Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/6FToSLSDFC1fTVyoYrpHhCVLBcw.roa
File:                     6FToSLSDFC1fTVyoYrpHhCVLBcw.roa (raw, json)
Hash identifier:          r9P2RT49UjFQhBAEnZ0kmxIkZXd6kuphLiMKtukMzpI=
Subject key identifier:   E8:54:E8:48:B4:83:14:2D:5F:4D:5C:A8:62:BA:47:84:25:4B:05:CC
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       1040
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/6FToSLSDFC1fTVyoYrpHhCVLBcw.roa
Signing time:             Mon 26 Aug 2024 05:13:33 +0000
ROA not before:           Mon 26 Aug 2024 05:13:33 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     17809
IP address blocks:        113.61.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 00:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4160 (0x1040)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Aug 26 05:13:33 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E854E848B483142D5F4D5CA862BA4784254B05CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:d7:cc:8c:9b:75:52:1e:e8:e7:85:9d:fe:
                    92:61:32:64:7d:af:0f:fa:ba:86:88:fc:f6:6f:04:
                    ab:f2:e2:ff:a6:1b:6a:e4:64:51:24:2c:28:84:de:
                    88:22:2a:23:4e:24:b2:f4:81:71:af:e6:61:1e:b0:
                    e4:e2:c4:06:90:51:90:d2:92:a0:3f:d5:54:5a:19:
                    02:58:a9:ef:61:61:22:66:ef:25:a5:83:27:29:b0:
                    dd:f7:cb:a7:3c:d0:20:62:fc:29:30:41:87:4d:b7:
                    92:42:48:3b:bc:56:29:0c:0e:44:05:d9:d1:a4:3a:
                    01:c4:6e:95:41:c9:77:ed:a6:e0:3d:a7:ae:64:cb:
                    a3:07:ee:59:b6:d6:d8:95:fc:b3:2d:95:eb:4f:11:
                    d2:95:f8:bd:df:0d:cc:81:9b:f3:c8:80:8e:64:ad:
                    3e:36:aa:a3:cb:d7:7b:ff:3d:fe:f4:5f:50:a2:e7:
                    dd:fb:16:20:d7:5d:36:dc:cb:8a:14:8b:e2:aa:73:
                    ad:35:e1:b2:98:cd:f7:bf:77:73:38:97:d1:3d:fa:
                    3f:ed:cd:8b:3c:67:cc:79:37:8a:8f:f4:63:ff:e7:
                    f8:b1:1a:29:92:11:62:5c:4f:9d:38:26:c1:42:9a:
                    bd:a0:5d:6c:f6:d4:ea:6b:bf:5b:a4:2c:cb:39:3a:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:54:E8:48:B4:83:14:2D:5F:4D:5C:A8:62:BA:47:84:25:4B:05:CC
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/6FToSLSDFC1fTVyoYrpHhCVLBcw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:aa:c2:c0:12:1e:e6:37:a1:26:e5:41:d8:11:6d:3c:ea:41:
         f8:66:c0:62:59:ce:cd:3c:8c:6f:a8:1e:36:aa:d5:7d:f2:4f:
         7e:8b:74:b4:77:fa:06:17:de:ee:e2:f8:51:57:4c:e4:86:3c:
         17:98:77:ff:5b:ea:ff:56:c5:d9:81:6d:05:f8:55:95:40:6a:
         2a:03:54:df:b5:bf:14:66:ab:5a:67:02:d4:b2:0e:6f:f1:9c:
         31:59:2f:30:7e:e0:aa:38:4a:d4:68:47:49:5d:e5:45:9f:41:
         ee:91:a9:c2:84:78:5a:5e:9f:da:40:66:07:95:3f:e8:ef:2a:
         b9:7d:ab:7b:16:38:7e:3a:fe:ce:d4:8d:2d:8e:99:88:3b:ce:
         dc:86:07:a7:e5:50:0a:2a:93:ed:99:e9:f3:a2:79:6a:11:32:
         c6:64:aa:a8:6b:d4:db:3c:39:a6:9d:2f:1c:cd:a6:c9:a7:e9:
         ae:c2:c9:56:48:3e:f8:86:52:24:f4:d0:61:ca:63:12:f9:6e:
         36:7f:9c:38:11:32:79:00:df:c5:31:67:47:3b:09:16:53:12:
         63:41:6c:be:8f:1c:48:b7:93:26:52:1a:48:0f:69:c0:29:6a:
         7b:df:d8:2b:68:b7:b3:47:66:7d:2a:32:75:ad:4a:9b:67:72:
         3a:c6:36:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:34:45 2024 by rpki-client on console-ams.rpki-client.org