Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WISTRON/jXuFoDZZIlK3U0SgxuHl646Ci5s.roa
File:                     jXuFoDZZIlK3U0SgxuHl646Ci5s.roa (raw, json)
Hash identifier:          P/FbzLavgW18bYRBhla7KCFGLEoxo8WL8CfU1Je+Ajw=
Subject key identifier:   8D:7B:85:A0:36:59:22:52:B7:53:44:A0:C6:E1:E5:EB:8E:82:8B:9B
Certificate issuer:       /CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
Certificate serial:       0B33
Authority key identifier: 53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/jXuFoDZZIlK3U0SgxuHl646Ci5s.roa
Signing time:             Fri 16 Feb 2024 07:57:53 +0000
ROA not before:           Fri 16 Feb 2024 07:57:53 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131599
IP address blocks:        103.200.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2867 (0xb33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
        Validity
            Not Before: Feb 16 07:57:53 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=8D7B85A036592252B75344A0C6E1E5EB8E828B9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:13:42:dc:f5:29:2b:60:22:0f:d9:87:a7:
                    e5:b3:23:5b:e9:a9:63:71:92:0d:3f:52:30:85:b3:
                    c4:23:bb:44:96:75:06:d0:b8:d3:05:ef:fc:be:fd:
                    c3:24:fd:6d:d8:7d:c1:cc:5e:d4:d5:d6:02:0e:78:
                    1e:e2:b2:5c:83:e6:fd:12:d5:a8:54:bf:d9:98:fb:
                    b7:90:f6:42:d4:94:73:ea:29:f2:7f:d6:4e:db:25:
                    75:e1:b9:3e:07:4c:48:54:b1:5a:f4:0c:13:c7:c1:
                    93:47:89:4b:ed:84:2a:bc:de:46:03:36:3b:77:ca:
                    17:8a:19:9b:18:c3:0c:2a:a1:bb:9b:f8:13:d7:ad:
                    ae:a3:c7:0e:eb:41:06:95:f8:b6:df:d6:dc:dc:9e:
                    0d:fb:dc:56:fe:ab:83:86:f0:88:75:f3:b2:47:f1:
                    4d:64:0e:8b:7a:6e:70:dd:2b:d6:93:8f:fa:0f:6c:
                    9f:6a:93:e4:c7:d6:14:a8:f8:e3:9c:f6:be:e9:35:
                    02:1b:0d:b9:f9:fb:06:cc:ca:ba:a3:61:ba:5f:0a:
                    e8:aa:fe:3e:47:b2:c8:83:4d:45:5b:d8:2e:98:51:
                    37:92:36:e7:f3:d7:85:ac:5e:d0:3b:b1:f8:d3:d5:
                    33:6b:be:2e:7c:e7:6f:45:e7:1a:77:6a:e8:19:cb:
                    da:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7B:85:A0:36:59:22:52:B7:53:44:A0:C6:E1:E5:EB:8E:82:8B:9B
            X509v3 Authority Key Identifier:
                keyid:53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/jXuFoDZZIlK3U0SgxuHl646Ci5s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:36:6d:6b:d1:79:fa:d8:77:82:08:54:c9:d2:07:68:f7:ac:
         6c:02:89:1f:ff:dc:41:2a:f2:4f:dd:b7:81:bf:65:64:99:2f:
         8f:b5:90:e0:30:61:4c:c0:d1:02:d5:3e:9d:54:53:84:1f:68:
         3f:f3:4b:bd:1b:57:a5:f2:1f:bb:b5:bc:72:e8:18:f3:c8:56:
         db:7e:b8:48:99:32:c0:b2:49:f0:cd:93:89:9f:2e:9b:cb:c9:
         f6:ef:d0:21:64:9f:57:18:d4:ef:67:db:63:6f:44:9c:e8:b5:
         c8:fa:68:e3:06:15:8d:91:02:f4:cd:b6:cd:3e:03:b0:b3:a2:
         96:5c:4a:6a:56:e6:44:7c:40:30:b2:67:01:57:98:a8:42:73:
         99:4c:49:f0:78:c7:80:e6:d5:08:07:e8:5a:5b:3a:29:0c:ed:
         4f:08:c1:7d:f8:1a:4e:39:f5:72:77:f9:27:c1:05:5b:8c:30:
         b7:07:7a:43:a8:a2:fb:a5:55:4e:00:9f:b8:89:d7:e4:ac:47:
         14:1c:ec:d8:10:3c:60:35:2b:8b:34:76:da:5b:b4:ac:68:6b:
         ec:d9:5d:77:31:68:fa:83:43:7a:38:22:2a:42:9d:f5:b2:40:
         f5:a1:cc:5d:f0:f8:e5:07:08:6e:2b:cb:84:5c:a4:ae:9c:c6:
         f9:a9:c6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 02:35:06 2024 by rpki-client on console-fra.rpki-client.org