Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WISTRON/guZMF6GCjVNftdYBlumOtfAIOh4.roa
File:                     guZMF6GCjVNftdYBlumOtfAIOh4.roa (raw, json)
Hash identifier:          0Pvo2i95HvW8VxBtjYhbrYYXrT2k1cdp12WPUW68rKA=
Subject key identifier:   82:E6:4C:17:A1:82:8D:53:5F:B5:D6:01:96:E9:8E:B5:F0:08:3A:1E
Certificate issuer:       /CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
Certificate serial:       0BBD
Authority key identifier: 53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/guZMF6GCjVNftdYBlumOtfAIOh4.roa
Signing time:             Mon 26 Aug 2024 05:35:06 +0000
ROA not before:           Mon 26 Aug 2024 05:35:06 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131599
IP address blocks:        103.200.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Sep 2024 17:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3005 (0xbbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
        Validity
            Not Before: Aug 26 05:35:06 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=82E64C17A1828D535FB5D60196E98EB5F0083A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:88:7d:b7:cf:4e:8c:99:3d:27:e2:87:c2:39:
                    9a:88:6c:9a:55:bb:b0:18:dc:e2:89:6e:8e:f2:50:
                    a4:6d:49:61:fb:1e:55:c5:86:45:82:e2:5a:25:25:
                    bb:c8:1c:b4:39:00:c6:2f:64:43:0d:64:80:72:5d:
                    53:3a:82:5e:b8:ae:f8:b8:bc:f3:e1:16:1b:43:dd:
                    4a:b0:ce:36:01:34:fe:12:7e:82:42:41:12:8f:9b:
                    ef:30:fa:4e:e9:97:f3:37:a1:c3:59:ed:a1:ea:5e:
                    28:f1:25:51:12:bb:35:95:af:24:30:d3:67:ef:42:
                    8f:50:6b:b3:d8:68:df:4a:70:67:4c:95:be:55:22:
                    47:13:7c:27:c9:45:1b:1f:de:69:60:5f:37:34:16:
                    61:70:de:63:46:b0:12:bd:84:05:cd:f5:05:67:2f:
                    74:da:14:66:4b:4a:4a:af:98:65:51:5b:6b:9b:d4:
                    75:0c:19:a4:e6:99:2a:68:c7:c6:82:f0:b0:6a:80:
                    73:f0:60:1c:27:64:82:3d:20:54:c3:6e:c0:10:f6:
                    11:84:e7:be:a2:1f:07:1e:63:2c:79:e8:16:71:0c:
                    ad:5a:8d:18:4d:8e:ce:3d:9c:f5:7e:c5:72:06:01:
                    71:13:9a:af:e8:50:23:32:44:26:8d:23:4d:ff:6c:
                    93:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E6:4C:17:A1:82:8D:53:5F:B5:D6:01:96:E9:8E:B5:F0:08:3A:1E
            X509v3 Authority Key Identifier:
                keyid:53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/guZMF6GCjVNftdYBlumOtfAIOh4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:d1:4c:19:f5:82:ae:31:2e:e1:3a:fb:b9:b3:ff:a5:ff:3b:
         80:ee:56:4d:36:87:f2:02:77:24:33:af:f7:4a:5a:ea:0d:0f:
         52:39:8c:e4:92:22:90:a4:24:ec:f3:52:c8:c7:d3:a2:56:2c:
         c9:05:c0:2b:bb:51:67:4f:a5:c3:f2:d2:04:a2:98:46:96:31:
         a6:7c:9a:f4:9f:83:15:60:d8:d2:55:16:85:6e:1a:f2:36:45:
         a3:92:69:a4:8b:54:8a:49:b6:de:2c:ab:d2:95:00:f5:24:cb:
         37:1a:ea:2e:ec:bb:dd:43:2e:a7:13:c0:7e:4c:61:e5:b7:13:
         a7:2e:6c:80:c2:ea:b8:dd:4a:d0:4e:3a:f4:70:91:c7:6d:23:
         cd:25:f9:0a:bb:6d:2e:d1:d2:34:77:f6:b6:32:6c:11:9e:82:
         50:7b:e6:de:96:a8:3c:a0:f4:13:43:21:b6:2f:7a:ce:d6:59:
         bb:18:d2:07:28:d0:fb:98:b9:f6:1b:31:a3:db:e6:6f:e8:3c:
         c8:85:d2:1b:0f:02:f2:51:21:e6:9e:4b:c3:48:76:50:e5:17:
         0f:b8:b8:6a:52:33:26:5c:ce:89:dd:b3:f9:a4:97:a0:24:92:
         0a:91:6d:38:0a:6d:93:6f:51:b9:1b:49:58:fb:c5:d1:0c:92:
         20:86:81:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:03:43 2024 by rpki-client on console-fra.rpki-client.org