Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/uelP3iI6Il6Xoa_7Oej3zjdFyig.roa
File:                     uelP3iI6Il6Xoa_7Oej3zjdFyig.roa (raw, json)
Hash identifier:          p4NEiuacKUXR6iugkqPKIbDCsUWGFWee/EeoJgWk/ew=
Subject key identifier:   B9:E9:4F:DE:22:3A:22:5E:97:A1:AF:FB:39:E8:F7:CE:37:45:CA:28
Certificate issuer:       /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial:       0E06
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/uelP3iI6Il6Xoa_7Oej3zjdFyig.roa
Signing time:             Fri 01 Sep 2023 08:36:23 +0000
ROA not before:           Fri 01 Sep 2023 08:36:23 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24168
IP address blocks:        103.136.60.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 11:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3590 (0xe06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
        Validity
            Not Before: Sep  1 08:36:23 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=B9E94FDE223A225E97A1AFFB39E8F7CE3745CA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:44:f9:26:ce:86:5f:24:3b:10:ab:00:fd:35:
                    0c:fd:7a:e5:63:09:f1:ac:40:f9:e3:59:96:67:ba:
                    3e:ac:fa:80:c2:0e:79:6b:06:04:0c:23:79:67:d7:
                    9b:bf:e8:63:1f:15:c6:51:c1:64:cc:07:7a:23:8c:
                    12:44:a2:d4:8a:2a:49:28:99:67:5a:10:bd:51:a4:
                    2a:33:5d:5f:eb:a1:90:b1:08:91:cf:80:19:24:b8:
                    b3:22:a1:39:3b:64:01:2e:49:0a:43:cd:9e:e8:3a:
                    b8:23:e7:5e:e2:33:9c:be:c4:be:de:24:90:e5:ba:
                    6f:9c:0c:fd:7f:a2:a0:eb:51:f4:d9:d2:bc:3f:da:
                    52:12:5f:91:d5:93:59:77:a9:85:a6:2d:72:4b:39:
                    3c:05:87:b6:74:82:58:3f:58:25:71:87:f3:01:f5:
                    27:55:19:e4:1b:80:35:3b:28:e5:a0:45:e8:23:41:
                    89:99:61:fb:9a:07:37:a1:3c:71:59:a0:9e:ff:bb:
                    50:51:da:5d:5e:e3:ba:9a:4c:3a:7e:d8:d7:9c:84:
                    f3:90:2c:3d:3b:ef:2a:49:67:8b:ba:1b:2b:ac:ef:
                    9e:16:36:8b:7b:4f:73:22:27:ce:a5:0e:1c:ed:d9:
                    3d:00:ad:15:ba:9e:37:46:61:5a:d7:aa:19:24:dd:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E9:4F:DE:22:3A:22:5E:97:A1:AF:FB:39:E8:F7:CE:37:45:CA:28
            X509v3 Authority Key Identifier:
                keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/uelP3iI6Il6Xoa_7Oej3zjdFyig.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:33:8c:fa:44:29:06:b4:ba:72:8f:ca:3f:e6:37:b8:a4:c1:
         ec:fd:c5:4e:3c:22:35:71:42:d5:09:9f:d6:92:ce:19:74:95:
         67:ac:6d:ee:79:30:2b:39:c5:da:c0:f8:2b:90:e8:05:11:93:
         1b:48:49:58:9d:31:1d:69:85:da:40:a8:ad:15:92:7d:0c:a9:
         d3:f9:42:91:ed:59:99:d4:be:36:44:86:17:7b:86:e2:91:0b:
         fc:ea:6b:1a:df:f3:16:ad:8a:6c:c0:87:94:5b:ba:9f:31:55:
         96:80:70:2b:69:ea:77:73:22:e5:00:d1:2e:0d:29:58:1a:8c:
         23:8e:22:0d:ef:27:09:86:8b:fc:aa:3d:20:7d:81:33:f1:a9:
         43:aa:b1:b2:cf:da:03:f2:59:9c:a3:ee:9f:a7:af:c2:8e:62:
         e5:e6:d9:71:06:9a:29:1c:a0:31:40:b4:4a:60:4c:1a:7f:2c:
         21:0f:b5:5a:0d:28:d6:87:4d:c7:2a:00:0f:59:f5:b1:b8:5a:
         aa:29:6b:9b:45:4d:54:eb:a1:e9:e4:c2:2e:f8:5b:89:5f:18:
         32:7f:0d:71:d9:d6:cf:e9:09:58:bf:0a:0c:6a:e3:a9:40:cf:
         69:22:2b:c0:c9:e0:89:29:e1:11:8e:2e:25:6d:0e:4d:af:f2:
         43:48:86:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:31:28 2024 by rpki-client on console-ams.rpki-client.org