Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/O8ptedJUeHbfiFe72qNyKsyeczk.roa
File:                     O8ptedJUeHbfiFe72qNyKsyeczk.roa (raw, json)
Hash identifier:          5c3nwJjxosIxdZbeLs2HUaEa58CnOtgBKdivQd+CbH4=
Subject key identifier:   3B:CA:6D:79:D2:54:78:76:DF:88:57:BB:DA:A3:72:2A:CC:9E:73:39
Certificate issuer:       /CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Certificate serial:       01B6
Authority key identifier: A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/O8ptedJUeHbfiFe72qNyKsyeczk.roa
Signing time:             Mon 26 Aug 2024 05:09:57 +0000
ROA not before:           Mon 26 Aug 2024 05:09:57 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     134823
IP address blocks:        103.51.90.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
        Validity
            Not Before: Aug 26 05:09:57 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=3BCA6D79D2547876DF8857BBDAA3722ACC9E7339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:b7:0f:db:25:f8:72:55:f8:7d:46:56:15:
                    44:fb:94:01:be:6f:e1:6f:87:08:c9:c5:f6:d3:df:
                    38:03:8f:20:31:59:5f:f5:01:85:f6:a7:ee:ce:ab:
                    cf:13:f5:61:2d:5d:b5:2d:a7:f9:5f:26:02:7c:1c:
                    49:e1:65:31:2a:b2:6b:96:c6:98:e7:b9:9d:3e:ea:
                    44:58:4d:06:65:43:68:64:58:80:77:d8:d9:57:ef:
                    dc:76:a7:36:cd:4a:a3:f8:87:a8:7e:2f:c1:18:e4:
                    f1:c6:9b:58:33:78:72:e4:2e:d1:92:ab:cc:0d:af:
                    19:26:21:02:da:17:fc:5e:79:4d:85:32:51:02:11:
                    78:45:ee:d1:c9:60:d1:a8:83:e2:20:67:f4:7b:71:
                    58:f6:d9:01:60:ae:53:58:fe:ba:cb:15:6d:af:3b:
                    4e:8f:a3:82:8d:f4:4f:1a:da:c1:43:c3:f7:ac:6c:
                    5e:a6:b6:8d:79:c0:81:d7:77:75:87:67:6d:2f:e5:
                    e8:96:42:42:12:83:c2:d2:2f:9c:57:35:ad:d7:24:
                    e7:7f:91:19:c6:67:84:c5:55:29:cc:c5:a5:ca:b2:
                    8e:66:21:2e:5e:a4:36:75:09:f5:22:a1:68:91:60:
                    ff:0e:db:d9:69:fd:54:eb:c9:fc:80:b2:41:08:b9:
                    c5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CA:6D:79:D2:54:78:76:DF:88:57:BB:DA:A3:72:2A:CC:9E:73:39
            X509v3 Authority Key Identifier:
                keyid:A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/O8ptedJUeHbfiFe72qNyKsyeczk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:91:23:e8:35:0d:99:df:a3:4b:73:f3:30:07:2e:32:c3:f9:
         19:22:81:28:2f:9c:c1:16:e5:37:52:53:01:96:b9:9f:fd:1a:
         46:af:66:52:ca:15:45:0a:22:89:3a:d5:b1:49:6d:6e:40:e9:
         e5:9c:af:42:1e:74:3c:dd:cd:14:20:44:18:ee:89:34:30:47:
         2b:6d:e4:6a:cb:a4:f7:7f:a4:52:a0:9c:62:81:c2:c4:b6:af:
         8a:0d:df:73:5c:ac:f7:f5:57:79:3d:3a:ac:27:47:75:8b:a7:
         58:93:db:68:4b:16:c4:ba:a8:d2:a5:32:c9:95:d2:10:7b:e2:
         41:f0:b0:5b:93:a6:19:c1:6f:8f:3f:ba:7e:83:6c:9c:89:80:
         95:ca:07:83:5c:69:3a:78:a2:7d:c3:c9:79:78:8a:da:11:59:
         10:e9:4a:fc:fd:99:df:b5:cb:4f:7a:d4:1d:e1:f8:74:ac:00:
         26:23:1f:ff:fe:d1:61:f3:87:0f:d9:88:d9:be:75:c1:21:8f:
         ae:3f:6f:a8:c9:0c:fa:b8:6f:f3:14:48:23:e7:a8:34:38:a9:
         dc:92:d2:1f:96:f5:27:54:f2:27:58:33:0a:c7:0b:8e:cc:ac:
         f5:a2:6a:c3:74:27:db:d5:d0:8d:29:d0:ba:c0:2f:6a:46:62:
         11:61:66:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:24 2024 by rpki-client on console-ams.rpki-client.org