Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/UQ9E594AGf6_ANvraSkUmqVI6Mc.roa
File:                     UQ9E594AGf6_ANvraSkUmqVI6Mc.roa (raw, json)
Hash identifier:          gukvv1DVGF/qsrq2kFF9Y9kuPGqE9l+Zg+oFrpp/XgI=
Subject key identifier:   51:0F:44:E7:DE:00:19:FE:BF:00:DB:EB:69:29:14:9A:A5:48:E8:C7
Certificate issuer:       /CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
Certificate serial:       57
Authority key identifier: AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/UQ9E594AGf6_ANvraSkUmqVI6Mc.roa
Signing time:             Sun 14 Apr 2024 12:26:11 +0000
ROA not before:           Sun 14 Apr 2024 12:26:11 +0000
ROA not after:            Tue 24 Dec 2024 15:30:20 +0000
asID:                     150766
IP address blocks:        2401:5da0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
        Validity
            Not Before: Apr 14 12:26:11 2024 GMT
            Not After : Dec 24 15:30:20 2024 GMT
        Subject: CN=510F44E7DE0019FEBF00DBEB6929149AA548E8C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:bd:e7:10:49:68:37:4b:07:8b:c2:0d:f5:
                    58:b5:c3:cc:3b:c1:90:ad:b9:72:7c:5a:17:d7:5d:
                    76:e8:ea:b7:47:ec:4f:d4:5b:2a:3f:81:4d:74:aa:
                    ce:b6:c9:d3:c5:2d:b6:cc:69:dc:c3:a6:f6:86:6d:
                    55:fe:6f:30:fc:2c:95:41:f2:3d:9e:b4:3f:5f:03:
                    26:6c:73:63:33:23:1e:60:70:e8:91:85:0e:32:1b:
                    01:25:fc:6d:dd:1f:0c:c2:2a:3a:a3:f4:83:a6:1b:
                    c9:8b:af:13:31:0b:6e:81:9e:7a:96:b3:4c:ed:84:
                    cb:99:07:96:91:93:be:34:47:98:db:10:e5:e2:0d:
                    97:41:4e:aa:eb:3a:ee:bd:bb:52:be:1f:da:62:c5:
                    62:56:dd:9c:b5:e2:77:3c:a1:cd:42:a6:3f:44:26:
                    fa:65:03:2e:1f:df:64:4a:31:56:78:34:f1:fc:eb:
                    c5:e1:12:37:f0:5b:97:f8:5a:ef:a6:e0:0f:13:1e:
                    09:ab:77:66:96:aa:6b:a3:d0:58:61:c1:86:02:d5:
                    0a:a2:56:bb:9a:ca:e6:69:61:c7:41:77:0e:e7:3a:
                    5e:e5:a7:2e:3a:59:cc:83:53:14:76:41:25:6c:86:
                    25:ce:6b:d4:0a:51:a4:06:cb:ce:10:0b:99:e6:f9:
                    02:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0F:44:E7:DE:00:19:FE:BF:00:DB:EB:69:29:14:9A:A5:48:E8:C7
            X509v3 Authority Key Identifier:
                keyid:AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/UQ9E594AGf6_ANvraSkUmqVI6Mc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:9f:32:48:f7:c0:0e:af:ae:94:26:02:dc:da:9e:20:ba:35:
         92:68:19:0a:a8:ed:cc:d0:6a:af:ec:53:02:a4:3e:7d:83:42:
         6e:44:67:54:37:4f:5c:b0:d6:fe:d3:7c:eb:f4:fb:43:d5:d9:
         43:6a:59:25:e3:1f:f2:bc:0a:7b:a1:62:c3:b4:b9:85:3e:99:
         da:0c:9f:11:26:4a:a9:03:07:f4:a5:07:82:52:9e:c0:4e:ce:
         a4:76:75:83:4f:26:f4:37:01:b3:ba:d0:5a:b0:86:22:02:33:
         1c:02:26:45:fb:ec:70:5c:2a:6b:8d:78:ba:46:cd:db:82:8f:
         79:c1:67:5f:20:52:b0:e2:a2:21:57:c6:09:fd:8b:68:06:73:
         35:4e:06:01:ca:43:cf:51:2a:a7:af:2f:e9:12:5c:eb:e3:2c:
         b0:6e:45:5f:b0:c0:68:60:a7:71:4f:a9:cd:7c:97:b6:4e:04:
         73:03:fa:d1:4a:f6:ae:d3:d1:c1:98:47:47:bc:71:95:83:6a:
         08:9a:fd:6b:2d:1e:84:e6:e6:3e:f3:e9:39:2e:42:7f:08:07:
         91:6f:5a:60:3c:a6:b6:02:83:a2:0f:45:8a:d4:cf:99:a1:40:
         e5:6a:0e:56:5b:0b:1d:a7:51:46:a7:79:16:92:d8:53:84:30:
         c3:2d:ba:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:03 2024 by rpki-client on console-ams.rpki-client.org