Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WISTRON/VaLX2XraUAMgnNMoZJuTUv5LYvU.roa
File:                     VaLX2XraUAMgnNMoZJuTUv5LYvU.roa (raw, json)
Hash identifier:          0XXe8LQBQp4Gq8bNNQpd29/D5lZLGAW9JLh3WpgVDu0=
Subject key identifier:   55:A2:D7:D9:7A:DA:50:03:20:9C:D3:28:64:9B:93:52:FE:4B:62:F5
Certificate issuer:       /CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
Certificate serial:       0BBF
Authority key identifier: 53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/VaLX2XraUAMgnNMoZJuTUv5LYvU.roa
Signing time:             Mon 26 Aug 2024 05:35:06 +0000
ROA not before:           Mon 26 Aug 2024 05:35:06 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131599
IP address blocks:        103.200.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Sep 2024 12:51:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3007 (0xbbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
        Validity
            Not Before: Aug 26 05:35:06 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=55A2D7D97ADA5003209CD328649B9352FE4B62F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:8f:6c:c7:79:78:79:7d:79:3d:ba:eb:5b:
                    5e:cc:1a:f4:6a:6b:ce:7f:1f:03:d9:d9:23:5f:5c:
                    e2:59:89:cc:47:c6:1d:06:82:b5:36:3b:4b:fe:43:
                    78:aa:af:36:11:b6:fe:c6:39:65:8b:2f:91:e3:2b:
                    98:16:f3:21:95:26:dc:3f:33:15:1a:8a:1f:f6:42:
                    d4:12:da:5d:be:ca:ee:6d:46:1f:79:8b:81:36:52:
                    d0:9e:b1:81:60:b6:78:7a:81:fe:80:43:bc:79:99:
                    2d:8c:e2:26:95:66:7d:fd:57:b8:bd:6f:c1:94:4b:
                    b4:c0:cf:ff:82:62:3e:d9:9f:28:34:1f:84:5c:1c:
                    77:ce:ab:09:5d:0f:99:54:cb:23:87:ee:a0:82:a1:
                    7c:cc:3e:a7:d7:64:81:1c:02:34:55:eb:98:1f:e0:
                    03:c9:81:e0:fd:01:10:ee:bb:1b:74:75:14:88:f3:
                    6e:13:de:8d:35:f1:1b:fc:cb:44:d9:bb:6c:ed:50:
                    e5:35:33:8c:2c:43:3a:98:90:6b:54:d9:b9:0d:c9:
                    97:1a:fd:b5:ba:f1:fd:60:b4:e4:97:71:c7:87:56:
                    96:fb:3e:c0:a1:69:6e:18:ea:62:6f:4a:48:a4:09:
                    ad:c0:bd:9d:bd:77:5f:4a:39:94:9f:ef:c0:b4:36:
                    79:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A2:D7:D9:7A:DA:50:03:20:9C:D3:28:64:9B:93:52:FE:4B:62:F5
            X509v3 Authority Key Identifier:
                keyid:53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/VaLX2XraUAMgnNMoZJuTUv5LYvU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:ea:da:84:22:22:e1:cb:a5:a4:67:87:b1:aa:b6:c2:59:dc:
         00:79:3e:17:be:cf:cb:eb:91:3d:ec:16:9f:14:ef:97:f9:92:
         6d:96:c9:11:9a:d4:1a:82:c9:30:31:db:d8:67:45:04:ca:e3:
         de:38:9d:81:76:0d:fa:a2:48:19:94:3c:26:1e:7e:4d:99:34:
         87:81:44:fe:77:93:81:c0:77:1c:9f:bb:c5:37:02:fd:09:3c:
         f1:74:ec:4b:00:da:27:dc:d9:fd:3d:82:e1:6c:85:27:96:db:
         be:e5:2e:7e:50:a3:83:f5:be:eb:15:33:5f:e5:10:cd:7a:1f:
         a0:4c:52:52:25:4b:50:7e:55:5e:2f:f3:d5:a9:80:44:a9:c7:
         51:9a:7e:4a:4d:bb:e8:83:9b:8d:8c:7d:af:74:36:83:87:14:
         5b:8b:1a:35:37:d9:4d:3b:d0:a6:fb:54:aa:12:e0:d8:f7:c8:
         a3:c7:bb:75:a3:20:df:a3:ba:0f:03:bd:3b:8b:f0:9f:96:41:
         96:d4:ef:8e:c4:09:8c:5f:72:f0:2a:69:cc:d5:c0:ed:45:65:
         56:41:cb:b7:6c:7a:1e:dc:7b:37:07:ca:47:23:b5:a1:28:e8:
         b3:35:95:0a:4a:46:46:c4:76:e1:9b:87:2c:b6:b1:b5:68:7d:
         30:18:4f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:59:03 2024 by rpki-client on console-ams.rpki-client.org