Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/GVnP93hAncO8m_cIlDkSTVnBU9Y.roa
File:                     GVnP93hAncO8m_cIlDkSTVnBU9Y.roa (raw, json)
Hash identifier:          /dVca0D0SZASRt1OEYvdj/yOD7WqbnkuOTyiha/tg4w=
Subject key identifier:   19:59:CF:F7:78:40:9D:C3:BC:9B:F7:08:94:39:12:4D:59:C1:53:D6
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       056D
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/GVnP93hAncO8m_cIlDkSTVnBU9Y.roa
Signing time:             Fri 13 Sep 2024 09:06:22 +0000
ROA not before:           Fri 13 Sep 2024 09:06:22 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     945
IP address blocks:        103.156.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Oct 2024 23:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389 (0x56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Sep 13 09:06:22 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=1959CFF778409DC3BC9BF7089439124D59C153D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:fe:2a:13:bb:dd:8c:85:ed:5c:2b:23:2c:
                    e1:a5:81:d1:ea:55:7b:28:42:46:5c:b8:3a:e4:6f:
                    46:41:d8:3a:ea:83:86:7c:2a:a5:03:c8:03:c0:93:
                    32:60:cd:ea:75:c8:4c:26:8a:21:34:db:60:a1:dc:
                    cc:eb:30:de:bf:dd:2a:83:da:73:39:fa:10:a6:e8:
                    cd:0c:29:60:f3:ce:6b:98:2a:9e:43:39:8c:98:c7:
                    00:00:22:82:12:17:8e:0b:13:ee:36:f9:a2:c6:64:
                    07:89:b8:1d:c0:79:89:ab:4d:d4:bf:1b:38:1e:5e:
                    c8:ec:51:e9:02:53:14:76:54:ed:f5:3f:f7:e2:db:
                    63:44:ee:cd:05:1d:ca:4a:38:ec:48:26:27:70:d9:
                    50:74:b2:41:99:90:24:0a:f2:ce:ff:98:62:3d:9f:
                    b7:29:a5:e9:a2:dd:52:47:06:d3:8f:ee:71:6c:23:
                    9e:eb:49:85:a6:bd:ac:55:f9:67:a4:de:0c:e1:ca:
                    2c:c2:68:79:48:c6:0c:5d:06:97:e8:47:2d:7e:24:
                    c6:a3:db:f5:f5:52:82:75:25:1d:d6:23:05:22:05:
                    9e:30:fe:d8:3d:1e:0a:a1:d9:dc:70:7f:e0:51:cc:
                    a8:51:0f:cc:dc:4b:5a:f2:09:a6:db:84:5d:be:af:
                    db:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:59:CF:F7:78:40:9D:C3:BC:9B:F7:08:94:39:12:4D:59:C1:53:D6
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/GVnP93hAncO8m_cIlDkSTVnBU9Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:ee:49:46:14:f6:89:d2:fd:31:03:42:b1:e6:52:10:aa:b0:
         91:33:39:08:c9:c8:2a:4b:fa:3f:6a:a7:3f:19:7f:f9:06:ef:
         b6:77:fe:e9:ec:d6:5b:a7:20:37:f1:ed:db:be:ff:3a:fa:b5:
         4f:26:53:9d:be:11:6f:74:2e:86:be:65:41:cb:d3:53:f6:71:
         5a:da:f8:bd:f1:ec:7b:96:08:c0:48:99:b5:06:5a:f0:24:a7:
         c4:ed:c9:f5:2a:b0:9d:e1:1c:c1:01:e0:71:7d:bb:34:c0:2c:
         76:4d:f6:df:74:4e:3d:89:ed:23:35:2b:48:37:60:21:c4:59:
         b6:7e:6a:51:b2:fa:66:36:ff:05:26:1f:63:6d:58:e4:48:2e:
         07:0f:60:a6:03:f1:3e:80:3e:68:87:22:6c:2d:10:8b:7c:78:
         ad:9f:0d:b8:ba:b2:51:42:90:e7:d7:af:d1:dd:46:11:bd:83:
         95:b0:7d:77:3f:40:bd:2d:fa:04:61:63:ef:6f:fd:a2:df:e2:
         53:c8:68:a5:6f:76:32:3d:22:30:49:fe:7c:55:5b:6f:ca:82:
         9a:64:f3:b3:a4:50:09:7e:24:0d:37:34:82:a2:f0:e0:df:6f:
         fe:6a:08:8f:a4:37:a2:01:ff:38:a7:84:95:1a:de:94:82:8b:
         45:44:2d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:06:25 2024 by rpki-client on console-fra.rpki-client.org