Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/_j637rCEMvZIJbbpLZivMYDwiCc.roa
File:                     _j637rCEMvZIJbbpLZivMYDwiCc.roa (raw, json)
Hash identifier:          uM+/L7wbh6NecO5NNBEKx4WT5kfnYiD20AYwmvkynnI=
Subject key identifier:   FE:3E:B7:EE:B0:84:32:F6:48:25:B6:E9:2D:98:AF:31:80:F0:88:27
Certificate issuer:       /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial:       0B5C
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/_j637rCEMvZIJbbpLZivMYDwiCc.roa
Signing time:             Fri 01 Sep 2023 08:36:08 +0000
ROA not before:           Fri 01 Sep 2023 08:36:08 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17416
IP address blocks:        112.213.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2908 (0xb5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
        Validity
            Not Before: Sep  1 08:36:08 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=FE3EB7EEB08432F64825B6E92D98AF3180F08827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:35:79:f5:c7:5e:68:55:70:33:58:d2:53:7f:
                    35:d0:30:f1:61:88:0e:2d:cc:5e:d3:80:03:18:60:
                    86:9f:a0:ff:ff:ad:bc:36:7b:e6:d9:d5:7b:1f:41:
                    17:75:dd:0e:b1:94:b8:1d:95:32:23:45:7c:a1:65:
                    66:24:74:78:d1:b2:7e:6b:6b:89:c6:d7:16:2e:bb:
                    16:b9:51:10:33:82:c4:b4:65:ce:90:cc:14:82:8f:
                    b3:6f:db:ae:33:3d:c7:b6:84:5e:1a:e9:b7:7c:c5:
                    70:c0:ed:d6:ef:fa:55:77:ac:ae:73:9d:b2:b8:a6:
                    22:0b:e1:5b:bb:04:93:18:c0:83:7d:aa:31:29:d5:
                    17:8a:9a:e3:d0:ce:c2:5f:1f:89:a9:ce:a6:79:53:
                    13:d7:dd:21:a3:91:a3:6e:85:68:12:95:4f:99:44:
                    de:cd:5c:a8:ca:a1:17:22:44:f1:bd:9c:ae:e9:5a:
                    63:76:23:8b:6a:37:33:73:53:d6:52:c3:2f:ee:56:
                    6d:a4:c3:58:03:dc:8c:68:a8:2c:cb:84:22:26:fc:
                    d6:c0:dc:cc:8b:ad:11:3c:49:cf:5d:24:bb:2a:07:
                    30:38:b5:26:d0:4e:0d:2a:9d:34:26:3a:3f:e5:d1:
                    a2:6c:c9:42:94:8e:72:5d:b6:0e:2a:c5:f4:73:16:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3E:B7:EE:B0:84:32:F6:48:25:B6:E9:2D:98:AF:31:80:F0:88:27
            X509v3 Authority Key Identifier:
                keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/_j637rCEMvZIJbbpLZivMYDwiCc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.213.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:64:2e:f3:91:d0:fd:9b:58:02:cf:73:0c:de:41:4c:41:f9:
         e0:e6:ff:0e:9a:55:17:1f:a3:ab:07:de:3f:58:66:77:ca:02:
         9e:12:88:d8:b6:d8:87:fc:f0:94:9a:07:70:11:8b:0e:55:c0:
         e6:d3:28:9d:e9:d5:cf:44:fa:37:ce:21:1b:be:a6:ea:88:19:
         2e:37:f4:0f:c5:af:89:36:4b:28:c5:eb:7d:4e:b4:0d:1a:9a:
         2d:a7:bf:01:67:88:5f:4c:11:e6:1b:fb:f4:e5:61:d8:43:20:
         78:17:f2:18:7e:52:ff:d0:90:15:a3:c2:72:88:43:6c:39:e9:
         c1:98:30:64:66:29:60:8c:f2:9f:92:03:0a:24:be:7b:15:a0:
         98:1d:fa:b3:1b:93:59:e8:6a:6c:2d:90:eb:d2:80:b0:13:59:
         4e:f6:bc:e9:96:81:da:27:9b:90:77:25:8f:f1:25:39:c1:00:
         99:11:59:25:7f:be:b8:7b:20:2d:1e:66:6b:35:99:4c:fd:63:
         aa:67:f4:32:04:13:d1:cd:0f:19:0e:e0:74:99:01:5f:47:ff:
         46:94:10:66:14:fe:3e:54:8a:8d:4c:75:69:20:b9:91:73:4c:
         f5:1a:8f:59:a6:c0:34:82:a2:44:2f:6b:31:33:59:91:3c:0d:
         5b:49:33:0e
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICC1wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1
RjlCRDk4Q0M3MEU4ODM2RDAxQTk0ODFDMTlDNUMyRDQ1RDc5MTAeFw0yMzA5MDEw
ODM2MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZFM0VCN0VFQjA4NDMy
RjY0ODI1QjZFOTJEOThBRjMxODBGMDg4MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjNXn1x15oVXAzWNJTfzXQMPFhiA4tzF7TgAMYYIafoP//rbw2
e+bZ1XsfQRd13Q6xlLgdlTIjRXyhZWYkdHjRsn5ra4nG1xYuuxa5URAzgsS0Zc6Q
zBSCj7Nv264zPce2hF4a6bd8xXDA7dbv+lV3rK5znbK4piIL4Vu7BJMYwIN9qjEp
1ReKmuPQzsJfH4mpzqZ5UxPX3SGjkaNuhWgSlU+ZRN7NXKjKoRciRPG9nK7pWmN2
I4tqNzNzU9ZSwy/uVm2kw1gD3IxoqCzLhCIm/NbA3MyLrRE8Sc9dJLsqBzA4tSbQ
Tg0qnTQmOj/l0aJsyUKUjnJdtg4qxfRzFk6HAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU/j637rCEMvZIJbbpLZivMYDwiCcwHwYDVR0jBBgwFoAUYV+b2YzHDog20BqU
gcGcXC1F15EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdJTlMv
WVYtYjJZekhEb2cyMEJxVWdjR2NYQzFGMTVFLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9ZVi1iMll6SERvZzIwQnFVZ2NHY1hDMUYxNUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EV0lOUy9fajYzN3JDRU12WklKYmJwTFpp
dk1ZRHdpQ2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEcNUw
MA0GCSqGSIb3DQEBCwUAA4IBAQA5ZC7zkdD9m1gCz3MM3kFMQfng5v8OmlUXH6Or
B94/WGZ3ygKeEojYttiH/PCUmgdwEYsOVcDm0yid6dXPRPo3ziEbvqbqiBkuN/QP
xa+JNksoxet9TrQNGpotp78BZ4hfTBHmG/v05WHYQyB4F/IYflL/0JAVo8JyiENs
OenBmDBkZilgjPKfkgMKJL57FaCYHfqzG5NZ6GpsLZDr0oCwE1lO9rzploHaJ5uQ
dyWP8SU5wQCZEVklf764eyAtHmZrNZlM/WOqZ/QyBBPRzQ8ZDuB0mQFfR/9GlBBm
FP4+VIqNTHVpILmRc0z1Go9ZpsA0gqJEL2sxM1mRPA1bSTMO
-----END CERTIFICATE-----
Generated at Mon Jun 3 02:57:38 2024 by rpki-client on console-fra.rpki-client.org