Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WISTRON/HcSgY7t1kCZ9CR8b1vmP9Lkyf3Y.roa
File:                     HcSgY7t1kCZ9CR8b1vmP9Lkyf3Y.roa (raw, json)
Hash identifier:          F75gp2A7ngZb286HvdGaFEqgl82+lbDlsKQpdAxjo94=
Subject key identifier:   1D:C4:A0:63:BB:75:90:26:7D:09:1F:1B:D6:F9:8F:F4:B9:32:7F:76
Certificate issuer:       /CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
Certificate serial:       0BBE
Authority key identifier: 53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/HcSgY7t1kCZ9CR8b1vmP9Lkyf3Y.roa
Signing time:             Mon 26 Aug 2024 05:35:06 +0000
ROA not before:           Mon 26 Aug 2024 05:35:06 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131599
IP address blocks:        103.200.0.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Sep 2024 17:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3006 (0xbbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
        Validity
            Not Before: Aug 26 05:35:06 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=1DC4A063BB7590267D091F1BD6F98FF4B9327F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:50:c8:56:2a:ba:10:a1:cd:d6:86:51:23:68:
                    e0:7b:7a:ad:c2:43:00:13:33:6c:ae:66:25:39:6e:
                    db:dd:c7:7f:70:6b:6b:3e:9a:f4:39:de:71:a7:d5:
                    4e:71:04:4e:23:27:d1:02:a4:ec:7b:6c:69:1f:84:
                    68:27:65:d8:97:ac:e2:70:b4:ce:22:f4:57:5a:9a:
                    86:d1:60:cc:e1:62:83:ca:14:73:25:b6:bb:d2:86:
                    e8:58:96:7d:cd:99:8a:f1:25:87:b2:3b:f2:89:89:
                    09:3f:74:b2:40:af:84:72:d5:fb:41:52:a3:d3:dd:
                    bb:5f:c5:9e:e9:52:78:47:b6:c0:e5:41:4b:5a:5f:
                    ae:ad:e3:0f:08:43:96:47:9c:d5:8f:e7:14:bb:55:
                    94:5c:ed:28:9f:fb:08:d5:20:35:34:81:3f:40:a6:
                    b8:27:84:c6:8e:99:dd:83:34:0d:0b:49:89:49:9a:
                    39:dd:4c:2b:62:72:70:72:23:44:7d:1d:28:3b:d9:
                    46:5b:99:3d:f3:a6:01:a2:01:03:1e:d4:32:30:3d:
                    3d:73:ba:39:82:5a:48:52:ea:0a:d5:b8:9a:0c:e8:
                    4b:4d:f4:7e:6e:b4:a8:91:a7:5c:25:b8:c2:2c:98:
                    06:00:a2:5d:27:c7:6d:c5:20:ab:de:94:93:d1:05:
                    9c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C4:A0:63:BB:75:90:26:7D:09:1F:1B:D6:F9:8F:F4:B9:32:7F:76
            X509v3 Authority Key Identifier:
                keyid:53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/HcSgY7t1kCZ9CR8b1vmP9Lkyf3Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:3d:62:72:4f:fe:1d:67:2b:c4:85:45:45:e2:20:1a:ac:c8:
         85:67:7c:2b:75:dd:1d:3a:5a:c3:d9:5e:a0:0c:fd:a8:a0:5a:
         b4:97:7b:cc:8b:38:92:38:1d:23:9a:03:d6:96:d1:4e:7d:3d:
         f0:26:6b:00:3b:1c:29:ae:9b:aa:08:37:19:27:85:e5:e0:bd:
         17:ed:8d:6b:5d:1c:df:7e:98:11:8d:33:d1:97:57:9b:e7:71:
         26:a6:0f:68:3b:34:3d:0d:43:f2:a5:20:99:df:7a:16:23:58:
         1c:75:86:cc:38:22:40:d0:1f:5e:2e:b4:a7:61:aa:5d:7c:ec:
         e5:d1:0f:3b:3a:2a:bb:ef:cc:88:cc:26:b4:8b:ef:52:e8:ce:
         5b:10:b3:fc:1f:a3:dc:75:a2:e7:44:83:05:49:df:f5:90:9f:
         76:d9:33:53:15:19:dc:89:b5:2e:a1:cc:bf:f9:2b:f6:33:08:
         d7:a4:09:c0:5b:da:41:43:ee:df:8f:99:9c:14:51:8b:ae:29:
         8c:55:bb:2a:d3:8a:3f:8f:53:90:44:b1:31:65:3d:e2:b6:13:
         22:ea:4c:a3:e0:b5:46:67:b3:a7:c4:6a:3e:bd:06:c2:b6:d5:
         50:51:ea:f0:f7:d9:5f:b0:da:3a:9e:c0:e5:c9:b5:88:65:d1:
         b1:f1:c7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:03:43 2024 by rpki-client on console-fra.rpki-client.org