Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/akbrX6qS0BL9HYycYwZhnIizpiM.roa
File:                     akbrX6qS0BL9HYycYwZhnIizpiM.roa (raw, json)
Hash identifier:          HYFokAiimov8oJu8nEqq2ghPBHtOKiezbcC0x5KaHuM=
Subject key identifier:   6A:46:EB:5F:AA:92:D0:12:FD:1D:8C:9C:63:06:61:9C:88:B3:A6:23
Certificate issuer:       /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial:       0EC5
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/akbrX6qS0BL9HYycYwZhnIizpiM.roa
Signing time:             Mon 10 Feb 2025 14:02:45 +0000
ROA not before:           Mon 10 Feb 2025 14:02:45 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131618
IP address blocks:        103.135.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 22:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3781 (0xec5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
        Validity
            Not Before: Feb 10 14:02:45 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6A46EB5FAA92D012FD1D8C9C6306619C88B3A623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:95:94:9a:79:72:5c:7c:8f:b0:f7:d7:5e:
                    01:94:45:67:16:17:e4:68:d1:21:1b:82:a5:ec:39:
                    06:e3:af:6a:46:54:80:4b:56:75:76:5a:4d:49:30:
                    ff:07:bb:08:31:62:bd:6b:61:7a:50:e8:75:34:0c:
                    03:a8:98:c7:85:0f:b3:6d:aa:f8:4f:ea:ce:08:87:
                    7a:7a:02:a8:1b:d5:49:47:8c:6a:38:c6:99:93:06:
                    a5:57:8d:17:73:db:d7:7e:bf:4f:9f:ec:04:96:b1:
                    da:1b:90:49:f6:6f:83:47:58:9c:95:d9:2d:14:6a:
                    73:c8:b2:5a:cc:b4:ed:cc:80:8c:7d:43:51:cc:f5:
                    34:69:b1:b8:c7:28:00:ef:50:f9:20:ba:8a:74:81:
                    3e:64:4b:f1:ea:18:e9:5e:68:87:58:7b:62:9e:c8:
                    b7:07:45:de:b2:44:e0:b0:fa:f0:e2:62:d2:52:70:
                    0c:8f:60:a2:63:28:6d:7a:a1:97:7e:9d:df:2a:e9:
                    49:5f:30:af:ed:f3:77:15:43:93:46:e4:b0:dd:67:
                    83:ec:6c:d8:ee:8a:9d:66:26:cf:0f:75:ba:60:c6:
                    ee:ef:c3:ab:1f:49:3a:06:ca:65:c1:d9:87:b9:f1:
                    4a:2d:f1:0c:d6:c2:e3:96:54:19:6e:45:c3:cd:6a:
                    18:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:46:EB:5F:AA:92:D0:12:FD:1D:8C:9C:63:06:61:9C:88:B3:A6:23
            X509v3 Authority Key Identifier:
                keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/akbrX6qS0BL9HYycYwZhnIizpiM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:4c:5b:1e:22:48:3a:14:f3:3f:e0:d6:09:b0:d2:bc:58:
         65:f7:cc:77:f8:2d:ff:0a:9a:e9:9e:b7:0d:3d:58:fd:6f:89:
         9a:0b:05:b5:36:a0:1a:d0:ed:6d:3a:56:43:f1:ca:08:b3:07:
         2d:88:1c:bb:d5:0c:e1:20:b3:cb:90:e7:34:d1:6a:2a:9e:d4:
         b9:47:e0:da:e3:77:4f:81:ae:9c:b7:99:2b:10:12:d6:ae:41:
         09:0e:15:a4:99:83:4a:dc:ed:39:d6:b0:5e:e7:55:db:df:52:
         95:7d:de:b2:23:e2:08:91:7d:fd:9d:fb:0e:7c:8c:18:57:56:
         d8:07:f6:99:f3:de:70:dc:53:66:7f:31:87:bc:61:05:16:0f:
         3c:44:a7:29:96:2e:43:7d:07:d2:99:bd:c3:5e:66:29:15:b7:
         d1:3d:5d:57:4d:22:33:ff:58:83:d6:f2:7b:8e:a6:b6:c3:63:
         fa:1e:81:b4:c9:6e:6c:c3:f4:0f:43:e4:43:72:ea:27:d2:68:
         3d:fe:12:1e:fe:10:83:df:04:5f:cf:e3:95:22:6d:71:db:af:
         51:02:c0:5e:e3:3c:a5:59:eb:d7:24:1a:e4:57:f7:0e:95:02:
         f1:34:81:f0:e9:9f:0e:10:7d:a0:16:ed:fc:77:6b:94:92:69:
         70:11:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:58 2025 by rpki-client