Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/JKW0KCrjDXxfG6-vHwvTqhThn0Q.roa
File:                     JKW0KCrjDXxfG6-vHwvTqhThn0Q.roa (raw, json)
Hash identifier:          wtv67iAjWcS5Fib6QFNMPx3e/gGNJQ1slxP3U2XRVgg=
Subject key identifier:   24:A5:B4:28:2A:E3:0D:7C:5F:1B:AF:AF:1F:0B:D3:AA:14:E1:9F:44
Certificate issuer:       /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial:       0BEB
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/JKW0KCrjDXxfG6-vHwvTqhThn0Q.roa
Signing time:             Mon 26 Aug 2024 05:10:13 +0000
ROA not before:           Mon 26 Aug 2024 05:10:13 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     135293
IP address blocks:        103.104.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3051 (0xbeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
        Validity
            Not Before: Aug 26 05:10:13 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=24A5B4282AE30D7C5F1BAFAF1F0BD3AA14E19F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:73:0a:4a:f3:fd:65:e3:51:2d:d3:3e:59:2d:
                    b9:8b:6a:97:df:07:3c:3d:e8:aa:c9:4a:f3:ba:e1:
                    a6:e0:83:20:4e:c0:89:7d:00:69:d6:8c:fa:cb:43:
                    aa:86:df:f0:89:a2:59:28:38:83:21:44:f5:0f:1d:
                    58:21:6d:49:37:e6:f9:38:0b:01:c7:b3:79:35:f8:
                    22:9c:2c:43:24:72:b5:dc:08:f2:42:3c:4f:81:e4:
                    e0:6c:be:13:3d:b8:f6:f1:20:e6:5e:f1:38:0a:67:
                    4a:06:0a:1f:9c:db:00:da:4e:05:29:3a:6e:f9:0f:
                    43:65:72:90:ac:23:ca:ae:39:69:71:4d:69:87:da:
                    27:d4:20:ff:e4:eb:42:a7:de:19:fd:fc:18:9f:14:
                    05:70:3d:9d:cb:ee:9e:b8:8c:7c:a6:eb:34:96:69:
                    e4:9b:3e:92:0b:84:d7:12:6a:e6:11:06:d2:c7:fd:
                    29:7e:6f:cc:7b:80:4e:9d:e1:12:f9:52:7d:26:5a:
                    98:95:47:0c:e9:4e:95:db:ef:97:7f:01:9e:c3:78:
                    fa:6e:53:d2:05:60:3b:99:15:db:fa:9c:a2:ae:32:
                    25:ed:c6:8a:9d:57:b7:91:14:54:12:86:d7:aa:87:
                    a2:b6:97:fd:57:03:16:1f:5a:93:70:ba:ea:ad:a7:
                    a6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A5:B4:28:2A:E3:0D:7C:5F:1B:AF:AF:1F:0B:D3:AA:14:E1:9F:44
            X509v3 Authority Key Identifier:
                keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/JKW0KCrjDXxfG6-vHwvTqhThn0Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f3:7c:2c:40:42:bb:0a:00:81:df:4e:78:95:d2:33:95:c4:
         35:f5:d9:fd:95:bd:22:67:66:97:42:6e:59:68:fd:65:12:c2:
         98:06:12:17:26:1a:7d:3b:6d:1b:cb:2b:02:e4:53:d7:5c:53:
         25:39:da:7c:1b:e8:53:0c:52:f6:54:53:bb:c8:e6:14:32:f0:
         55:cc:a1:5b:25:40:08:83:41:d3:c1:59:be:b2:d3:24:7c:1f:
         ba:d7:47:44:8e:96:f6:f4:15:dc:e8:c6:34:d0:1b:3a:37:56:
         78:18:60:9f:b0:5e:63:10:f6:b6:2d:89:f7:2c:c5:9b:f2:ad:
         5b:2e:2f:f0:77:f2:67:22:0f:09:f2:57:70:e9:09:4f:25:53:
         95:3e:71:72:7a:b2:51:1f:a8:4f:27:35:c4:c3:41:47:bc:91:
         77:ba:5b:c2:d5:0f:65:2c:e9:e1:bc:c5:54:6d:b0:a4:68:51:
         3a:21:ef:fc:0f:50:7e:ed:e8:5e:78:d3:eb:a5:7d:87:05:3e:
         dc:ff:ab:a1:6e:ca:00:5c:9e:36:52:83:ec:5d:08:c7:7f:fe:
         0a:62:c6:af:7c:b2:eb:7a:42:f5:b2:fa:f5:50:6c:ec:30:29:
         09:67:7b:57:ea:13:dd:b9:ea:df:bb:26:c6:d7:84:a4:f0:d4:
         4b:fd:db:b2
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICC+swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzk1
QTkxRUQ0MEFBQTE1QjlBQkNBMjFDMjA1QjM2RUM3NDk0OUZDODAeFw0yNDA4MjYw
NTEwMTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI0QTVCNDI4MkFFMzBE
N0M1RjFCQUZBRjFGMEJEM0FBMTRFMTlGNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrcwpK8/1l41Et0z5ZLbmLapffBzw96KrJSvO64abggyBOwIl9
AGnWjPrLQ6qG3/CJolkoOIMhRPUPHVghbUk35vk4CwHHs3k1+CKcLEMkcrXcCPJC
PE+B5OBsvhM9uPbxIOZe8TgKZ0oGCh+c2wDaTgUpOm75D0NlcpCsI8quOWlxTWmH
2ifUIP/k60Kn3hn9/BifFAVwPZ3L7p64jHym6zSWaeSbPpILhNcSauYRBtLH/Sl+
b8x7gE6d4RL5Un0mWpiVRwzpTpXb75d/AZ7DePpuU9IFYDuZFdv6nKKuMiXtxoqd
V7eRFFQShteqh6K2l/1XAxYfWpNwuuqtp6bxAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUJKW0KCrjDXxfG6+vHwvTqhThn0QwHwYDVR0jBBgwFoAUeVqR7UCqoVuavKIc
IFs27HSUn8gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0VOVFJP
SUQvZVZxUjdVQ3FvVnVhdktJY0lGczI3SFNVbjhnLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9lVnFSN1VDcW9WdWF2S0ljSUZzMjdIU1VuOGcuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DRU5UUk9JRC9KS1cwS0NyakRYeGZH
Ni12SHd2VHFoVGhuMFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ2iVMA0GCSqGSIb3DQEBCwUAA4IBAQAa83wsQEK7CgCB3054ldIzlcQ19dn9
lb0iZ2aXQm5ZaP1lEsKYBhIXJhp9O20byysC5FPXXFMlOdp8G+hTDFL2VFO7yOYU
MvBVzKFbJUAIg0HTwVm+stMkfB+610dEjpb29BXc6MY00Bs6N1Z4GGCfsF5jEPa2
LYn3LMWb8q1bLi/wd/JnIg8J8ldw6QlPJVOVPnFyerJRH6hPJzXEw0FHvJF3ulvC
1Q9lLOnhvMVUbbCkaFE6Ie/8D1B+7eheeNPrpX2HBT7c/6uhbsoAXJ42UoPsXQjH
f/4KYsavfLLrekL1svr1UGzsMCkJZ3tX6hPduerfuybG14Sk8NRL/duy
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:24 2024 by rpki-client on console-ams.rpki-client.org