Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/__AYvr7AgKazPx5myY-zrtN6fr4.roa
File:                     __AYvr7AgKazPx5myY-zrtN6fr4.roa (raw, json)
Hash identifier:          QpIuPtVUl8qSgAMMTwjRBsxoFt7g4MruuWCTfjRVtyQ=
Subject key identifier:   FF:F0:18:BE:BE:C0:80:A6:B3:3F:1E:66:C9:8F:B3:AE:D3:7A:7E:BE
Certificate issuer:       /CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5
Certificate serial:       FB
Authority key identifier: 60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/__AYvr7AgKazPx5myY-zrtN6fr4.roa
Signing time:             Mon 26 Aug 2024 05:10:30 +0000
ROA not before:           Mon 26 Aug 2024 05:10:30 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131642
IP address blocks:        2401:30e0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/YBbvQfMhyapsHhPRFbW2CjApyOU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/YBbvQfMhyapsHhPRFbW2CjApyOU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5
        Validity
            Not Before: Aug 26 05:10:30 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=FFF018BEBEC080A6B33F1E66C98FB3AED37A7EBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:a7:36:0b:13:f6:f5:ff:c3:b2:83:4c:8b:
                    78:d0:f2:02:54:e8:3d:7b:49:e7:53:7a:60:00:6c:
                    4c:5e:22:54:59:14:d9:d1:9a:a5:5a:d6:e6:6f:73:
                    92:da:1d:da:d6:0b:9b:97:d4:c0:2a:2d:93:85:73:
                    73:0e:6f:3d:fd:ca:13:67:9b:c3:d3:7d:a4:aa:0c:
                    59:4e:8f:22:89:ab:f1:15:ef:46:1e:77:07:0f:d2:
                    da:8d:01:f1:bc:42:6a:4d:8f:d8:46:08:77:d8:15:
                    38:85:5c:ab:28:86:b4:82:40:59:3b:ab:5d:ee:21:
                    36:f5:f5:9c:7f:bb:ad:ad:e3:9f:a0:d9:53:96:33:
                    c2:06:3a:9f:56:ed:14:71:21:22:4a:3e:5c:06:33:
                    75:c6:8f:55:a0:9c:a2:34:f2:51:fd:98:b5:81:24:
                    8a:c5:13:2a:96:0b:86:81:5f:e1:2b:f3:2c:7c:7a:
                    4e:1c:2c:52:90:80:4d:2a:75:62:49:3f:e4:ce:11:
                    58:66:05:78:8b:b1:b2:ea:74:94:15:55:84:80:b0:
                    89:10:04:8c:a6:79:59:85:29:01:7f:f3:36:a7:8c:
                    7d:4c:ee:8f:54:2b:fb:ab:3f:55:3f:82:ae:6d:41:
                    67:d8:74:c4:f4:33:8d:8b:98:ff:e5:1c:c8:3b:bd:
                    25:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F0:18:BE:BE:C0:80:A6:B3:3F:1E:66:C9:8F:B3:AE:D3:7A:7E:BE
            X509v3 Authority Key Identifier:
                keyid:60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/YBbvQfMhyapsHhPRFbW2CjApyOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/__AYvr7AgKazPx5myY-zrtN6fr4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:30e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:6e:4f:2c:e2:47:b4:fe:57:9f:08:7d:8e:70:f6:8e:ad:94:
         e4:c7:6f:95:9b:ac:ad:7f:52:7b:9f:1a:f6:19:9d:60:d9:74:
         78:1d:ec:3b:c9:fb:5a:df:c3:83:f1:96:60:65:b5:81:10:85:
         59:72:5d:06:3f:b3:46:8f:38:bd:cb:8a:49:c9:bd:52:ba:57:
         98:fc:d1:b2:88:f3:5f:e0:03:51:0e:b4:7d:0f:a7:37:45:dd:
         6c:85:2d:a1:31:29:c8:0c:39:c4:03:96:50:55:e9:cb:10:83:
         ee:9b:52:0d:42:03:f6:5d:fa:fa:31:5e:ed:5c:ee:a0:4d:91:
         ee:e9:ba:60:62:73:a5:92:ad:a1:70:96:3d:30:a7:a9:a2:c9:
         a8:44:46:23:7a:cb:d1:b2:c3:b5:3e:e9:98:b9:c3:dd:28:07:
         c5:f6:5a:f8:a7:6a:41:f1:11:40:77:d6:1d:a6:ef:98:88:03:
         45:91:c9:ae:f8:f6:ad:36:81:56:db:0b:e1:24:5e:05:8e:43:
         67:cc:42:b8:7d:11:3d:1e:6b:6e:cb:3f:44:7e:3c:b1:5e:27:
         ef:23:6f:2f:f9:46:80:8f:7d:a5:6c:8f:88:72:2d:69:3a:a5:
         a8:4c:f5:5c:1e:10:84:bf:ba:ae:75:b5:12:ec:03:00:9d:62:
         f9:43:ad:8a
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgICAPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjAx
NkVGNDFGMzIxQzlBQTZDMUUxM0QxMTVCNUI2MEEzMDI5QzhFNTAeFw0yNDA4MjYw
NTEwMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZGRjAxOEJFQkVDMDgw
QTZCMzNGMUU2NkM5OEZCM0FFRDM3QTdFQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3Kac2CxP29f/DsoNMi3jQ8gJU6D17SedTemAAbExeIlRZFNnR
mqVa1uZvc5LaHdrWC5uX1MAqLZOFc3MObz39yhNnm8PTfaSqDFlOjyKJq/EV70Ye
dwcP0tqNAfG8QmpNj9hGCHfYFTiFXKsohrSCQFk7q13uITb19Zx/u62t45+g2VOW
M8IGOp9W7RRxISJKPlwGM3XGj1WgnKI08lH9mLWBJIrFEyqWC4aBX+Er8yx8ek4c
LFKQgE0qdWJJP+TOEVhmBXiLsbLqdJQVVYSAsIkQBIymeVmFKQF/8zanjH1M7o9U
K/urP1U/gq5tQWfYdMT0M42LmP/lHMg7vSVDAgMBAAGjggH1MIIB8TAdBgNVHQ4E
FgQU//AYvr7AgKazPx5myY+zrtN6fr4wHwYDVR0jBBgwFoAUYBbvQfMhyapsHhPR
FbW2CjApyOUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hBTkdT
SEVOL1lCYnZRZk1oeWFwc0hoUFJGYlcyQ2pBcHlPVS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvWUJidlFmTWh5YXBzSGhQUkZiVzJDakFweU9VLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hBTkdTSEVOL19fQVl2cjdBZ0th
elB4NW15WS16cnRONmZyNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC
MAcDBQAkATDgMA0GCSqGSIb3DQEBCwUAA4IBAQAWbk8s4ke0/lefCH2OcPaOrZTk
x2+Vm6ytf1J7nxr2GZ1g2XR4Hew7yfta38OD8ZZgZbWBEIVZcl0GP7NGjzi9y4pJ
yb1SuleY/NGyiPNf4ANRDrR9D6c3Rd1shS2hMSnIDDnEA5ZQVenLEIPum1INQgP2
Xfr6MV7tXO6gTZHu6bpgYnOlkq2hcJY9MKeposmoREYjesvRssO1PumYucPdKAfF
9lr4p2pB8RFAd9Ydpu+YiANFkcmu+PatNoFW2wvhJF4FjkNnzEK4fRE9Hmtuyz9E
fjyxXifvI28v+UaAj32lbI+Ici1pOqWoTPVcHhCEv7qudbUS7AMAnWL5Q62K
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:35 2024 by rpki-client on console-fra.rpki-client.org