Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/0enBFbMTH3VRq6LrvPY8AGXdss4.roa
File:                     0enBFbMTH3VRq6LrvPY8AGXdss4.roa (raw, json)
Hash identifier:          /hYtAy0bzN6tPCiNtB7nLW5rmm3MYVmwMvyrN9LeqVw=
Subject key identifier:   D1:E9:C1:15:B3:13:1F:75:51:AB:A2:EB:BC:F6:3C:00:65:DD:B2:CE
Certificate issuer:       /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial:       0E50
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/0enBFbMTH3VRq6LrvPY8AGXdss4.roa
Signing time:             Mon 26 Aug 2024 05:09:39 +0000
ROA not before:           Mon 26 Aug 2024 05:09:39 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131618
IP address blocks:        103.135.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3664 (0xe50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
        Validity
            Not Before: Aug 26 05:09:39 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D1E9C115B3131F7551ABA2EBBCF63C0065DDB2CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ed:44:71:5f:4b:f4:d0:83:e9:ff:32:7c:e7:
                    83:b4:d9:a7:11:de:8b:b8:62:d8:1c:b4:f6:db:e1:
                    71:b5:35:5f:d7:e1:25:a3:1a:74:65:24:22:2a:5d:
                    11:79:13:15:67:a9:94:84:d0:fc:09:8e:6d:c5:7d:
                    6c:07:7d:90:4d:67:24:9d:e0:dc:2d:95:54:76:a8:
                    1d:13:7f:06:58:d1:46:ef:11:97:1c:c2:86:5d:f2:
                    20:8b:2c:24:2a:3d:ef:6c:5b:41:96:6c:40:3a:53:
                    d3:83:ed:3b:c5:32:1f:6b:ad:a7:32:12:e1:56:92:
                    0f:31:6c:4c:0a:d0:2a:39:92:4c:3a:78:01:dc:e8:
                    ed:65:7d:f3:d8:5c:80:94:da:ae:a7:28:9a:0e:fc:
                    72:e9:d8:2e:cc:9b:e6:34:80:12:f7:25:8f:8f:c1:
                    55:39:8c:4b:93:85:41:e8:ef:a1:55:4e:ca:a7:8f:
                    d1:54:23:5f:05:e8:b2:24:98:06:16:84:27:7a:06:
                    7b:78:34:1e:b3:3d:10:f1:89:31:10:27:49:f1:ca:
                    fa:3b:67:eb:4a:db:ae:cc:0a:2e:49:34:a0:21:e8:
                    dc:1d:96:f6:83:45:90:08:b1:cc:66:75:6e:65:75:
                    dc:95:a1:86:29:59:c6:8c:46:ca:4c:7c:46:0e:33:
                    c6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E9:C1:15:B3:13:1F:75:51:AB:A2:EB:BC:F6:3C:00:65:DD:B2:CE
            X509v3 Authority Key Identifier:
                keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/0enBFbMTH3VRq6LrvPY8AGXdss4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:26:bf:c2:a1:55:73:3d:ef:b8:c1:a3:10:cb:b3:3a:b8:e7:
         54:3b:4d:8e:91:31:3a:51:78:ff:6f:d8:52:5d:e7:06:11:3c:
         20:0b:60:78:25:32:e7:00:84:1d:29:80:d0:cd:a3:64:b4:a9:
         c9:36:48:59:e7:7d:07:17:c7:65:c8:57:5f:a8:5a:79:3f:30:
         05:a5:58:98:5c:27:7c:de:42:df:17:da:af:a6:1a:21:73:72:
         ab:b4:14:39:b2:d4:a4:7c:1f:57:7a:e9:d1:98:1c:0e:91:23:
         31:dd:6a:db:06:b4:18:a8:d7:c2:99:78:60:d0:15:49:4e:5c:
         66:b7:45:b1:40:91:9d:f8:96:7d:ba:ac:d4:a6:b1:b2:58:1a:
         e2:3a:92:bf:0c:40:bf:4e:2e:41:4c:e0:7a:dd:9b:98:2f:2d:
         20:5d:62:9d:34:75:7e:21:51:e1:6a:9c:c1:51:a3:dd:f9:73:
         52:44:97:75:a8:da:85:84:95:8f:b7:4c:cd:df:fc:17:1c:32:
         9e:07:8d:6d:d9:7e:ea:68:0d:39:8d:12:48:98:ed:23:a4:c2:
         94:40:91:5a:5e:49:9f:25:26:1f:53:36:0f:a3:ab:1b:fa:e5:
         85:b4:9e:9b:d0:39:ac:1f:b8:4f:63:b8:c3:f8:5b:eb:d4:23:
         61:86:39:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org