Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/wTG7FqDPN1nmP1wE4o58qL8G_9Y.roa
File:                     wTG7FqDPN1nmP1wE4o58qL8G_9Y.roa (raw, json)
Hash identifier:          HjqTkKHAMSXJDcQHwXdndc4OnDLcp4fKsCONwf3g3Mw=
Subject key identifier:   C1:31:BB:16:A0:CF:37:59:E6:3F:5C:04:E2:8E:7C:A8:BF:06:FF:D6
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       054D
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/wTG7FqDPN1nmP1wE4o58qL8G_9Y.roa
Signing time:             Mon 26 Aug 2024 05:09:27 +0000
ROA not before:           Mon 26 Aug 2024 05:09:27 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     56850
IP address blocks:        103.156.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357 (0x54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Aug 26 05:09:27 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C131BB16A0CF3759E63F5C04E28E7CA8BF06FFD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:27:8b:58:bf:a7:49:8b:06:20:2a:a4:96:e6:
                    17:74:a1:04:35:a3:7d:ef:d2:4d:a0:53:0a:b6:3f:
                    64:b7:ac:c0:af:7f:03:1b:ee:60:64:31:c5:db:e6:
                    2b:aa:ef:96:2b:9c:04:45:ed:9d:90:8d:0e:44:7f:
                    8b:c8:32:ad:e2:36:99:b5:37:ba:ca:7e:2e:d1:11:
                    e8:31:8d:58:c6:9a:55:99:42:86:f6:49:5c:68:c3:
                    ed:1b:14:da:51:c6:ec:63:fb:73:07:8b:97:b9:73:
                    99:be:7a:78:ab:40:ff:d0:20:14:59:d3:5e:df:b6:
                    6a:7a:03:d8:d6:60:2b:03:27:d2:a6:37:ee:98:0c:
                    0c:3a:62:8d:87:c0:e1:e8:fc:5f:81:db:4a:ac:0c:
                    ee:36:76:c0:86:02:bc:60:15:49:86:63:be:4a:c3:
                    b9:09:e7:80:ba:cf:b5:99:db:4f:57:2a:89:7f:f9:
                    d2:2f:46:55:5e:87:2e:8b:46:8f:32:48:78:d6:3b:
                    c0:81:4f:4f:ff:69:a0:1b:ea:38:db:96:30:35:12:
                    00:7e:a7:5b:35:f7:0b:2b:a4:a0:7b:2f:41:f8:71:
                    65:06:37:75:f3:f8:42:fd:47:63:84:e1:d5:65:12:
                    06:fd:6d:94:80:f8:32:98:e8:1f:ed:6e:43:ba:7d:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:31:BB:16:A0:CF:37:59:E6:3F:5C:04:E2:8E:7C:A8:BF:06:FF:D6
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/wTG7FqDPN1nmP1wE4o58qL8G_9Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:9b:74:61:9e:9d:02:81:f2:26:0d:72:2b:4a:db:a6:a2:6f:
         56:5f:ab:f1:fb:79:22:22:41:45:5d:9c:d1:92:8f:31:8c:fd:
         b3:3d:cc:c0:5e:82:c9:1f:a7:7a:ce:58:71:ab:38:76:1a:f7:
         fc:a6:8c:61:79:82:ab:07:91:01:51:a1:7a:db:b5:80:b2:74:
         2e:05:89:cb:40:36:65:5e:d2:7d:28:2c:07:bd:63:8e:09:2f:
         40:dd:a0:59:aa:5f:71:24:13:e4:ef:e5:f7:a4:87:ff:36:f6:
         ea:0a:b9:14:bb:88:3d:25:7a:91:ff:c6:3a:f5:39:94:c6:a7:
         7f:80:73:03:27:b7:3d:da:e7:90:c1:09:ae:6b:2d:5e:e5:fb:
         ac:4d:4a:bf:98:74:fb:14:40:5c:03:5f:c3:b1:ac:13:54:b1:
         aa:46:bf:66:8d:57:8c:4f:36:57:22:0f:fd:53:0b:f0:72:c3:
         d6:ac:58:c8:f9:66:e7:46:5e:b2:d5:24:41:5e:20:22:e1:3c:
         66:ae:35:a2:66:87:20:2d:57:ba:bb:a0:36:d9:c8:34:13:a4:
         81:63:ce:6f:e8:8b:b4:7a:01:a9:9f:1d:87:34:88:e4:7e:ba:
         e6:b8:31:4f:5a:1b:cb:f0:5b:b7:7c:6c:38:66:c1:8c:4e:93:
         78:27:17:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:29 2024 by rpki-client on console-ams.rpki-client.org