Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/2n6EvR9AyN7tJnEFuXfQPCutSwo.roa
File:                     2n6EvR9AyN7tJnEFuXfQPCutSwo.roa (raw, json)
Hash identifier:          SqELL1MKsuyqKm/6YJ8v1OwVJ4aQktx9YFZRaClYwAM=
Subject key identifier:   DA:7E:84:BD:1F:40:C8:DE:ED:26:71:05:B9:77:D0:3C:2B:AD:4B:0A
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0BA8
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/2n6EvR9AyN7tJnEFuXfQPCutSwo.roa
Signing time:             Fri 01 Sep 2023 09:44:06 +0000
ROA not before:           Fri 01 Sep 2023 09:44:06 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38047
IP address blocks:        2402:c340:cacb::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 10:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2984 (0xba8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep  1 09:44:06 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=DA7E84BD1F40C8DEED267105B977D03C2BAD4B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a9:a8:28:0f:44:49:8b:c9:5c:82:67:59:50:
                    88:0a:68:7a:e5:f0:15:42:70:a6:33:d2:84:7c:01:
                    f6:dd:61:ca:b9:a6:71:1c:07:61:a5:61:c2:5d:3a:
                    6a:02:07:16:19:c5:fc:b1:c5:17:69:cb:01:b7:26:
                    02:a3:1e:cb:c4:92:c4:e5:22:ee:df:0e:8b:7c:d8:
                    6f:d7:38:69:5e:80:a7:7c:9b:53:79:9b:ce:66:0e:
                    14:9e:f2:13:03:ba:04:ec:d4:14:cb:39:7c:21:0a:
                    4d:32:69:19:1d:95:6e:87:0d:4b:3e:96:65:fc:f6:
                    03:ce:1e:d1:fa:32:04:8d:25:6a:04:0f:0b:d2:fa:
                    f9:af:0a:ff:93:c0:f4:fe:8b:b4:85:bf:3b:90:3a:
                    56:e2:af:6f:b7:d9:9b:33:ce:64:dc:67:d4:45:96:
                    57:02:c9:52:6a:c9:11:1a:28:42:66:fb:5c:28:4f:
                    17:1b:30:38:e1:7d:eb:d6:bf:7e:bf:0e:d9:25:1e:
                    8d:fd:c2:17:54:e4:fc:26:17:f2:48:c8:a0:9b:30:
                    63:34:c3:72:7d:6f:56:87:cd:17:74:c4:29:13:4a:
                    1e:5e:1c:54:21:95:1e:e6:8b:82:3c:10:1b:d8:58:
                    fd:1e:f4:a0:53:2a:11:b2:ab:88:d0:ce:98:50:64:
                    c2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7E:84:BD:1F:40:C8:DE:ED:26:71:05:B9:77:D0:3C:2B:AD:4B:0A
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/2n6EvR9AyN7tJnEFuXfQPCutSwo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c340:cacb::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:a5:86:1a:8d:9c:ba:a0:12:9c:00:3e:c0:0e:52:5d:1f:da:
         2c:86:28:69:a5:21:ed:f2:f0:f7:65:6d:09:90:f8:92:f0:7f:
         70:93:c7:c9:75:fe:df:a3:2f:b6:3e:40:f4:04:33:e7:49:c1:
         b2:e0:0b:7a:bc:1e:1a:fe:d6:df:05:a7:7e:14:a7:c2:72:1f:
         6a:c5:00:a7:ba:bd:49:27:6f:d8:86:24:38:03:12:72:31:c6:
         61:a5:da:52:40:5a:9c:b2:78:f8:f9:cd:40:07:c3:43:04:b9:
         b4:21:ab:4b:65:9f:6f:d7:7f:ef:4e:e8:c1:de:ee:ad:19:47:
         c5:98:1d:b7:0d:91:a7:ee:a5:e1:c5:ff:53:dc:a5:83:d0:bb:
         69:e7:c9:84:18:3c:e6:bc:16:1b:1a:2a:d9:d4:ba:8d:02:8c:
         24:9e:8b:f4:ee:b4:16:15:3e:df:08:96:78:f2:28:e0:d2:65:
         b7:55:92:9c:1c:69:ac:9d:b1:48:2f:b3:5f:82:d4:ec:6d:f6:
         3e:d4:ad:45:70:92:c4:00:4c:54:e9:c4:f4:75:22:21:59:15:
         32:10:db:2f:ac:a7:5d:4a:dd:8d:fb:1a:0b:92:c5:66:43:f4:
         45:29:58:ea:66:e0:2a:e1:06:6d:f0:9a:e4:ec:fe:5d:43:cc:
         78:7e:1e:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 23 13:19:18 2024 by rpki-client on console-fra.rpki-client.org