Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/s60ob46yiFgVkIzPlcV0Arx4qyk.roa
File:                     s60ob46yiFgVkIzPlcV0Arx4qyk.roa (raw, json)
Hash identifier:          CboJN/mBicn3F05VcAxMy8FH/nLh3eUYfSPhqGjgyJw=
Subject key identifier:   B3:AD:28:6F:8E:B2:88:58:15:90:8C:CF:95:C5:74:02:BC:78:AB:29
Certificate issuer:       /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial:       0AF4
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/s60ob46yiFgVkIzPlcV0Arx4qyk.roa
Signing time:             Fri 01 Sep 2023 08:26:12 +0000
ROA not before:           Fri 01 Sep 2023 08:26:12 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     135293
IP address blocks:        103.104.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 23:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2804 (0xaf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
        Validity
            Not Before: Sep  1 08:26:12 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=B3AD286F8EB2885815908CCF95C57402BC78AB29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:45:74:7b:4a:15:e3:6c:30:2b:bc:38:cf:
                    d4:d1:b0:ee:da:66:ff:34:b5:8b:de:9f:8d:80:26:
                    82:3c:5b:8b:aa:a9:eb:27:a3:07:14:3c:44:9a:3b:
                    d9:c5:c6:cd:ec:c2:f4:21:a7:bc:64:dc:9a:82:ab:
                    bf:c2:d3:28:c6:02:e8:fc:b8:d7:15:42:c2:c4:d4:
                    05:ca:8d:6c:0f:d0:d3:96:bc:98:36:f3:e9:a5:f8:
                    8a:7b:d4:f5:d7:5b:74:52:50:05:10:7d:32:85:bf:
                    98:d4:c2:14:87:f5:fe:f5:26:f1:93:54:29:1c:83:
                    e1:44:10:d1:9e:e1:0f:cc:46:00:6e:2c:a5:02:c4:
                    50:23:35:20:37:3f:4d:25:2f:24:14:5b:fe:b8:48:
                    cd:24:4f:97:30:60:be:b2:f8:92:2b:3c:dd:13:28:
                    b7:dd:a1:2a:8e:4a:62:c8:a0:79:56:5d:79:e9:b0:
                    91:c4:ea:ec:60:12:d1:fb:ca:23:0e:d3:88:a5:83:
                    2f:39:ab:6e:0f:d3:35:11:ca:bd:11:b4:ed:b1:dc:
                    7d:98:14:a3:66:8f:28:a3:0f:25:06:b6:98:8e:a2:
                    29:39:b0:e9:06:3b:ee:c7:33:c0:61:92:42:7f:3b:
                    b2:88:64:82:f9:92:e5:72:96:9e:f9:01:b1:5a:e6:
                    ee:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AD:28:6F:8E:B2:88:58:15:90:8C:CF:95:C5:74:02:BC:78:AB:29
            X509v3 Authority Key Identifier:
                keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/s60ob46yiFgVkIzPlcV0Arx4qyk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:14:7c:ce:bd:67:d2:d9:6c:fa:a1:01:4b:3f:d8:ad:c2:40:
         81:9b:bf:98:6e:50:5d:99:0c:ad:4f:c1:41:a3:2e:17:7b:bf:
         07:a8:55:48:a6:ae:6b:0f:e6:f3:1e:71:c2:8e:1b:05:9b:ad:
         e9:5e:db:e8:a0:27:68:2f:bd:e2:ab:97:99:30:5d:31:e2:d8:
         ec:29:d8:23:cd:61:76:87:44:81:9e:34:c7:22:47:bf:83:4e:
         a5:35:e4:76:83:9b:46:7b:1c:33:4f:52:03:5d:28:b2:75:25:
         77:ae:98:3b:51:16:20:27:fc:1b:bb:85:49:13:9f:41:ed:6f:
         a7:49:a0:a1:e9:c1:b6:0b:62:b7:43:2b:5c:d9:1f:17:0e:8f:
         e4:1e:e0:c8:8b:5f:db:19:7f:a2:93:0e:ff:2c:36:77:a8:e1:
         fb:9b:22:81:f3:7f:b2:e4:d0:34:15:c7:3e:ce:e9:27:a4:de:
         22:9f:42:3a:df:2f:97:25:e7:d4:91:ae:57:ae:68:e6:14:dc:
         6b:2b:73:95:f0:c9:e4:b3:be:60:42:fe:72:f7:71:fd:72:41:
         5f:a1:72:e9:93:3f:07:48:54:a0:93:df:d8:c7:5b:c3:b2:38:
         94:55:ff:4b:23:5d:23:c7:3d:0f:b5:b5:b5:94:05:aa:7f:a2:
         87:63:a6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:32:35 2024 by rpki-client on console-fra.rpki-client.org