3415FEBEC81C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:93:de:ec:21:88:bb:e6:20:17:a6:2b:db:
                    e6:13:54:17:3a:96:54:e0:e0:33:d2:09:96:ea:93:
                    ef:2b:84:f5:35:ee:78:04:22:6b:39:65:ce:b9:4f:
                    44:37:2b:36:db:01:b0:ac:ad:ab:95:f4:0d:53:6c:
                    59:f0:9a:66:e3:c3:13:e1:82:f7:91:e2:68:d2:0e:
                    f8:8b:4c:be:cc:32:a7:5f:5c:99:24:62:eb:f0:3e:
                    1a:3d:7d:6d:45:c3:2a:d7:f1:cf:29:e0:15:2c:84:
                    ba:76:a2:4a:3e:ee:c9:fc:91:e7:b0:80:c1:2e:2c:
                    fd:fd:20:32:19:92:1c:bc:e4:db:39:33:d8:7b:cb:
                    5e:da:95:66:79:04:d0:2e:96:c4:a6:94:91:01:7e:
                    81:f2:8d:b8:62:d3:86:5a:af:71:d3:43:08:43:b0:
                    8c:af:fd:6a:ce:71:ae:4e:cd:00:c4:2d:ca:79:26:
                    1a:11:15:b6:66:17:44:9e:17:67:06:5d:cd:79:07:
                    50:60:63:d8:47:e8:3c:40:25:11:47:4f:64:e9:18:
                    49:00:eb:73:48:6c:55:fc:16:f6:6d:59:97:f1:ab:
                    3d:f8:c4:58:2f:4e:42:1d:14:25:d9:89:6d:36:15:
                    c5:1c:3f:eb:e0:d1:8c:6b:9c:b2:a4:f6:f9:06:86:
                    2e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B6:09:24:34:A0:32:B6:A0:70:0C:65:88:2B:34:15:FE:BE:C8:1C
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DLYJJDSgMragcAxliCs0Ff6-yBw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.74.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:7e:d6:ea:2d:c2:8c:6d:5c:19:7d:05:ee:44:ca:11:45:70:
         f4:7b:bd:4f:67:ae:00:35:18:b3:99:f0:91:d3:52:3d:6b:0f:
         62:80:c5:78:a7:14:e6:83:dd:b5:f4:be:50:c7:ae:e4:a7:61:
         2a:af:53:bd:0f:db:6d:3d:50:3d:09:f5:5e:fe:bd:d2:05:4a:
         56:20:de:d6:1f:3f:78:99:d5:67:d0:e5:bf:1a:d1:b6:e3:49:
         7a:ff:ac:a4:bc:83:0a:d5:68:fc:ab:e8:ea:f0:f4:3a:93:2e:
         6d:15:19:a5:48:0c:2d:b1:e4:b9:37:28:99:fa:e8:a3:ac:b8:
         c2:3e:60:12:e9:f0:46:75:0f:f1:01:f8:c5:6f:1a:bd:6c:0d:
         82:52:2c:af:3a:3c:bf:e7:6d:d1:54:32:61:aa:04:fe:4b:84:
         fc:96:0b:1e:1f:07:24:af:aa:60:30:4c:cd:f5:07:06:ae:b2:
         5b:4f:b9:51:22:ce:aa:d9:23:38:2f:1f:bd:fd:54:a5:c6:f7:
         86:2b:9f:b2:1e:53:e8:b6:90:44:bc:e2:87:aa:9e:ad:36:47:
         ee:ea:82:9b:7e:e5:e0:22:eb:86:e3:cb:cb:ca:a5:10:16:9d:
         06:32:71:62:f7:97:1a:88:45:22:70:28:b8:90:7c:a6:82:8d:
         78:78:4c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 13:13:37 2024 by rpki-client on console-fra.rpki-client.org