Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLARK/7V18K82Bwwod6v_l9_P3eZVztiM.roa
File:                     7V18K82Bwwod6v_l9_P3eZVztiM.roa (raw, json)
Hash identifier:          XuJ62ku496UJ92XBfi8/uWf2RPU+MPp1pmnsvYB3+Rs=
Subject key identifier:   ED:5D:7C:2B:CD:81:C3:0A:1D:EA:FF:E5:F7:F3:F7:79:95:73:B6:23
Certificate issuer:       /CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C
Certificate serial:       016A
Authority key identifier: 74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/7V18K82Bwwod6v_l9_P3eZVztiM.roa
Signing time:             Mon 26 Aug 2024 05:11:31 +0000
ROA not before:           Mon 26 Aug 2024 05:11:31 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     63910
IP address blocks:        103.130.236.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C
        Validity
            Not Before: Aug 26 05:11:31 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=ED5D7C2BCD81C30A1DEAFFE5F7F3F7799573B623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:5b:e7:04:ba:bf:d2:45:e1:5a:2f:21:3f:
                    88:c5:11:dd:67:8b:00:79:13:c7:3d:8d:0c:c8:e7:
                    f1:00:cb:a8:14:ea:c4:4f:73:4a:71:0c:48:81:8e:
                    c1:e2:36:92:ef:32:6a:bc:cb:45:04:82:2e:5f:4d:
                    52:89:07:d8:ba:a0:3e:4c:a4:93:c3:54:9c:bc:4b:
                    58:80:1c:16:3d:47:f1:4c:92:df:66:e8:7c:55:fa:
                    3f:84:1b:b3:2a:2c:09:5b:71:31:59:32:9d:b9:7b:
                    06:ad:52:d3:db:1c:6f:54:31:91:43:e5:50:98:a6:
                    fe:fd:16:3a:19:85:c8:11:c3:2a:34:42:5d:a4:a5:
                    88:d7:d8:55:cf:d9:6e:0e:af:48:61:6d:8e:22:44:
                    00:7d:15:d8:e2:5c:53:11:21:0b:a6:94:79:fc:a6:
                    38:ff:ed:f3:c6:d0:8b:93:09:54:4f:a3:61:b0:1d:
                    f9:9c:df:c0:0b:c6:0f:a6:66:d3:8b:ab:85:ca:64:
                    62:a8:02:68:c8:6e:64:43:1d:78:b0:df:da:7c:52:
                    8f:9e:f3:9c:f3:88:cf:03:92:2c:57:bc:5a:4a:ca:
                    a5:06:99:ff:c4:bd:ce:94:48:67:cc:42:02:2c:f0:
                    d8:e1:49:3a:84:0e:4f:ea:b2:43:c7:1a:b2:79:a1:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5D:7C:2B:CD:81:C3:0A:1D:EA:FF:E5:F7:F3:F7:79:95:73:B6:23
            X509v3 Authority Key Identifier:
                keyid:74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/7V18K82Bwwod6v_l9_P3eZVztiM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:f2:8c:92:94:9e:97:bd:6a:b3:6e:0f:41:34:0f:3d:07:13:
         e1:fa:37:e7:d2:3c:03:2f:70:61:53:06:77:f8:76:b0:ea:2a:
         09:83:e2:0e:cf:9e:0f:0e:a2:23:9b:d2:18:5e:8f:ce:b6:48:
         cf:9a:4b:62:0e:e8:a8:eb:a1:5d:6e:4c:d3:24:a2:a4:90:7d:
         b0:94:8b:d7:26:45:74:ed:6d:b5:28:e7:43:fc:3c:df:c5:60:
         73:23:a6:13:10:e1:c6:45:3b:f4:70:90:fb:62:61:f1:3c:c6:
         30:14:d1:32:82:87:5b:a5:16:8f:83:6a:d5:04:bb:93:ea:c1:
         81:7b:d9:51:80:54:e2:5f:0a:72:36:aa:f2:6b:c6:6f:89:63:
         0f:c0:00:cb:5c:6d:44:74:08:10:b5:69:bd:1f:13:b8:75:d6:
         01:12:8e:22:e1:08:29:5c:38:6d:9e:19:c3:66:d5:90:ba:30:
         73:ea:29:1d:03:11:ea:02:f8:6c:fa:68:15:cb:da:97:d9:7f:
         e7:b9:20:46:1d:fc:cd:bc:3a:b4:44:7c:b8:e4:e1:88:49:ad:
         99:8f:a6:ca:e6:0d:b2:47:73:4c:79:25:72:a4:40:d3:1d:d7:
         9c:98:f0:30:46:3c:7d:c9:cf:c2:1e:84:48:94:9f:d3:14:0b:
         be:97:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:49 2024 by rpki-client on console-fra.rpki-client.org