Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/vyc75mSR50VP0Bly7TWyOd4sceU.roa
File:                     vyc75mSR50VP0Bly7TWyOd4sceU.roa (raw, json)
Hash identifier:          u3oVzMrqxSgAJ+0YSuSYdim8W8rKAyXZojJ4qC0yvgg=
Subject key identifier:   BF:27:3B:E6:64:91:E7:45:4F:D0:19:72:ED:35:B2:39:DE:2C:71:E5
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       1021
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/vyc75mSR50VP0Bly7TWyOd4sceU.roa
Signing time:             Mon 26 Aug 2024 05:13:24 +0000
ROA not before:           Mon 26 Aug 2024 05:13:24 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     17809
IP address blocks:        113.61.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4129 (0x1021)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Aug 26 05:13:24 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=BF273BE66491E7454FD01972ED35B239DE2C71E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:a6:5d:7c:e5:da:e6:fc:9c:d4:29:df:18:
                    df:2d:3a:d3:a3:28:da:d5:11:53:07:dc:c1:c7:8d:
                    8b:e6:15:06:75:3c:4d:fe:11:00:ff:e2:ea:b0:30:
                    49:6c:d4:ce:17:78:e8:b8:46:56:b8:a9:33:99:a2:
                    f6:69:0a:56:c3:b6:d3:78:07:b2:63:dc:cb:36:28:
                    3e:38:a2:e2:2c:5b:e9:a4:d1:e8:0c:17:36:70:46:
                    27:d6:6a:a7:ce:1f:db:bf:28:a5:bf:7b:26:5f:31:
                    4d:74:54:d3:e2:8b:a1:e8:fd:b8:a5:e1:48:0e:1e:
                    d2:40:a2:4f:21:e4:d1:0a:a9:05:96:33:46:ef:4d:
                    bc:4e:d4:4a:9e:1e:80:33:f1:01:af:12:46:30:1e:
                    ff:11:40:10:2a:21:a7:b4:19:6b:26:db:f5:c8:53:
                    a5:c2:df:7e:18:80:a3:49:52:29:8b:6e:86:84:c9:
                    71:f4:3c:2c:21:c8:ff:d2:59:ab:96:f5:18:55:88:
                    cb:0e:9f:3d:54:96:56:0b:dc:09:60:13:0e:e4:65:
                    7f:d6:4a:9a:72:a3:73:b3:be:17:44:a4:25:b3:43:
                    7f:8a:6c:94:1a:00:4d:63:f8:5f:9d:7f:e7:24:cf:
                    b0:70:21:83:0c:b6:35:34:be:56:5b:f7:de:fe:b3:
                    e2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:27:3B:E6:64:91:E7:45:4F:D0:19:72:ED:35:B2:39:DE:2C:71:E5
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/vyc75mSR50VP0Bly7TWyOd4sceU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:53:41:8d:2f:24:f3:15:7b:0d:3f:ba:b9:1b:56:83:01:fc:
         82:ce:6e:19:3e:d0:53:fd:10:0d:e8:e1:ce:54:1b:b7:76:bf:
         f0:2a:df:8f:5f:08:ca:e2:37:b7:de:df:44:f5:fc:31:58:25:
         c9:0f:0d:47:98:4f:51:1a:e1:b1:0c:54:cd:03:da:85:df:14:
         ae:eb:35:95:eb:96:a5:54:30:50:3d:54:7e:8f:7d:2d:bf:6c:
         d6:9f:7e:2d:01:64:52:20:12:7e:86:0d:d3:ac:db:ed:f8:98:
         c8:23:ba:2e:ba:c6:a8:1f:33:4f:f0:b6:e2:9e:ca:e8:46:3b:
         5f:06:63:cf:2f:9b:e5:95:55:03:30:c9:f3:7a:cc:66:f3:ab:
         cb:f7:b8:75:ad:cb:a6:45:a7:59:68:18:c8:46:15:f0:52:a6:
         9f:7d:fe:c1:66:50:ef:98:34:fd:12:18:a5:9d:4b:d7:94:cc:
         82:9f:b6:1d:56:83:bd:13:9a:42:40:2a:9c:99:d9:63:1d:a1:
         28:64:14:23:0c:f9:25:67:cc:42:25:7c:3b:27:8e:e8:09:97:
         95:c2:ce:73:c5:a1:71:f5:d8:65:4a:25:23:b8:53:da:11:28:
         50:d5:c4:a7:99:47:73:bb:0b:a0:fe:f2:7d:0b:a0:13:2b:f7:
         8c:65:40:a9
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICECEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw
NTEzMjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJGMjczQkU2NjQ5MUU3
NDU0RkQwMTk3MkVEMzVCMjM5REUyQzcxRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1MKZdfOXa5vyc1CnfGN8tOtOjKNrVEVMH3MHHjYvmFQZ1PE3+
EQD/4uqwMEls1M4XeOi4Rla4qTOZovZpClbDttN4B7Jj3Ms2KD44ouIsW+mk0egM
FzZwRifWaqfOH9u/KKW/eyZfMU10VNPii6Ho/bil4UgOHtJAok8h5NEKqQWWM0bv
TbxO1EqeHoAz8QGvEkYwHv8RQBAqIae0GWsm2/XIU6XC334YgKNJUimLboaEyXH0
PCwhyP/SWauW9RhViMsOnz1UllYL3AlgEw7kZX/WSppyo3OzvhdEpCWzQ3+KbJQa
AE1j+F+df+ckz7BwIYMMtjU0vlZb997+s+JhAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUvyc75mSR50VP0Bly7TWyOd4sceUwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvdnljNzVtU1I1MFZQMEJseTdUV3lP
ZDRzY2VVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHE9qjAN
BgkqhkiG9w0BAQsFAAOCAQEACVNBjS8k8xV7DT+6uRtWgwH8gs5uGT7QU/0QDejh
zlQbt3a/8Crfj18IyuI3t97fRPX8MVglyQ8NR5hPURrhsQxUzQPahd8Urus1leuW
pVQwUD1Ufo99Lb9s1p9+LQFkUiASfoYN06zb7fiYyCO6LrrGqB8zT/C24p7K6EY7
XwZjzy+b5ZVVAzDJ83rMZvOry/e4da3LpkWnWWgYyEYV8FKmn33+wWZQ75g0/RIY
pZ1L15TMgp+2HVaDvROaQkAqnJnZYx2hKGQUIwz5JWfMQiV8OyeO6AmXlcLOc8Wh
cfXYZUolI7hT2hEoUNXEp5lHc7sLoP7yfQugEyv3jGVAqQ==
-----END CERTIFICATE-----
Generated at Sat Sep 21 00:29:40 2024 by rpki-client on console-fra.rpki-client.org