Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/gbVjNcwhHKNkcyQ6j-GZcsK2V5o.roa
File:                     gbVjNcwhHKNkcyQ6j-GZcsK2V5o.roa (raw, json)
Hash identifier:          CzuomZ5sEJTuvANh5tKSSvoGNgB7OpPvGGyk5rZdBlc=
Subject key identifier:   81:B5:63:35:CC:21:1C:A3:64:73:24:3A:8F:E1:99:72:C2:B6:57:9A
Certificate issuer:       /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial:       0C58
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/gbVjNcwhHKNkcyQ6j-GZcsK2V5o.roa
Signing time:             Mon 26 Aug 2024 05:12:39 +0000
ROA not before:           Mon 26 Aug 2024 05:12:39 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     17416
IP address blocks:        2405:4d00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3160 (0xc58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
        Validity
            Not Before: Aug 26 05:12:39 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=81B56335CC211CA36473243A8FE19972C2B6579A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:94:26:42:e4:2c:9b:12:61:b7:ea:c0:79:
                    2d:fb:c1:24:26:de:c4:b2:f4:f0:2c:05:04:77:f8:
                    e7:7c:89:9d:0e:35:3f:93:28:86:68:3a:bd:ca:55:
                    c4:8d:ec:89:0f:4a:49:df:bd:31:da:8b:39:b5:85:
                    f9:20:ec:7e:98:ef:f0:17:b5:c3:74:68:11:f5:3c:
                    36:8a:d7:b0:03:f0:ee:3f:0c:ae:8e:24:69:2f:35:
                    e0:a2:e5:6d:25:40:ce:7d:f2:28:ed:cf:4a:78:5c:
                    e7:8c:28:5b:dd:21:b6:c2:1f:4b:d0:da:ef:a3:62:
                    b7:4d:49:eb:47:f9:24:dc:64:6f:37:a3:ac:29:64:
                    f6:5e:8d:4c:fe:7f:30:7f:fb:ff:68:19:a2:df:8c:
                    93:44:79:97:b2:b8:53:e8:fd:6d:7d:24:13:1c:a7:
                    35:be:64:a8:b2:90:29:81:27:4b:0b:56:82:fe:6d:
                    a1:b5:44:5f:27:c2:e7:57:f4:fd:8c:e9:f2:12:26:
                    d0:d5:5a:8f:72:f9:5f:9f:3f:4d:9e:29:fb:85:47:
                    8e:96:87:15:b0:ea:24:3e:33:25:31:b6:8e:f8:ec:
                    cb:6d:33:2d:b0:14:15:a8:ce:34:f5:de:dd:17:8f:
                    14:03:2d:f1:a6:61:fa:0c:d0:f3:78:d8:7c:be:62:
                    f9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B5:63:35:CC:21:1C:A3:64:73:24:3A:8F:E1:99:72:C2:B6:57:9A
            X509v3 Authority Key Identifier:
                keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/gbVjNcwhHKNkcyQ6j-GZcsK2V5o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:4d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:3c:2e:13:21:53:6c:89:00:bf:4e:ba:19:15:7e:1f:b4:8b:
         2d:ce:12:eb:75:04:74:09:07:7e:d5:5e:cb:65:69:c5:f5:34:
         60:6f:49:a6:08:45:7e:83:db:62:5f:6b:dc:ae:bf:60:c5:c6:
         b2:e9:8e:1a:3a:97:52:d3:01:10:4c:e5:d2:14:1d:c0:22:f3:
         50:68:51:31:70:af:79:79:8d:4b:d2:b0:28:d6:be:d7:62:ea:
         28:02:89:84:bc:ce:76:f7:85:c0:fc:64:05:e0:e8:f1:5b:ba:
         78:a3:92:ba:3a:16:bc:8f:bc:71:72:1f:97:f7:58:46:c8:93:
         cf:93:4e:c2:d1:9a:90:c2:9f:13:ab:3c:e7:5b:bc:80:32:86:
         c7:a8:af:96:94:15:99:ce:c3:a4:95:02:6f:23:2f:0f:ee:65:
         63:48:d3:28:5c:dd:f6:bf:56:ed:04:f3:89:4c:dc:6b:dd:2f:
         17:92:e7:13:58:54:13:17:b9:0b:ae:00:c0:25:59:e8:db:80:
         54:18:49:09:6b:38:0e:89:bb:50:45:ad:70:a8:96:bd:f8:1a:
         59:eb:53:b8:0d:b3:e1:4e:89:b5:30:46:54:1d:aa:96:f1:7f:
         ff:9d:34:36:6e:45:0d:34:fb:86:bf:0d:33:6f:9e:ea:65:ba:
         a3:65:5c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:49 2024 by rpki-client on console-fra.rpki-client.org