Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WISTRON/f6Xkon53kSCDUPYSxGpydJ19Pn0.roa
File:                     f6Xkon53kSCDUPYSxGpydJ19Pn0.roa (raw, json)
Hash identifier:          zXDIvX0uxSTQ0xi5WZf7/sLiIhpgmq+/RAA/Iqunx6A=
Subject key identifier:   7F:A5:E4:A2:7E:77:91:20:83:50:F6:12:C4:6A:72:74:9D:7D:3E:7D
Certificate issuer:       /CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
Certificate serial:       0B37
Authority key identifier: 53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/f6Xkon53kSCDUPYSxGpydJ19Pn0.roa
Signing time:             Fri 16 Feb 2024 08:13:58 +0000
ROA not before:           Fri 16 Feb 2024 08:13:58 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131599
IP address blocks:        103.200.0.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
        Validity
            Not Before: Feb 16 08:13:58 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7FA5E4A27E7791208350F612C46A72749D7D3E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:e4:e6:63:ca:2d:1f:74:80:7b:06:5d:81:
                    0e:96:84:dd:4a:5a:6b:08:c5:2c:f9:8d:5e:43:41:
                    84:ec:93:a4:9d:14:40:8c:56:7c:6d:ba:1e:d0:26:
                    da:88:60:d9:e7:e7:3a:b6:00:63:62:1b:cb:40:35:
                    ed:2f:76:48:7e:77:4c:a5:27:35:f0:db:a7:c6:0b:
                    7f:08:50:85:06:b2:35:a8:83:49:1c:de:25:fd:f9:
                    b5:4d:e2:d9:13:13:17:93:7c:93:e1:f2:ef:82:b3:
                    60:7b:15:c1:0f:c6:6f:b1:4a:72:b8:58:b5:55:ac:
                    7d:0d:b5:cf:f3:59:70:7f:34:0f:29:fa:1c:af:2e:
                    d1:51:74:7d:f7:c2:8d:27:12:fd:cd:07:82:a2:a4:
                    9f:3a:dd:27:79:c3:4f:32:f0:b4:e5:fc:25:88:56:
                    ff:84:db:7c:d0:6c:27:45:e1:ca:89:73:89:89:5a:
                    9f:8e:fb:c2:a8:0c:a0:de:f5:c7:3b:b4:9d:2a:6f:
                    18:80:0e:80:da:02:e7:be:d1:3b:ab:92:34:dc:5f:
                    df:e5:08:6f:c5:9c:ee:c0:86:7e:c1:98:0c:37:67:
                    50:7a:2a:2f:dd:82:c8:43:f6:ae:c8:b9:95:be:be:
                    85:e6:ac:05:1b:12:7d:01:f6:37:08:4f:c6:a9:99:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A5:E4:A2:7E:77:91:20:83:50:F6:12:C4:6A:72:74:9D:7D:3E:7D
            X509v3 Authority Key Identifier:
                keyid:53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/f6Xkon53kSCDUPYSxGpydJ19Pn0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:59:3c:8a:cf:2c:2c:53:cf:29:d2:3a:7c:1b:12:d6:4d:25:
         a2:3d:d1:40:5d:c6:7c:0d:12:01:89:cf:90:cc:bc:f9:fa:ec:
         e2:e7:20:a0:8c:14:72:b3:03:ee:47:02:5c:82:21:e5:f2:66:
         48:fc:40:de:63:8c:d5:9e:52:ee:f2:d6:dd:c6:66:f9:39:2a:
         19:ca:7c:3e:27:29:20:30:47:01:f8:63:87:67:b3:20:3e:a7:
         23:83:ce:f0:8f:0f:9b:a4:0a:70:8a:83:c0:11:60:2c:a8:99:
         fb:d5:56:da:0c:8e:a9:bd:ac:06:b7:a9:14:67:24:c6:f7:9b:
         31:d0:5b:12:24:e1:df:38:13:c1:5d:a6:f2:a8:bf:1e:2c:5f:
         6b:06:d0:2e:88:0d:cf:74:81:12:19:65:75:18:06:7e:1b:11:
         1b:df:24:e0:12:fd:5b:10:4b:b1:db:19:ba:a1:79:16:7e:4f:
         e2:2a:58:ea:96:be:cc:72:61:7e:22:d9:53:f0:36:ed:92:45:
         50:60:a2:12:1f:52:f5:48:a0:cc:c9:6c:c5:c3:12:d8:e9:3d:
         6a:b6:97:a3:d2:ed:de:c6:e3:5a:83:cb:0a:d0:b7:d2:ad:0f:
         ec:e9:16:d5:8c:49:00:04:9a:19:dd:45:0b:27:47:91:ac:73:
         79:d9:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 02:35:06 2024 by rpki-client on console-fra.rpki-client.org