Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/IL00J-ivuRaGzlJpWy1Bf-YyRQU.roa
File:                     IL00J-ivuRaGzlJpWy1Bf-YyRQU.roa (raw, json)
Hash identifier:          dTo6ZI0P2p84fUunBHaZ+OdNTrPxelZ2GqS5lFFhw+4=
Subject key identifier:   20:BD:34:27:E8:AF:B9:16:86:CE:52:69:5B:2D:41:7F:E6:32:45:05
Certificate issuer:       /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Certificate serial:       01EB
Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/IL00J-ivuRaGzlJpWy1Bf-YyRQU.roa
Signing time:             Sat 09 Nov 2024 02:32:09 +0000
ROA not before:           Sat 09 Nov 2024 02:32:09 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38855
IP address blocks:        160.30.78.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 12:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
        Validity
            Not Before: Nov  9 02:32:09 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=20BD3427E8AFB91686CE52695B2D417FE6324505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:76:32:16:3b:6c:09:5a:1c:63:0c:bd:48:
                    23:e7:be:e2:da:8d:ec:45:0b:d5:72:73:0f:8f:da:
                    7e:d8:56:9b:ef:5a:f6:15:6e:59:a3:57:5c:47:24:
                    47:da:78:c6:d1:f4:d8:ee:b6:49:0f:f8:21:17:76:
                    2f:e2:8e:c2:a9:5a:3c:47:43:cb:c1:53:52:f1:3d:
                    de:62:fe:08:4d:8c:5b:ea:0c:32:a9:72:62:d4:d5:
                    2c:e2:52:3f:63:a2:2f:31:87:67:7e:61:ae:02:c6:
                    79:8b:5a:1a:ae:d6:df:15:a0:9b:fa:e6:99:b2:2d:
                    7b:e2:3c:75:7b:0b:ac:d0:6e:f8:7b:af:f8:28:c0:
                    3a:2b:e5:e3:b9:12:29:73:fc:ff:4f:ec:a2:87:c5:
                    d0:0e:fb:88:51:30:40:38:c8:47:e4:0d:ec:75:b0:
                    ab:db:63:f2:2e:fa:9a:7d:57:69:15:40:a6:1f:50:
                    6f:c9:8f:82:cc:c1:f0:06:49:63:4a:66:2f:9c:a8:
                    79:8f:4b:cd:c0:51:b7:2e:f6:01:24:86:da:a3:1f:
                    d5:19:c3:68:da:99:b2:8f:9e:1e:af:c2:12:e8:dc:
                    0f:a3:d3:e9:13:5d:00:4c:24:41:26:95:e1:f9:b5:
                    fd:60:2a:e4:a6:83:2d:9a:a4:bf:e8:f6:10:57:c9:
                    aa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BD:34:27:E8:AF:B9:16:86:CE:52:69:5B:2D:41:7F:E6:32:45:05
            X509v3 Authority Key Identifier:
                keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/IL00J-ivuRaGzlJpWy1Bf-YyRQU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:1b:02:26:55:6d:3c:27:ff:00:7e:a8:2f:a2:b7:ce:bc:b7:
         9c:b0:85:b7:33:61:d0:b5:b8:a9:fa:f4:d9:a5:0e:cb:2e:6f:
         69:8f:c2:37:04:ec:ac:f9:27:db:7f:fe:c6:03:0b:61:e9:45:
         0c:31:2a:61:9b:1c:28:6e:4a:f2:ad:5b:78:48:7b:9d:f8:c4:
         53:47:42:7e:41:c1:3e:ec:3c:4d:31:d0:22:9d:f8:d4:63:7a:
         b2:66:c4:c0:86:af:6f:39:64:81:e9:c6:45:bf:32:07:0b:a2:
         c5:af:5c:07:26:40:49:ab:84:bc:ce:91:77:88:62:23:7f:4f:
         41:22:3e:ba:c0:93:84:71:ed:73:a1:21:58:6c:86:33:96:94:
         eb:41:a1:bd:48:93:92:5f:cd:59:af:7e:a9:67:bb:e4:65:f5:
         24:be:6d:1b:b6:c8:7a:7a:77:e5:19:2e:28:4f:bd:8d:96:10:
         53:8c:84:44:c2:c1:c1:57:79:2b:fb:50:21:50:51:0e:5a:6c:
         4b:f7:0f:c0:96:c7:9c:5d:0b:e8:d2:b2:55:d0:2d:9f:17:a9:
         4c:ef:44:a2:9c:75:23:bf:71:16:70:b7:62:80:d8:6e:54:d1:
         62:e9:20:e2:fb:6f:a5:40:f6:15:f4:68:23:d9:a3:16:0f:28:
         0d:4b:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:48 2024 by rpki-client on console-fra.rpki-client.org