Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/EGArMocHphMuoZSZ_0-yOevphHA.roa
File:                     EGArMocHphMuoZSZ_0-yOevphHA.roa (raw, json)
Hash identifier:          2c5Vv7HpYhsO+J3pFLEJPfoJjPbXjYBUfQv0MUTuP8g=
Subject key identifier:   10:60:2B:32:87:07:A6:13:2E:A1:94:99:FF:4F:B2:39:EB:E9:84:70
Certificate issuer:       /CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D
Certificate serial:       0225
Authority key identifier: 8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/EGArMocHphMuoZSZ_0-yOevphHA.roa
Signing time:             Fri 01 Sep 2023 08:33:51 +0000
ROA not before:           Fri 01 Sep 2023 08:33:51 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     16509
IP address blocks:        103.168.156.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/jFCLfdoCT7LJ73-79PvQK59DGR0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/jFCLfdoCT7LJ73-79PvQK59DGR0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 11:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D
        Validity
            Not Before: Sep  1 08:33:51 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=10602B328707A6132EA19499FF4FB239EBE98470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:44:9f:97:1b:7b:2d:db:33:b3:3a:1c:6b:ef:
                    fa:a6:90:d0:cf:50:62:21:5b:0a:49:63:0d:69:60:
                    7a:4b:c8:b5:a7:97:1c:66:71:67:5a:9d:56:f9:7e:
                    74:2a:18:d6:f1:7b:89:60:eb:b9:e6:db:4a:70:27:
                    e2:99:a0:de:bd:75:f6:a8:89:48:c6:57:1f:52:3d:
                    a9:c2:d0:b7:b2:2b:e4:cb:52:d9:27:dd:31:eb:ed:
                    25:e3:1c:79:4f:25:64:38:84:96:07:0a:25:1e:0c:
                    b6:38:20:e6:b3:d3:6f:47:86:fe:90:10:e0:1d:9e:
                    03:c3:47:76:ff:cd:21:fa:97:09:60:b0:43:03:cf:
                    4f:d0:00:30:6f:02:be:e3:ea:0e:03:07:01:6d:2b:
                    83:fb:4a:57:e2:69:9d:1f:e2:ee:a7:ef:e3:1c:bb:
                    7c:f7:f4:83:62:15:a3:9a:79:d3:e6:be:c1:51:19:
                    66:9d:7f:27:c5:d5:d2:42:51:f6:9d:32:1d:a8:9c:
                    9a:1d:c0:cc:61:a9:3e:87:10:36:d5:51:ee:f8:9e:
                    73:a0:76:2c:b7:e1:c2:a0:9e:98:d5:64:fa:3e:82:
                    c1:e9:b2:9d:e9:32:11:5e:de:d5:95:40:45:61:23:
                    a8:bc:1d:56:a7:93:70:a7:98:e1:38:2a:f6:6d:50:
                    e1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:60:2B:32:87:07:A6:13:2E:A1:94:99:FF:4F:B2:39:EB:E9:84:70
            X509v3 Authority Key Identifier:
                keyid:8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/jFCLfdoCT7LJ73-79PvQK59DGR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/EGArMocHphMuoZSZ_0-yOevphHA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:9d:f4:cb:3a:dc:ef:b9:fa:a9:dd:13:95:43:99:be:1f:51:
         0c:54:50:f1:50:5c:e9:0d:41:3a:95:a9:bc:63:37:f4:6e:67:
         58:e8:2d:b6:6a:8e:34:8a:3c:8b:3e:ec:6e:6a:8a:9f:ff:ec:
         f7:bf:8e:29:af:cb:3b:20:3f:79:68:42:b9:17:b8:f9:b3:d0:
         e1:58:a8:6e:d7:9b:d2:71:b2:00:e2:50:ae:d9:45:67:a8:a9:
         dd:b0:fe:3b:e8:32:71:6e:ef:ed:04:6c:b4:23:58:cc:6f:63:
         88:cb:7f:4e:a0:2e:5b:20:82:0b:32:92:0e:1e:62:5c:89:00:
         9d:1d:d4:c7:a8:76:2f:ae:f4:1a:2c:2f:37:e2:5f:cf:79:81:
         3a:e5:cf:69:05:04:8b:52:85:86:64:9c:75:0a:16:09:1f:37:
         f8:46:02:d9:7f:d4:18:2f:51:3e:38:3f:b8:e2:3d:e3:b8:fd:
         77:e8:ab:1a:1e:27:97:32:c3:e3:c7:7e:05:70:c5:31:5d:f9:
         10:7c:fe:76:61:a5:99:4e:34:66:40:bb:71:ac:45:f2:4b:5f:
         3d:58:35:55:6b:ea:f3:61:a7:21:f6:fe:b5:34:6b:fa:f0:43:
         5f:94:8c:69:ff:4b:d9:f8:6e:20:c2:4a:27:d7:de:53:c9:85:
         2b:24:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:39:35 2024 by rpki-client on console-ams.rpki-client.org