Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUJIN/GB79Am5vXkvVyvMEpsxDKjDB35Y.roa
File:                     GB79Am5vXkvVyvMEpsxDKjDB35Y.roa (raw, json)
Hash identifier:          wdIuYFbcpsrDpf8CltyoKTyblDuQghQ6Sxdz2TvRZYQ=
Subject key identifier:   18:1E:FD:02:6E:6F:5E:4B:D5:CA:F3:04:A6:CC:43:2A:30:C1:DF:96
Certificate issuer:       /CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
Certificate serial:       023A
Authority key identifier: 3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/GB79Am5vXkvVyvMEpsxDKjDB35Y.roa
Signing time:             Mon 10 Feb 2025 13:47:48 +0000
ROA not before:           Mon 10 Feb 2025 13:47:48 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     7483
IP address blocks:        103.24.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 03:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF
        Validity
            Not Before: Feb 10 13:47:48 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=181EFD026E6F5E4BD5CAF304A6CC432A30C1DF96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:44:f1:df:4d:82:36:8b:bd:6c:8b:87:45:
                    56:68:0c:88:e3:85:c8:1c:a5:16:8b:01:67:51:dc:
                    79:93:16:b8:21:c1:f3:86:76:ac:e7:26:06:c2:5f:
                    ba:aa:b5:ee:45:ca:7b:11:50:8b:8a:fa:66:88:d3:
                    0e:e8:e6:3d:d2:df:f8:c6:aa:bd:34:df:ee:b4:ad:
                    5c:1c:c2:ce:b2:35:4b:54:39:93:7e:ad:bc:fe:6a:
                    1c:92:68:56:08:f5:de:9d:c7:09:82:d1:b8:38:39:
                    3d:f0:e0:7b:5b:9a:bd:e3:84:49:ee:4f:ef:5e:c9:
                    0e:76:e7:83:d7:2c:b0:16:ba:71:1b:8a:08:d9:59:
                    a7:80:6c:5d:41:54:7e:4f:60:ad:b1:7c:60:03:9b:
                    c4:25:e0:ab:8b:2e:42:78:67:cd:d8:ab:a5:01:c4:
                    19:fe:fe:e1:22:7d:0c:5a:12:e0:7c:0e:8a:ef:5b:
                    2c:f6:d0:a2:fc:a0:f7:59:30:7d:93:c5:2b:48:39:
                    e0:b2:0f:bd:23:49:57:fb:31:7a:68:25:45:2c:de:
                    7a:70:56:c5:7f:e5:92:32:db:90:28:60:87:44:2c:
                    8d:5a:70:47:c4:7d:bf:a2:47:df:9b:6e:98:47:33:
                    44:7c:1b:c7:d0:42:13:4b:1a:2c:8f:44:0a:03:27:
                    c7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1E:FD:02:6E:6F:5E:4B:D5:CA:F3:04:A6:CC:43:2A:30:C1:DF:96
            X509v3 Authority Key Identifier:
                keyid:3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/GB79Am5vXkvVyvMEpsxDKjDB35Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:ec:a5:6c:92:c7:24:12:49:04:21:c4:cf:69:a3:66:63:b5:
         99:33:07:9d:84:f3:b3:8a:b0:3a:6b:47:ff:b3:19:e3:b0:e1:
         34:fc:1d:72:ba:c3:b6:78:4b:18:9e:c3:a6:de:46:c2:db:ee:
         9a:d0:2b:b0:91:ce:13:84:6a:91:72:0b:c9:09:78:59:83:1e:
         2f:62:99:e7:2f:6e:ac:3f:f9:2e:9f:ea:b5:ca:e6:90:8c:8a:
         00:06:2d:f6:a2:f9:c7:5d:ae:6b:0b:ac:80:19:12:6b:18:fa:
         ba:df:fb:e5:c6:e6:0b:1f:f1:75:4f:42:5c:c9:8f:05:7f:e1:
         b5:ba:8f:7e:d9:f5:e9:63:04:52:82:c6:05:2d:4c:18:6a:33:
         b6:d5:13:79:b4:27:18:ec:2c:b8:81:0d:3b:84:0e:5d:93:1b:
         3d:63:49:54:1b:5a:a3:0a:74:ae:0a:7a:19:10:ea:fd:26:dd:
         3b:a5:7d:a9:4f:84:8d:53:00:91:5c:f1:96:4b:ae:e1:ba:a2:
         bf:c8:2c:e2:61:38:16:cb:00:b7:ce:41:d8:c0:1b:88:65:e6:
         21:36:2c:28:84:bd:6f:49:fb:1c:59:a2:ad:8f:73:b9:14:3d:
         e5:05:01:78:78:ef:88:39:4d:78:09:5a:6d:db:cd:c7:4f:1c:
         64:d0:e4:dc
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICAjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0My
QUQ4NjcxQjM3NTMyNjUyODZEMzJFNDZCRjA2RkRGNTJEMEZFRjAeFw0yNTAyMTAx
MzQ3NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE4MUVGRDAyNkU2RjVF
NEJENUNBRjMwNEE2Q0M0MzJBMzBDMURGOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsEUTx302CNou9bIuHRVZoDIjjhcgcpRaLAWdR3HmTFrghwfOG
dqznJgbCX7qqte5FynsRUIuK+maI0w7o5j3S3/jGqr003+60rVwcws6yNUtUOZN+
rbz+ahySaFYI9d6dxwmC0bg4OT3w4Htbmr3jhEnuT+9eyQ5254PXLLAWunEbigjZ
WaeAbF1BVH5PYK2xfGADm8Ql4KuLLkJ4Z83Yq6UBxBn+/uEifQxaEuB8DorvWyz2
0KL8oPdZMH2TxStIOeCyD70jSVf7MXpoJUUs3npwVsV/5ZIy25AoYIdELI1acEfE
fb+iR9+bbphHM0R8G8fQQhNLGiyPRAoDJ8epAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUGB79Am5vXkvVyvMEpsxDKjDB35YwHwYDVR0jBBgwFoAUPCrYZxs3UyZShtMu
Rr8G/fUtD+8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWVVKSU4v
UENyWVp4czNVeVpTaHRNdVJyOEdfZlV0RC04LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9QQ3JZWnhzM1V5WlNodE11UnI4R19mVXRELTguY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ZVUpJTi9HQjc5QW01dlhrdlZ5dk1FcHN4
REtqREIzNVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZxg2
MA0GCSqGSIb3DQEBCwUAA4IBAQAo7KVsksckEkkEIcTPaaNmY7WZMwedhPOzirA6
a0f/sxnjsOE0/B1yusO2eEsYnsOm3kbC2+6a0Cuwkc4ThGqRcgvJCXhZgx4vYpnn
L26sP/kun+q1yuaQjIoABi32ovnHXa5rC6yAGRJrGPq63/vlxuYLH/F1T0JcyY8F
f+G1uo9+2fXpYwRSgsYFLUwYajO21RN5tCcY7Cy4gQ07hA5dkxs9Y0lUG1qjCnSu
CnoZEOr9Jt07pX2pT4SNUwCRXPGWS67huqK/yCziYTgWywC3zkHYwBuIZeYhNiwo
hL1vSfscWaKtj3O5FD3lBQF4eO+IOU14CVpt283HTxxk0OTc
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:58:27 2025 by rpki-client