Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/AdEKAudTaXpO8J7FrB6ixGwo-zk.roa
File:                     AdEKAudTaXpO8J7FrB6ixGwo-zk.roa (raw, json)
Hash identifier:          mMFGTzkrHPe1sY/dZd7QeOysKT/deT9OBNDjhsFKTF8=
Subject key identifier:   01:D1:0A:02:E7:53:69:7A:4E:F0:9E:C5:AC:1E:A2:C4:6C:28:FB:39
Certificate issuer:       /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial:       0DA9
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/AdEKAudTaXpO8J7FrB6ixGwo-zk.roa
Signing time:             Mon 26 Aug 2024 05:10:18 +0000
ROA not before:           Mon 26 Aug 2024 05:10:18 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18429
IP address blocks:        27.147.24.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3497 (0xda9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
        Validity
            Not Before: Aug 26 05:10:18 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=01D10A02E753697A4EF09EC5AC1EA2C46C28FB39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6c:3a:e8:99:f7:15:b4:ee:8f:84:7f:d4:a4:
                    52:55:47:08:f1:27:7c:b8:7a:7f:11:b5:27:22:47:
                    3b:d3:d3:44:cc:b3:c4:21:e2:6b:6c:e9:54:08:4a:
                    34:03:35:2f:26:bf:23:3c:6d:ac:ce:cb:6a:0b:5e:
                    74:92:c1:73:6b:73:7e:62:c8:7d:96:86:75:c1:b6:
                    aa:c2:d1:f6:5d:ca:6d:36:42:37:7e:0b:f3:4c:ea:
                    1f:48:c0:84:42:ee:fa:d9:9a:7a:b0:ff:f3:74:63:
                    70:36:74:da:c8:1c:33:aa:03:bd:a3:32:05:a9:04:
                    bb:4c:b1:23:f9:04:9c:e9:47:1d:91:f0:2a:e1:76:
                    69:75:2f:5b:55:9d:9f:4d:2f:cf:30:ef:91:58:c1:
                    72:38:5e:f7:8b:2c:88:32:2c:ce:e0:35:5e:7d:51:
                    c6:62:75:d2:be:59:f3:ec:27:98:46:70:50:75:8e:
                    06:93:64:db:c9:50:92:b0:4a:be:56:b6:1e:0f:8a:
                    85:c5:31:bb:0b:25:6b:18:93:6f:3c:2f:1f:5a:dd:
                    b2:2b:db:b4:97:47:24:83:0f:ca:92:61:18:9d:7e:
                    2c:3d:38:59:68:bf:41:e3:dd:4a:6e:60:06:12:a0:
                    e4:08:ef:09:fc:0b:30:f5:57:40:69:1e:ff:51:41:
                    d3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D1:0A:02:E7:53:69:7A:4E:F0:9E:C5:AC:1E:A2:C4:6C:28:FB:39
            X509v3 Authority Key Identifier:
                keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/AdEKAudTaXpO8J7FrB6ixGwo-zk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.147.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:49:1d:9b:c6:74:dc:c3:2d:39:da:ff:27:50:f5:6e:3d:ff:
         b0:3e:9b:06:50:f0:14:a9:18:71:3d:5f:20:8b:53:01:92:89:
         d3:9d:21:df:45:06:53:96:88:fc:10:7d:f5:99:f2:00:da:81:
         25:5b:1f:53:13:1e:7d:55:e0:d2:15:ba:a3:e6:00:a1:0c:f0:
         95:8a:57:84:5d:f3:c0:eb:fa:56:be:55:e8:d1:3c:00:c2:c5:
         bf:28:e1:b2:63:26:07:38:3a:bb:4c:2d:5e:87:60:c8:e0:02:
         31:f0:a4:a9:55:70:ac:04:2e:d0:12:ba:77:bf:f0:aa:67:8c:
         e9:c2:89:a3:3b:08:13:95:45:70:c3:f5:5d:d1:01:e8:7f:18:
         1a:99:71:b0:20:2d:6a:36:84:7c:30:66:0b:ec:ca:78:3e:a6:
         7a:8b:8d:75:17:5f:c7:9a:3e:1b:3d:8a:6c:c9:be:3b:e0:bf:
         fe:0f:37:dc:de:9b:aa:36:f6:31:b7:0b:dc:41:3c:cb:c9:2f:
         c0:6e:37:47:5f:aa:de:34:bb:d0:2d:10:03:b5:b6:52:53:08:
         70:4a:eb:b6:2b:f3:c6:c1:23:ef:f5:f0:d0:87:42:3e:84:5d:
         3b:03:b5:38:4b:f7:e7:08:25:84:a2:03:07:5c:0b:a6:d1:02:
         e5:91:90:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:49 2024 by rpki-client on console-fra.rpki-client.org