Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/ETaCD8POI9TBcTQx76SIU1qzpts.roa
File:                     ETaCD8POI9TBcTQx76SIU1qzpts.roa (raw, json)
Hash identifier:          0y/5K8pWKOsh7LTtKFOa5KyFmL+GjbceO/qknU5XctM=
Subject key identifier:   11:36:82:0F:C3:CE:23:D4:C1:71:34:31:EF:A4:88:53:5A:B3:A6:DB
Certificate issuer:       /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Certificate serial:       0B47
Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/ETaCD8POI9TBcTQx76SIU1qzpts.roa
Signing time:             Fri 01 Sep 2023 08:48:46 +0000
ROA not before:           Fri 01 Sep 2023 08:48:46 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18411
IP address blocks:        61.56.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2887 (0xb47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
        Validity
            Not Before: Sep  1 08:48:46 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=1136820FC3CE23D4C1713431EFA488535AB3A6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:45:59:3f:dd:e0:e3:c4:ad:83:6e:ec:47:79:
                    99:1d:99:56:cd:e5:c4:aa:17:b5:df:a2:82:52:41:
                    de:bd:76:b7:3e:1a:e3:cc:c1:9c:ec:5c:60:ed:74:
                    ab:53:a9:38:04:b6:62:2e:f6:03:90:a9:ce:8b:a0:
                    b5:65:7b:56:c2:9c:22:17:86:8d:61:22:d4:4b:9e:
                    0d:96:d3:b7:a6:52:00:11:4a:ff:9c:f2:d0:40:37:
                    c1:9f:1c:ee:e4:4e:cc:0c:e7:e0:43:97:07:e2:ee:
                    16:e0:c8:62:31:c5:a9:a4:ba:4a:78:5e:65:78:87:
                    b9:87:29:06:8f:46:0f:27:43:a8:12:e1:86:7b:1a:
                    cd:ff:6e:83:7a:46:ca:bc:b8:02:e8:9e:72:63:32:
                    70:0b:e0:04:e9:3b:c6:6c:13:8a:94:b9:fb:37:81:
                    11:8a:65:dc:2c:b0:83:fd:61:4b:f5:fc:4d:82:94:
                    b7:dc:69:b7:2f:41:50:66:c6:c1:9f:c4:5d:c7:65:
                    71:48:43:d4:03:60:d9:f5:d8:ae:7e:4c:59:0e:dc:
                    70:dc:d2:d3:30:b5:88:ad:bc:66:f4:58:f3:7d:1f:
                    b2:11:35:e4:59:e1:c7:3a:76:2d:31:78:04:86:7f:
                    1b:ab:af:d5:41:18:4e:02:a6:93:a2:18:da:06:3d:
                    66:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:36:82:0F:C3:CE:23:D4:C1:71:34:31:EF:A4:88:53:5A:B3:A6:DB
            X509v3 Authority Key Identifier:
                keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/ETaCD8POI9TBcTQx76SIU1qzpts.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cf:ee:70:49:03:52:e9:ce:40:63:e1:16:b7:ca:60:51:b3:a7:
         64:cd:24:bc:ef:ed:66:43:f8:7e:00:cf:04:f2:cb:50:03:ab:
         e5:0d:60:67:a1:67:32:ca:af:39:2e:5a:94:41:00:a5:d6:77:
         5c:35:57:9a:d0:f6:20:c4:2f:67:95:02:c1:b2:0f:68:61:1c:
         de:47:2d:d3:40:4d:d4:a0:f8:cf:72:f1:76:47:90:80:74:1b:
         28:02:d8:78:0d:d4:94:92:e8:99:46:06:20:52:54:4a:58:1d:
         08:3c:d3:60:be:85:41:5c:da:8d:c6:61:eb:d4:fd:e5:0a:79:
         c4:66:06:18:33:8c:40:67:de:95:04:ea:c4:f3:8d:65:13:64:
         42:e4:01:de:46:ef:35:5f:02:cf:30:c1:21:ab:4e:d3:35:8a:
         55:3e:dc:38:7c:ab:98:73:77:81:42:a4:d2:c3:5c:ba:a7:c1:
         e1:2c:16:4d:39:65:83:f0:15:80:37:33:2f:22:90:ef:1e:d7:
         dc:33:37:88:b3:3b:74:0e:ae:ff:62:93:cf:f9:74:18:ce:da:
         4a:3a:11:48:71:38:bf:90:40:13:1d:77:91:f0:29:f7:9c:f9:
         12:ad:94:ff:7e:5c:35:48:d8:5f:ab:99:ce:92:9c:42:ac:a3:
         0c:71:52:cf
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICC0cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRD
NkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIyRTAeFw0yMzA5MDEw
ODQ4NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDExMzY4MjBGQzNDRTIz
RDRDMTcxMzQzMUVGQTQ4ODUzNUFCM0E2REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdRVk/3eDjxK2DbuxHeZkdmVbN5cSqF7XfooJSQd69drc+GuPM
wZzsXGDtdKtTqTgEtmIu9gOQqc6LoLVle1bCnCIXho1hItRLng2W07emUgARSv+c
8tBAN8GfHO7kTswM5+BDlwfi7hbgyGIxxamkukp4XmV4h7mHKQaPRg8nQ6gS4YZ7
Gs3/boN6Rsq8uALonnJjMnAL4ATpO8ZsE4qUufs3gRGKZdwssIP9YUv1/E2ClLfc
abcvQVBmxsGfxF3HZXFIQ9QDYNn12K5+TFkO3HDc0tMwtYitvGb0WPN9H7IRNeRZ
4cc6di0xeASGfxurr9VBGE4CppOiGNoGPWYhAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUETaCD8POI9TBcTQx76SIU1qzptswHwYDVR0jBBgwFoAUlMbd/dS6pQQA86EZ
pYM84AIb2y4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMv
bE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9sTWJkX2RTNnBRUUE4NkVacFlNODRBSWIyeTQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FRFROUy9FVGFDRDhQT0k5VEJjVFF4NzZT
SVUxcXpwdHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTgQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDP7nBJA1LpzkBj4Ra3ymBRs6dkzSS87+1mQ/h+
AM8E8stQA6vlDWBnoWcyyq85LlqUQQCl1ndcNVea0PYgxC9nlQLBsg9oYRzeRy3T
QE3UoPjPcvF2R5CAdBsoAth4DdSUkuiZRgYgUlRKWB0IPNNgvoVBXNqNxmHr1P3l
CnnEZgYYM4xAZ96VBOrE841lE2RC5AHeRu81XwLPMMEhq07TNYpVPtw4fKuYc3eB
QqTSw1y6p8HhLBZNOWWD8BWANzMvIpDvHtfcMzeIszt0Dq7/YpPP+XQYztpKOhFI
cTi/kEATHXeR8Cn3nPkSrZT/flw1SNhfq5nOkpxCrKMMcVLP
-----END CERTIFICATE-----
Generated at Mon Jun 3 15:52:32 2024 by rpki-client on console-ams.rpki-client.org