Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/LkiMompBHe9bDP16PLIBnu2_5U8.roa
File:                     LkiMompBHe9bDP16PLIBnu2_5U8.roa (raw, json)
Hash identifier:          cMMdNRUZ9tX7SkOM9032qSnHIDX0cqbXF70AhHcN9fc=
Subject key identifier:   2E:48:8C:A2:6A:41:1D:EF:5B:0C:FD:7A:3C:B2:01:9E:ED:BF:E5:4F
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0C4C
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/LkiMompBHe9bDP16PLIBnu2_5U8.roa
Signing time:             Wed 17 Apr 2024 08:37:20 +0000
ROA not before:           Wed 17 Apr 2024 08:37:20 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38047
IP address blocks:        103.106.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 10:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3148 (0xc4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Apr 17 08:37:20 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=2E488CA26A411DEF5B0CFD7A3CB2019EEDBFE54F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:87:8a:ca:f6:c3:f1:e0:76:27:48:89:e8:
                    e2:6a:aa:85:91:ad:56:03:e4:a6:68:23:dc:3e:90:
                    72:8d:c9:56:3b:ba:08:67:60:6e:f1:bf:ae:f5:70:
                    40:0b:6d:10:60:66:c4:fb:60:83:bd:c2:70:77:85:
                    40:49:c7:df:27:95:92:98:6c:c9:ea:f2:6c:70:b5:
                    42:38:df:e8:ba:bf:b7:6c:0b:ab:35:cb:0f:17:79:
                    4b:9a:83:64:bc:bb:e1:89:45:52:6c:80:5c:ce:fa:
                    03:bb:bd:3e:b9:63:8b:31:93:1f:b1:02:f1:46:e6:
                    52:f7:a8:00:1c:91:6c:62:3c:f0:7f:3f:81:f1:2d:
                    7d:fa:25:af:42:ff:b7:5a:3d:55:db:83:e9:d4:61:
                    70:e4:0b:73:ba:a4:88:01:0d:fd:94:f2:97:68:7d:
                    14:00:63:e4:8f:57:68:82:54:04:e2:bd:bc:98:b4:
                    1a:59:c3:04:88:25:69:29:3a:93:fe:57:84:94:3b:
                    31:60:82:77:9f:15:71:fa:0f:cd:f3:5e:36:9d:05:
                    59:a4:98:fd:da:da:65:c1:f0:ff:99:ce:b6:a2:78:
                    cd:00:26:4a:3c:9a:98:60:c6:fe:3f:66:12:89:ec:
                    37:f5:b1:3c:a0:08:c8:4f:43:9f:05:3f:f8:29:24:
                    3f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:48:8C:A2:6A:41:1D:EF:5B:0C:FD:7A:3C:B2:01:9E:ED:BF:E5:4F
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/LkiMompBHe9bDP16PLIBnu2_5U8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:81:af:61:66:1b:30:b5:4b:e1:93:ea:26:27:57:63:e3:fb:
         0e:15:cc:c8:01:39:ea:4f:7e:ff:66:b8:e0:7d:51:e8:f4:92:
         70:90:d8:73:0a:db:c0:31:bb:bc:04:38:97:95:3b:32:83:c0:
         c3:4e:b0:6e:10:fd:3d:75:92:42:30:43:4d:a5:0f:ec:ed:7c:
         57:81:14:03:d4:01:59:96:e5:ec:09:4b:12:f3:c3:eb:36:46:
         4c:b9:47:4e:d1:2d:68:57:68:a8:24:16:1e:da:58:08:5a:a6:
         97:f5:f7:fe:36:de:cf:79:9c:55:fb:72:22:d0:2c:ae:fe:cf:
         cc:7e:e8:80:77:40:ea:cf:e6:0d:71:81:e3:73:1d:2c:8e:bc:
         59:83:30:cb:7e:1c:e9:15:05:fd:0e:ec:0b:61:e1:b4:38:19:
         93:1e:17:c9:b6:30:f8:78:96:ef:49:ca:a8:9b:f4:aa:1a:da:
         f2:3a:08:e3:12:f7:c5:60:1a:84:75:87:26:e9:d6:03:38:f2:
         26:08:05:14:db:b6:da:f0:8e:c7:2f:7a:67:1e:d3:65:92:de:
         9c:aa:7a:53:55:50:bd:d7:02:14:ff:b8:1e:32:56:30:3d:40:
         7f:9f:e9:95:45:ad:4c:54:78:49:94:a2:0f:22:d7:97:2b:a5:
         7e:05:78:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 13:19:18 2024 by rpki-client on console-fra.rpki-client.org