Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/BmXQhd3cgIoA7jFfRfG--miiP9w.roa
File:                     BmXQhd3cgIoA7jFfRfG--miiP9w.roa (raw, json)
Hash identifier:          TFD1hU4dp4YtYoQQnDACmoDchakgqDLckcxBiFtXVVc=
Subject key identifier:   06:65:D0:85:DD:DC:80:8A:00:EE:31:5F:45:F1:BE:FA:68:A2:3F:DC
Certificate issuer:       /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial:       0E4D
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/BmXQhd3cgIoA7jFfRfG--miiP9w.roa
Signing time:             Mon 26 Aug 2024 05:09:38 +0000
ROA not before:           Mon 26 Aug 2024 05:09:38 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131618
IP address blocks:        103.135.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3661 (0xe4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
        Validity
            Not Before: Aug 26 05:09:38 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0665D085DDDC808A00EE315F45F1BEFA68A23FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:b7:d6:41:8d:e1:fb:20:57:0a:8b:62:79:
                    e7:bc:ab:c0:49:34:93:19:4f:03:7d:2b:91:e8:e8:
                    de:17:8e:71:42:51:20:98:a9:34:2e:15:4c:7c:cd:
                    49:be:ec:54:f9:52:b4:b3:e9:63:fa:ea:f2:f7:bc:
                    56:b4:79:db:c4:70:d7:f1:0e:d4:f3:98:8d:f5:3b:
                    5a:32:a1:8d:49:e9:54:67:8b:2e:13:d0:f1:da:3c:
                    37:27:2e:e4:7e:70:87:6c:ab:a5:a0:2f:95:3a:e0:
                    e2:18:09:05:ee:6a:11:ac:98:67:e9:c0:50:2a:1b:
                    91:a3:db:f8:69:d2:3b:fb:2d:f0:06:99:f2:fe:85:
                    e4:a6:58:3d:af:94:5b:ba:ee:19:0f:2c:ef:83:fb:
                    79:95:ed:cf:17:57:de:20:18:3b:01:cc:a8:02:5d:
                    d3:cd:97:c4:89:52:85:d5:96:e6:24:67:96:d3:56:
                    11:36:50:aa:9b:b0:24:27:46:f1:1b:ca:d8:96:ca:
                    29:0d:c2:71:a7:a3:6e:6e:3b:42:07:0b:8c:ff:93:
                    cc:93:c0:6e:c7:47:c0:a6:30:87:22:dc:60:df:3d:
                    ae:6e:e9:0c:28:a2:c9:59:88:e1:91:df:c8:22:de:
                    10:7b:d2:e2:43:25:e2:5d:63:86:23:87:bb:a6:ce:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:65:D0:85:DD:DC:80:8A:00:EE:31:5F:45:F1:BE:FA:68:A2:3F:DC
            X509v3 Authority Key Identifier:
                keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/BmXQhd3cgIoA7jFfRfG--miiP9w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:da:8e:3a:48:b1:f3:a8:90:5c:7a:0b:e2:af:ae:13:30:e4:
         78:77:d1:d0:1c:54:3c:23:38:e2:e5:dc:7f:8e:71:d5:1b:88:
         d2:0d:f5:d0:ea:f9:78:32:11:1c:21:a6:5e:69:2d:d1:54:f9:
         74:9b:78:0a:9f:35:f4:95:20:0d:02:0c:a2:37:ef:32:65:73:
         e1:c7:c5:fc:97:9c:e7:02:72:29:76:3d:25:73:f8:e7:ad:63:
         ce:d2:d2:5b:a5:8f:89:76:e1:a3:05:a4:7d:c9:99:e8:e8:6f:
         fc:1b:b3:32:ec:c3:79:23:91:b0:7d:f5:de:ae:92:7e:0d:64:
         5e:4d:4e:99:ab:68:b8:3a:d8:99:16:fa:77:ee:b4:9c:15:fb:
         bb:1d:e4:b8:28:a9:ba:04:8f:99:76:39:04:69:f0:a2:8e:be:
         6e:56:a8:6c:d8:32:9f:48:70:62:ac:c0:25:d5:77:74:da:88:
         9c:45:12:d7:38:29:71:59:86:ab:d6:13:94:89:15:97:05:1b:
         5e:da:62:e1:cc:a0:ab:88:b3:74:e4:3c:66:5b:9c:08:15:2d:
         9c:32:54:cc:b0:5d:9d:68:78:0d:55:2e:77:c6:68:e8:95:56:
         57:0e:7e:e9:07:cd:ad:25:07:fc:20:4a:1d:b3:37:dd:5f:d7:
         fa:ff:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:24 2024 by rpki-client on console-ams.rpki-client.org