Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/VyrkB2axolDdHETayiZ69Iqxkj4.roa
File:                     VyrkB2axolDdHETayiZ69Iqxkj4.roa (raw, json)
Hash identifier:          sVDRlw0NhjqJjaHM2TDxUMjxvhy4mwEBVh9HoqbuJeI=
Subject key identifier:   57:2A:E4:07:66:B1:A2:50:DD:1C:44:DA:CA:26:7A:F4:8A:B1:92:3E
Certificate issuer:       /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial:       0CAF
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/VyrkB2axolDdHETayiZ69Iqxkj4.roa
Signing time:             Mon 26 Aug 2024 05:19:27 +0000
ROA not before:           Mon 26 Aug 2024 05:19:27 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18042
IP address blocks:        58.86.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Sep 2024 03:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3247 (0xcaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
        Validity
            Not Before: Aug 26 05:19:27 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=572AE40766B1A250DD1C44DACA267AF48AB1923E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:db:ec:44:9d:d6:50:6e:20:4d:aa:03:b2:
                    a0:af:a3:e9:64:2a:f8:56:06:e4:f5:e8:e9:4a:d4:
                    b9:0b:16:eb:a9:ae:3b:0a:07:8d:62:58:b7:04:8a:
                    b0:0c:c0:e1:6f:f8:f2:95:da:fb:b7:4b:51:8c:66:
                    58:24:66:9f:f0:fc:13:c9:4b:b9:e9:9a:1d:88:41:
                    fb:43:cf:8b:2e:0f:0c:9d:61:36:6f:5a:29:68:be:
                    cc:4a:57:f5:ef:19:5e:ee:1a:65:7d:8f:77:c8:48:
                    60:e1:08:13:d8:e7:20:0b:8c:ce:d8:56:c3:7d:54:
                    82:90:28:08:47:a9:3a:a7:29:b5:29:3f:33:05:a1:
                    fa:99:e5:fc:8c:0d:68:d3:6f:ee:a0:22:f3:e5:14:
                    7e:af:49:bb:37:c6:70:04:33:95:22:d0:b1:40:58:
                    23:91:9f:20:1a:25:c2:29:d9:b4:54:b1:3e:6b:f4:
                    93:b3:40:2c:c6:b5:ef:9c:a0:37:4c:85:de:6d:9c:
                    98:52:a3:d1:57:04:c6:a2:b8:6c:ca:33:2e:0b:da:
                    fe:4e:1d:78:dc:cf:f8:2d:2e:e0:ea:39:9d:86:6c:
                    52:14:65:fc:4a:8e:ca:15:39:b1:86:cd:af:7a:ad:
                    a8:75:1c:13:65:c1:d7:77:f0:1b:1e:55:0d:53:05:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2A:E4:07:66:B1:A2:50:DD:1C:44:DA:CA:26:7A:F4:8A:B1:92:3E
            X509v3 Authority Key Identifier:
                keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/VyrkB2axolDdHETayiZ69Iqxkj4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.86.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:8b:4f:e2:d8:21:cc:35:29:fb:48:35:20:e5:9e:9f:91:d6:
         9d:dd:5a:97:6c:9e:56:e1:70:80:d5:64:fd:c8:d4:ac:be:ab:
         73:80:27:31:e1:bb:b5:92:1a:62:92:66:c7:8f:88:bf:5c:7b:
         93:09:31:41:9f:18:a7:90:fd:6d:2b:71:33:2f:a6:9a:31:21:
         ac:49:7a:5c:49:df:05:e6:93:ec:2a:d0:37:da:42:2e:4a:30:
         83:d2:59:67:a4:3b:03:e4:2b:8c:a7:4b:09:15:38:e4:f2:6a:
         5d:80:66:db:f3:ce:fe:9e:f7:7e:ed:45:6e:c5:bb:e1:08:bf:
         f0:c2:b1:d8:05:5a:c2:2b:bc:a8:a5:08:f8:4b:3e:b1:d2:5d:
         de:06:75:8e:00:b8:91:76:0b:63:b1:99:ed:19:12:8e:90:b5:
         99:84:6c:d2:3e:84:50:72:a8:ca:77:e0:7a:cc:17:82:6e:3d:
         fb:43:c4:f5:a2:60:2e:51:ee:9d:e6:33:bd:38:c0:17:75:5c:
         dd:98:c4:1e:b0:77:59:5c:49:2b:4e:38:5f:65:52:07:a2:3e:
         77:5d:4b:c2:75:e0:2d:76:bf:e0:06:3c:e7:70:9c:02:2f:1b:
         0d:42:e5:1f:8b:60:57:9e:e3:35:ec:b4:54:ca:7f:7b:81:f5:
         5e:49:5c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:36:46 2024 by rpki-client on console-fra.rpki-client.org