Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/ZbccFsShwwhu76VL-aE4QPq5jqo.roa
File:                     ZbccFsShwwhu76VL-aE4QPq5jqo.roa (raw, json)
Hash identifier:          0Vp5/6PtR2QAjWRYUCcSPNdtXVaZEbu0gZumH1mDTWw=
Subject key identifier:   65:B7:1C:16:C4:A1:C3:08:6E:EF:A5:4B:F9:A1:38:40:FA:B9:8E:AA
Certificate issuer:       /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial:       0DA1
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ZbccFsShwwhu76VL-aE4QPq5jqo.roa
Signing time:             Mon 26 Aug 2024 05:10:17 +0000
ROA not before:           Mon 26 Aug 2024 05:10:17 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18429
IP address blocks:        61.57.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3489 (0xda1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
        Validity
            Not Before: Aug 26 05:10:17 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=65B71C16C4A1C3086EEFA54BF9A13840FAB98EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:7b:c5:50:ba:3b:c1:81:45:0d:7e:90:ea:
                    bd:02:52:14:b7:46:e2:78:ad:45:c0:3a:11:76:a0:
                    ca:86:4a:4b:94:90:98:77:e2:32:e4:d3:69:20:4e:
                    4c:f4:da:92:5a:fd:db:31:8e:9e:6d:fc:f2:1d:1d:
                    7a:93:1a:64:57:0c:75:78:09:7a:16:58:ee:aa:ee:
                    1f:27:90:4e:8d:07:60:9e:17:f2:d3:9f:c6:08:0c:
                    21:d3:42:8a:15:39:55:a1:60:36:37:65:62:85:39:
                    99:31:fa:17:11:5b:c6:7d:ae:41:af:1c:fd:0f:71:
                    ea:e5:54:b6:81:bc:fd:c6:05:c5:c4:e1:b4:58:66:
                    c6:60:3b:04:16:5b:1b:d9:9c:1f:2b:fe:b9:1f:bc:
                    bf:85:7d:6b:9c:2b:c3:87:82:b9:8e:fc:d5:9d:60:
                    2a:c8:28:92:71:cc:71:ab:a3:6d:30:a6:a8:d4:84:
                    aa:55:92:c6:d5:f9:00:68:87:9c:87:a5:a8:ee:77:
                    a4:cf:5c:86:7b:5f:b6:ca:8d:90:ac:a6:a2:cb:ad:
                    8c:90:69:32:b0:c9:41:d2:42:28:ba:36:03:ff:6e:
                    ff:07:87:6d:ec:2c:39:1e:a3:ad:91:9e:87:7e:56:
                    4c:b7:0c:b5:f8:19:3c:6c:5e:ee:5d:5a:eb:e0:a7:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B7:1C:16:C4:A1:C3:08:6E:EF:A5:4B:F9:A1:38:40:FA:B9:8E:AA
            X509v3 Authority Key Identifier:
                keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ZbccFsShwwhu76VL-aE4QPq5jqo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.57.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:18:a9:aa:59:0c:e4:e5:ce:4c:7d:35:b6:24:ab:13:03:37:
         0f:f6:4d:02:1d:82:3a:b2:42:fb:4d:88:35:2d:33:c5:65:38:
         b4:21:cb:45:d3:af:00:e8:66:48:39:99:86:96:0a:f4:0b:20:
         44:21:7b:24:e9:90:9d:f6:c1:3e:07:07:63:94:fa:44:88:93:
         6d:f9:b1:43:52:aa:41:b8:09:de:8a:ed:89:85:9d:bc:5a:ae:
         da:64:94:de:b4:e8:56:d6:5c:cd:01:ce:72:1c:c6:7d:d5:f5:
         b7:0d:89:5f:62:1e:b5:19:8c:78:1c:e7:0a:a6:58:4a:ec:a4:
         50:42:43:2e:72:5b:98:6e:23:c5:03:3e:1a:65:99:d6:2e:bc:
         d6:1a:b1:a7:e6:56:42:15:e0:76:89:64:de:a5:5e:dc:4b:0a:
         90:97:44:e4:fc:d3:95:db:6c:91:e5:c2:4b:1d:ef:ae:19:61:
         49:b2:75:9b:b4:c7:ef:ec:64:d2:07:9f:70:8b:ff:97:3d:f6:
         c4:91:15:14:0d:15:da:a8:01:a9:60:9b:44:34:05:82:89:85:
         9b:3a:9c:9a:53:d8:17:50:7c:90:f4:d0:cb:c0:72:ef:08:86:
         be:11:00:7f:ee:3d:8b:fc:8f:61:17:4f:37:fc:b1:8d:f5:f1:
         37:03:00:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:49 2024 by rpki-client on console-fra.rpki-client.org