Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/6c_3uaVqWg3GcvpMAiAcUs7Ywa4.roa
File:                     6c_3uaVqWg3GcvpMAiAcUs7Ywa4.roa (raw, json)
Hash identifier:          3mUFObv+hMcO0cwIZW9BrOjysP5E39hM+HxBwte8yeo=
Subject key identifier:   E9:CF:F7:B9:A5:6A:5A:0D:C6:72:FA:4C:02:20:1C:52:CE:D8:C1:AE
Certificate issuer:       /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial:       09B8
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/6c_3uaVqWg3GcvpMAiAcUs7Ywa4.roa
Signing time:             Mon 26 Aug 2024 05:15:40 +0000
ROA not before:           Mon 26 Aug 2024 05:15:40 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131671
IP address blocks:        103.146.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2488 (0x9b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
        Validity
            Not Before: Aug 26 05:15:40 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E9CFF7B9A56A5A0DC672FA4C02201C52CED8C1AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:26:d2:93:2a:00:15:1f:80:bf:12:c7:a5:
                    a2:88:87:57:25:2b:8a:38:f2:d9:61:ef:0e:c4:4e:
                    7f:d0:b5:f0:af:98:07:9f:9f:39:e1:9b:9d:ef:df:
                    5b:76:a3:17:2f:a5:0a:e1:ad:9d:97:e7:51:3a:26:
                    06:65:84:30:fa:05:a1:61:ec:16:cb:77:f8:1a:9e:
                    6c:e5:94:32:3d:bf:b4:27:c9:51:ed:24:d1:f6:6a:
                    57:67:fa:34:11:de:f7:ee:8a:76:9a:07:0c:ee:78:
                    e0:7c:39:cd:5d:67:8e:04:c6:b6:a8:8f:83:34:21:
                    f8:f3:da:09:e9:a2:16:35:84:67:9b:03:75:ff:d9:
                    2c:c3:15:66:fd:61:33:6e:3e:e4:2e:ac:7a:97:a7:
                    02:59:a6:4e:e3:78:63:41:30:14:f9:2f:21:4f:aa:
                    de:fb:26:96:15:69:21:56:c1:9a:29:c8:fe:ad:58:
                    b7:df:71:12:43:5b:d8:4e:91:83:05:b3:bf:bc:25:
                    b2:a8:81:d3:e9:76:95:80:31:8c:ac:ba:00:e1:42:
                    47:34:18:78:fd:70:86:9d:5b:2d:8f:03:53:7b:ff:
                    42:2c:76:11:5d:95:88:31:34:b6:b3:9b:5d:77:db:
                    09:58:1c:10:20:bf:69:75:51:cf:90:23:53:dd:4a:
                    fc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CF:F7:B9:A5:6A:5A:0D:C6:72:FA:4C:02:20:1C:52:CE:D8:C1:AE
            X509v3 Authority Key Identifier:
                keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/6c_3uaVqWg3GcvpMAiAcUs7Ywa4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:da:dc:cf:04:b6:44:06:fc:c6:ca:ac:0d:e2:56:da:27:3d:
         b9:14:cf:fb:c2:fe:2d:23:14:df:7f:ea:29:e0:04:04:4c:ae:
         ff:f9:d3:4d:aa:e0:a3:68:43:fb:2f:aa:96:25:a5:e6:a3:85:
         fb:bf:1f:11:24:a9:ab:3b:64:5d:78:9f:fe:ef:0e:e9:6c:59:
         66:14:1b:60:94:3c:82:45:81:ee:a2:4f:31:45:45:73:5b:45:
         1a:ab:b5:b2:91:93:9e:cb:84:2c:6d:39:39:3d:36:f8:67:5a:
         fa:b8:80:28:22:f6:41:74:31:be:10:aa:4e:1a:ed:f2:a9:a4:
         3d:ad:55:14:08:b2:ff:b8:6e:bb:8f:23:61:76:e1:05:d2:d0:
         64:3f:c9:16:6f:ab:fb:ec:f5:da:0e:b2:e8:cd:50:3f:15:c5:
         fb:31:83:25:1e:74:db:85:10:3c:ab:c3:ec:d8:fd:b5:c5:bb:
         00:18:ba:16:ba:e8:be:02:99:6b:f4:74:ea:be:ac:8f:13:d3:
         ed:dc:1d:a2:6d:00:0d:e9:7d:91:80:2e:80:a4:4a:e3:dd:95:
         f2:2e:c0:28:b6:5a:54:d8:e4:58:3e:f2:8f:28:eb:4b:45:1b:
         53:4c:2a:54:9f:ff:19:c8:cc:4b:c8:63:1f:d0:05:5d:23:8c:
         12:18:67:7b
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTlE
RUYyQ0Y4MjhGMEQ5QUI2QUQ5NEY0MjYxMzE3NjREMjU0Q0M1QzAeFw0yNDA4MjYw
NTE1NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU5Q0ZGN0I5QTU2QTVB
MERDNjcyRkE0QzAyMjAxQzUyQ0VEOEMxQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5bSbSkyoAFR+AvxLHpaKIh1clK4o48tlh7w7ETn/QtfCvmAef
nznhm53v31t2oxcvpQrhrZ2X51E6JgZlhDD6BaFh7BbLd/ganmzllDI9v7QnyVHt
JNH2aldn+jQR3vfuinaaBwzueOB8Oc1dZ44Exraoj4M0Ifjz2gnpohY1hGebA3X/
2SzDFWb9YTNuPuQurHqXpwJZpk7jeGNBMBT5LyFPqt77JpYVaSFWwZopyP6tWLff
cRJDW9hOkYMFs7+8JbKogdPpdpWAMYysugDhQkc0GHj9cIadWy2PA1N7/0IsdhFd
lYgxNLazm1132wlYHBAgv2l1Uc+QI1PdSvx5AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU6c/3uaVqWg3GcvpMAiAcUs7Ywa4wHwYDVR0jBBgwFoAUWd7yz4KPDZq2rZT0
JhMXZNJUzFwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFOVEFT
WS9XZDd5ejRLUERacTJyWlQwSmhNWFpOSlV6RncuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1dkN3l6NEtQRFpxMnJaVDBKaE1YWk5KVXpGdy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTlRBU1kvNmNfM3VhVnFXZzNHY3Zw
TUFpQWNVczdZd2E0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGeS1TANBgkqhkiG9w0BAQsFAAOCAQEAntrczwS2RAb8xsqsDeJW2ic9uRTP+8L+
LSMU33/qKeAEBEyu//nTTargo2hD+y+qliWl5qOF+78fESSpqztkXXif/u8O6WxZ
ZhQbYJQ8gkWB7qJPMUVFc1tFGqu1spGTnsuELG05OT02+Gda+riAKCL2QXQxvhCq
Thrt8qmkPa1VFAiy/7huu48jYXbhBdLQZD/JFm+r++z12g6y6M1QPxXF+zGDJR50
24UQPKvD7Nj9tcW7ABi6FrrovgKZa/R06r6sjxPT7dwdom0ADel9kYAugKRK492V
8i7AKLZaVNjkWD7yjyjrS0UbU0wqVJ//GcjMS8hjH9AFXSOMEhhnew==
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:36 2024 by rpki-client on console-fra.rpki-client.org