Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/GUka7EMs8mo-h_wdbrtMm04EaUE.roa
File:                     GUka7EMs8mo-h_wdbrtMm04EaUE.roa (raw, json)
Hash identifier:          TnyjJ103FptrSvcl8hE4Ob7dXfDNDsaCuyga14MZoCk=
Subject key identifier:   19:49:1A:EC:43:2C:F2:6A:3E:87:FC:1D:6E:BB:4C:9B:4E:04:69:41
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0E3B
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/GUka7EMs8mo-h_wdbrtMm04EaUE.roa
Signing time:             Fri 01 Sep 2023 08:49:27 +0000
ROA not before:           Fri 01 Sep 2023 08:49:27 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17809
IP address blocks:        113.61.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3643 (0xe3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Sep  1 08:49:27 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=19491AEC432CF26A3E87FC1D6EBB4C9B4E046941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:16:fe:b7:cf:df:15:db:40:ce:66:9c:10:
                    04:44:66:f9:5b:60:0f:cb:f4:eb:60:94:8b:98:52:
                    c9:29:fd:39:af:6a:52:f2:2e:c0:ba:b3:bd:ca:ef:
                    46:01:ea:b6:0e:e3:d7:b7:be:09:2f:0b:77:3d:1a:
                    54:c5:10:15:c3:2a:c9:d4:20:7f:b0:ff:34:c9:c3:
                    ec:4b:a6:a9:23:89:ed:fd:ac:9c:df:1d:bf:f2:6b:
                    50:bf:cf:9f:a2:56:20:e5:d9:e4:98:a7:0f:e5:7b:
                    60:8f:86:a6:38:d1:41:c1:ff:ce:1f:bd:8a:1a:a6:
                    3a:59:d4:0d:f7:b0:ae:38:8e:72:a4:3b:53:1a:b0:
                    07:08:1a:1d:6d:ac:58:48:c5:47:a0:3f:4a:39:a0:
                    54:b8:2e:94:1a:21:8c:e9:a9:ee:86:ae:8c:fb:ea:
                    5f:57:92:6a:96:99:c3:a3:8b:62:57:30:17:91:17:
                    24:ac:5f:f6:bf:07:fc:eb:e6:e9:51:e3:c6:69:20:
                    8d:d7:e5:ac:e3:ba:a7:41:ea:aa:73:45:99:70:a9:
                    5b:f9:95:35:35:f7:41:2e:cd:d5:52:5e:7e:7d:c0:
                    89:40:33:9d:24:4a:2f:cf:18:f1:b5:24:28:36:30:
                    2d:b8:66:a3:10:b2:b4:4e:10:5c:1e:f3:2e:22:2e:
                    27:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:49:1A:EC:43:2C:F2:6A:3E:87:FC:1D:6E:BB:4C:9B:4E:04:69:41
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/GUka7EMs8mo-h_wdbrtMm04EaUE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:74:ec:4a:80:ae:15:0a:b3:7b:d8:2e:4c:9f:7c:f8:05:c0:
         32:6e:f4:38:f9:64:8e:5d:c1:9e:98:eb:32:bc:0c:3e:8e:fa:
         da:f4:d8:d0:59:51:4e:42:6d:f6:43:c1:82:91:7d:ca:e3:6a:
         de:1a:02:8d:c9:9e:94:5a:78:ef:e7:68:39:61:8b:2e:ec:c1:
         eb:cf:bc:1e:d0:39:c7:a1:4c:e2:a1:13:f0:6e:cd:62:d7:89:
         41:a6:05:8d:f5:e0:a0:ae:ea:b0:1e:4b:a2:f7:4b:9a:c3:88:
         ec:8d:6a:27:7d:85:31:39:14:04:95:73:9d:0a:e8:bf:9d:ac:
         21:28:53:f7:51:c2:20:66:71:8b:80:cd:8c:da:68:16:86:55:
         3d:ec:3d:54:00:32:50:5c:0a:53:43:dc:f3:82:42:4f:33:ba:
         08:96:6c:0a:fe:80:67:18:50:c9:c4:68:00:43:0a:b6:7d:cc:
         de:a0:9a:b8:85:03:4e:7f:86:33:24:8f:29:ba:94:65:d8:0e:
         7a:71:05:d9:47:28:57:d0:2f:93:fc:a0:65:66:96:d0:bb:05:
         70:31:0b:82:e7:1c:5f:10:c2:ba:1b:c5:e8:55:ef:38:14:60:
         89:73:0f:6f:b5:49:5c:fa:0e:10:e6:8d:52:8d:9c:df:f4:9b:
         e2:98:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 06:07:08 2024 by rpki-client on console-ams.rpki-client.org