Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WISTRON/n9yjb_rAnp_QT6Z-J0PKcHNoMhE.roa
File:                     n9yjb_rAnp_QT6Z-J0PKcHNoMhE.roa (raw, json)
Hash identifier:          tGdArj+62Db2rDEgpapO/dsCLuA3qHKnZ2MC08NgvIA=
Subject key identifier:   9F:DC:A3:6F:FA:C0:9E:9F:D0:4F:A6:7E:27:43:CA:70:73:68:32:11
Certificate issuer:       /CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
Certificate serial:       0B35
Authority key identifier: 53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/n9yjb_rAnp_QT6Z-J0PKcHNoMhE.roa
Signing time:             Fri 16 Feb 2024 08:12:54 +0000
ROA not before:           Fri 16 Feb 2024 08:12:54 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131599
IP address blocks:        103.200.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2869 (0xb35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
        Validity
            Not Before: Feb 16 08:12:54 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=9FDCA36FFAC09E9FD04FA67E2743CA7073683211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7d:54:d3:43:0f:9b:a2:a0:b3:80:b4:9d:29:
                    80:46:49:d1:0e:f5:44:2f:8f:df:da:3d:f6:bc:69:
                    a3:c3:c0:db:85:3e:21:28:6b:f3:03:bf:e1:94:8a:
                    ed:cc:65:6d:99:75:7a:f9:98:10:d7:cb:d0:53:24:
                    6e:59:a9:0b:86:d8:0e:fe:8f:8d:b3:d7:f7:09:e2:
                    67:e6:90:94:0a:a1:52:18:54:0b:64:76:4c:b4:95:
                    b5:f8:40:a4:23:93:6a:bb:6a:52:86:f4:e9:81:c7:
                    87:e2:97:85:88:97:90:98:16:55:cc:df:b0:be:69:
                    1c:bb:1d:09:4d:d7:ef:e0:1c:f6:ad:df:54:3a:02:
                    2b:a7:b6:d3:c9:86:72:e7:de:f9:35:35:c9:8f:fb:
                    d2:be:a2:c2:45:d7:99:3a:56:c5:56:63:c9:a2:78:
                    1e:f1:0f:fd:95:24:ef:b3:97:89:18:70:4d:07:71:
                    fe:df:d5:6d:71:63:6d:00:5e:4c:b1:ef:a3:33:34:
                    68:bd:39:84:49:d4:a2:93:ca:90:7a:ff:2b:ee:81:
                    32:b8:36:dc:f0:f2:38:a4:f7:ce:bb:22:06:e0:ed:
                    2e:31:28:70:be:1f:e6:4c:cd:79:6e:89:80:b3:7d:
                    29:5e:38:06:0d:a1:c9:4e:d8:b8:0f:e3:02:fd:a1:
                    fa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DC:A3:6F:FA:C0:9E:9F:D0:4F:A6:7E:27:43:CA:70:73:68:32:11
            X509v3 Authority Key Identifier:
                keyid:53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/n9yjb_rAnp_QT6Z-J0PKcHNoMhE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:32:e4:5b:c9:0c:40:13:11:7e:2c:93:04:fb:6a:84:1d:48:
         32:23:82:b7:fe:ee:fa:8d:4d:98:bc:bd:5d:d2:05:ec:e1:69:
         cc:a1:7c:40:64:2d:32:28:7b:75:85:e1:6a:b6:e5:0c:11:e1:
         25:68:a0:35:35:59:81:ee:d9:66:88:f7:bb:66:5c:69:f9:ad:
         08:c8:08:cc:dd:5a:d8:e2:d5:41:2f:e1:80:7a:90:42:13:0a:
         f3:b1:90:76:d4:98:d3:ff:6e:ff:8d:29:40:b4:a6:38:3b:08:
         21:80:e1:33:02:4c:63:7f:31:af:32:b7:60:81:2a:f2:ce:f0:
         32:ce:f8:3b:dc:fa:9a:50:33:06:2e:d1:f3:e2:44:02:b1:e2:
         2c:6f:20:5c:46:a7:80:9f:3c:6d:9c:15:8e:ac:cc:30:a2:d0:
         95:79:f6:2d:bd:26:38:94:1d:1c:44:26:bc:6b:d8:cc:35:c3:
         87:a3:fc:03:d9:a3:af:d4:1d:4a:dd:be:d3:cd:48:37:86:d5:
         36:b5:14:0c:e9:85:3f:c8:e6:84:5a:a4:6f:50:64:0b:67:f9:
         7c:db:10:aa:b1:fe:82:59:0d:71:33:8c:da:99:b5:40:8c:73:
         8f:fb:84:f5:47:9f:c3:69:18:e9:bf:1e:bf:9f:9d:7f:4d:63:
         85:e3:07:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 02:22:45 2024 by rpki-client on console-ams.rpki-client.org