Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/GvnpZQcKgqt-LB79jaTjLeKR4Ms.roa
File:                     GvnpZQcKgqt-LB79jaTjLeKR4Ms.roa (raw, json)
Hash identifier:          FLTknruaVjqQV2CKmUlGrzAfSmxt1UHv/aMJUHh9+vY=
Subject key identifier:   1A:F9:E9:65:07:0A:82:AB:7E:2C:1E:FD:8D:A4:E3:2D:E2:91:E0:CB
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       0C54
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/GvnpZQcKgqt-LB79jaTjLeKR4Ms.roa
Signing time:             Mon 26 Aug 2024 05:12:05 +0000
ROA not before:           Mon 26 Aug 2024 05:12:05 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18046
IP address blocks:        103.130.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3156 (0xc54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Aug 26 05:12:05 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=1AF9E965070A82AB7E2C1EFD8DA4E32DE291E0CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:0d:bc:f9:b3:2d:69:df:88:b9:00:3f:ae:
                    da:18:af:97:f0:fd:89:c1:de:72:fc:86:bb:6c:85:
                    ab:9d:8f:28:27:85:48:0e:9e:b5:86:0a:d8:bb:53:
                    1f:b2:29:11:d7:4f:e8:65:23:97:08:a0:b0:71:95:
                    7a:93:75:2a:88:f6:88:bf:b6:1d:df:63:43:84:ce:
                    b4:c5:11:f6:54:4f:6d:b7:ec:81:75:3d:be:30:5e:
                    82:3b:f7:c9:a3:38:b0:2b:d3:7c:c7:07:16:70:f1:
                    60:7f:f3:d5:d8:1d:5e:3c:94:8f:a4:d7:05:67:3c:
                    c7:a1:66:f5:76:89:61:84:ca:c3:6a:ca:f6:e0:6b:
                    3c:b1:f1:21:27:00:08:b5:9c:18:fb:59:06:ab:ff:
                    0d:5c:1d:12:ce:e2:91:e4:af:2d:3b:35:1f:6f:f7:
                    5a:72:e6:af:55:54:7a:b2:9b:af:39:96:56:e2:b6:
                    c4:7a:96:53:72:e2:32:82:12:1f:20:0b:41:c2:df:
                    08:ce:39:43:19:b6:61:e6:c2:3d:bc:a4:76:c4:35:
                    71:55:00:77:74:88:6e:79:5a:48:4c:39:95:ec:47:
                    5f:cc:0b:5e:75:0d:08:a9:75:da:16:8b:25:c6:8e:
                    2c:dc:27:7d:ef:74:ef:9d:87:8f:47:c6:e6:a6:f3:
                    f0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F9:E9:65:07:0A:82:AB:7E:2C:1E:FD:8D:A4:E3:2D:E2:91:E0:CB
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/GvnpZQcKgqt-LB79jaTjLeKR4Ms.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:af:8c:ab:0a:5a:ce:81:21:69:79:ad:66:33:54:86:c2:0f:
         e0:9b:fe:49:05:79:7c:da:86:8e:be:7a:74:2b:96:a0:d1:a7:
         1d:be:df:dc:a1:cf:5d:56:bb:27:fa:07:dc:52:39:4c:7e:4e:
         4a:ff:57:92:80:1e:bb:ec:02:7a:30:0e:fc:76:1d:75:75:35:
         a2:2e:66:da:8b:84:4f:be:1d:d0:72:fd:f4:01:f6:a3:c5:bc:
         f2:90:c0:0a:ed:d1:54:21:84:a8:fe:df:2c:30:9d:fe:85:e6:
         09:8e:5a:f9:be:e4:68:3d:69:35:3a:bc:6d:3f:10:4b:b7:4b:
         08:31:8d:fe:4f:54:a5:28:ba:d5:fd:e7:a4:49:55:fd:ea:a4:
         58:80:80:1d:05:3b:94:8d:69:3b:ef:0d:58:b2:c3:d9:47:56:
         3e:bb:27:7b:8d:ed:46:1f:8a:04:c6:10:e0:d6:f8:a8:30:ca:
         48:12:39:ba:2d:4f:4e:16:d4:d6:0d:52:81:8c:b5:e8:6f:65:
         6f:e6:64:d8:1a:b4:c6:ad:94:9d:cc:a5:84:9c:66:5c:81:77:
         ed:c5:7b:75:a8:ea:f6:e4:c1:91:d6:09:fa:4f:9a:0e:83:c5:
         e1:b7:ea:19:bf:d6:42:92:57:2b:bd:c0:cb:c5:d1:7f:33:cb:
         16:0a:0b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:24 2024 by rpki-client on console-fra.rpki-client.org