Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/uOz9qBa16A30yErp_lSZHlIoOAQ.roa
File:                     uOz9qBa16A30yErp_lSZHlIoOAQ.roa (raw, json)
Hash identifier:          3qoWAnttOLK+Bcx27w08Q6dqdOD5AlIg/aDQ0wjOPEo=
Subject key identifier:   B8:EC:FD:A8:16:B5:E8:0D:F4:C8:4A:E9:FE:54:99:1E:52:28:38:04
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0CD5
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/uOz9qBa16A30yErp_lSZHlIoOAQ.roa
Signing time:             Mon 10 Feb 2025 14:02:55 +0000
ROA not before:           Mon 10 Feb 2025 14:02:55 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131593
IP address blocks:        43.251.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 03:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3285 (0xcd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Feb 10 14:02:55 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=B8ECFDA816B5E80DF4C84AE9FE54991E52283804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:4a:c8:f1:1c:ae:c5:71:1c:99:5c:4e:9b:
                    ca:c9:32:e0:3b:2a:71:9c:16:29:3a:ac:be:de:64:
                    4d:cf:8d:39:fb:86:5e:b3:75:f9:55:94:81:f4:99:
                    1d:0d:0f:d8:79:a9:65:69:2e:6f:8f:63:61:c1:eb:
                    e3:c5:7d:20:a5:bd:ae:1a:c3:98:ec:83:a0:b2:43:
                    72:62:e0:1d:c5:69:e8:75:71:36:8d:ba:93:6e:d3:
                    f4:11:37:18:d9:06:72:2f:ab:bd:63:67:9b:63:d6:
                    1c:f2:6f:d4:23:59:7f:96:a1:20:86:2a:bb:11:a7:
                    96:f2:0e:f0:9d:61:0a:3f:e6:0c:22:3a:ac:01:e5:
                    1e:3b:e0:f7:5d:80:9f:98:d0:74:f4:72:59:c4:af:
                    4f:f6:96:19:f2:32:b9:71:3e:c9:f1:f8:01:fb:72:
                    96:23:fb:ce:3e:bf:8a:b4:ea:16:c7:92:63:3a:a1:
                    66:07:12:11:f6:47:ad:d0:92:bf:00:2f:5e:41:36:
                    4d:5e:6b:f9:ac:07:b3:4b:16:2e:1a:49:85:40:a0:
                    c7:a6:d7:6f:1e:13:54:76:98:49:d6:5a:55:96:5a:
                    4b:67:8d:ec:f1:09:c2:4a:7e:dd:85:b1:c5:cf:9d:
                    37:6d:e5:de:ba:f2:47:aa:a8:0f:ca:d8:6b:c9:00:
                    04:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EC:FD:A8:16:B5:E8:0D:F4:C8:4A:E9:FE:54:99:1E:52:28:38:04
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/uOz9qBa16A30yErp_lSZHlIoOAQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:00:92:e1:76:02:47:f4:1b:fe:c3:a7:5a:c3:4e:fb:0b:a2:
         14:e4:52:4e:e0:7d:dd:c1:2e:a6:b0:5c:f6:16:f9:2e:b5:65:
         67:70:b9:ac:5b:16:7e:3f:ee:a2:d2:12:71:bd:bb:94:01:5c:
         1f:0f:b4:67:58:3d:ee:d1:2c:63:6d:3c:2a:7b:ab:1d:05:3b:
         99:45:a2:c5:fb:c8:fc:3a:1c:02:eb:78:d3:c8:34:4f:48:a1:
         7f:56:f1:7b:cc:78:29:5f:7b:90:99:25:83:40:5e:f8:c6:fc:
         24:2e:9f:9e:e5:9b:bf:c7:d8:90:96:51:37:94:5d:e5:dd:cc:
         73:c7:bf:c2:d1:61:fa:e7:81:d5:7d:a4:d5:47:89:13:ed:e1:
         23:5d:e7:5d:d7:08:27:b2:93:fb:b2:eb:4c:ef:95:5a:94:fe:
         28:a4:fe:de:0a:d1:a4:a1:19:7e:c6:d5:04:6b:7c:1d:1a:89:
         a2:10:8a:db:2a:34:e1:ea:e2:cf:99:8f:e5:67:21:32:e4:7a:
         73:05:a4:88:23:e2:40:f2:64:58:55:4f:fe:9f:7e:a5:bf:a4:
         ea:45:cc:25:ba:7e:47:14:22:cc:6a:22:df:56:93:7b:b3:ee:
         dc:76:a6:82:e0:5e:0c:28:e7:41:4a:79:be:0d:30:25:61:68:
         4e:f5:e7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:48:00 2025 by rpki-client