Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/0pltuwELCQVoyVgOBpKP7jQOqMo.roa
File:                     0pltuwELCQVoyVgOBpKP7jQOqMo.roa (raw, json)
Hash identifier:          Mut5jXTVO9d+NDJ9rN1hrP/VOcV5qkqX3IavJtEJbsk=
Subject key identifier:   D2:99:6D:BB:01:0B:09:05:68:C9:58:0E:06:92:8F:EE:34:0E:A8:CA
Certificate issuer:       /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial:       0F12
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/0pltuwELCQVoyVgOBpKP7jQOqMo.roa
Signing time:             Mon 26 Aug 2024 05:12:43 +0000
ROA not before:           Mon 26 Aug 2024 05:12:43 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131641
IP address blocks:        103.136.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3858 (0xf12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
        Validity
            Not Before: Aug 26 05:12:43 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D2996DBB010B090568C9580E06928FEE340EA8CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f7:d9:d7:86:bd:9e:db:9f:71:31:bc:33:af:
                    7d:eb:47:0f:f1:2b:1c:0f:17:ca:03:fd:3f:f1:53:
                    9b:c3:11:e9:7f:47:f4:93:f9:d3:74:8d:52:22:95:
                    bd:32:a6:9b:1a:b3:1e:7c:ca:55:e5:72:76:bc:72:
                    fa:8a:f5:3a:74:cc:f2:07:4e:fb:ea:f7:c1:e7:97:
                    e2:d7:cd:8d:c5:80:26:90:df:cd:24:7d:5d:05:ac:
                    0d:43:42:d2:1c:cd:6f:00:2c:ca:db:86:05:b7:08:
                    b8:46:76:d9:3a:49:55:6a:97:50:f3:76:bc:7f:92:
                    b8:e0:e9:17:16:24:24:86:93:24:29:19:1e:8d:ee:
                    58:6a:68:b9:36:68:5e:20:cc:ac:58:4e:ae:aa:4c:
                    65:a2:d7:f8:8b:76:db:23:a9:d4:67:92:14:57:5f:
                    15:cb:78:8f:63:4b:16:ae:f8:af:b4:99:06:70:e6:
                    48:ba:fd:84:ea:d3:f4:6e:dd:f3:9d:a2:9b:d3:97:
                    3b:22:52:f5:f6:e5:34:42:ce:fc:81:3c:43:cb:3e:
                    ea:20:94:e4:3b:2c:ae:5d:9d:e3:1e:be:86:d3:a8:
                    b1:e0:e6:21:98:dc:91:91:e1:3a:ef:6c:2d:04:0b:
                    99:13:a2:41:f9:e8:b6:6d:25:5b:10:cd:78:68:7c:
                    e7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:99:6D:BB:01:0B:09:05:68:C9:58:0E:06:92:8F:EE:34:0E:A8:CA
            X509v3 Authority Key Identifier:
                keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/0pltuwELCQVoyVgOBpKP7jQOqMo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:f2:7f:0c:47:19:1c:fd:13:16:de:61:b3:5d:aa:ff:16:97:
         63:37:11:2f:0a:ad:9a:f4:5a:81:37:db:9d:a7:78:09:b6:0d:
         5e:ae:c8:48:b1:fc:af:e5:5e:99:06:66:a5:a1:1c:d1:49:b5:
         9f:af:06:38:1e:82:d8:70:50:c0:2b:e3:6a:0d:42:18:13:e5:
         98:49:26:eb:ab:61:82:8f:a1:fc:7f:62:22:03:e6:a3:1d:0b:
         ae:4f:69:b8:a6:92:47:18:cb:cf:2a:97:ec:29:47:fa:5b:08:
         43:94:12:ca:ce:d0:76:43:b7:73:8f:d7:2f:e5:a4:89:cd:90:
         52:f6:d5:62:be:2a:4d:4c:1e:41:45:2f:8a:aa:dc:4a:fe:12:
         ed:74:48:ee:d8:d2:c6:fe:b1:d6:15:34:67:89:5b:1e:e5:46:
         4a:cd:46:42:ed:ea:08:54:6b:6d:ab:8e:f6:38:3f:de:4a:ec:
         ea:77:70:cf:26:7b:04:27:d5:75:c8:a7:7a:93:cd:31:4a:b4:
         4c:7d:31:2e:60:e3:5a:dc:05:89:4a:f1:32:39:77:32:9b:23:
         15:76:d8:98:12:8d:6c:3c:fe:db:eb:17:e7:d8:5d:37:90:9b:
         c4:7b:8b:77:9a:4e:26:65:62:0b:8b:55:72:43:da:0b:f1:56:
         d2:cb:ed:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:36 2024 by rpki-client on console-fra.rpki-client.org