Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/DYaD4A7v-13S-R_5WUaYteP1uOo.roa
File:                     DYaD4A7v-13S-R_5WUaYteP1uOo.roa (raw, json)
Hash identifier:          tjsnhPR4lU+jvGb2Oe8ILdXQXcRBLtH/eMAMhSRnmwQ=
Subject key identifier:   0D:86:83:E0:0E:EF:FB:5D:D2:F9:1F:F9:59:46:98:B5:E3:F5:B8:EA
Certificate issuer:       /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial:       09B9
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/DYaD4A7v-13S-R_5WUaYteP1uOo.roa
Signing time:             Mon 26 Aug 2024 05:15:40 +0000
ROA not before:           Mon 26 Aug 2024 05:15:40 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131671
IP address blocks:        103.146.212.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2489 (0x9b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
        Validity
            Not Before: Aug 26 05:15:40 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0D8683E00EEFFB5DD2F91FF9594698B5E3F5B8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:40:56:1e:ec:1d:97:0a:5d:80:92:45:fd:66:
                    20:b2:39:95:7e:d1:bf:c8:d9:aa:06:34:ef:a1:55:
                    d8:83:57:2d:ec:38:68:ff:fb:ba:a6:a3:7f:26:5d:
                    d2:1e:bd:d6:62:ea:fa:ea:a3:d6:b0:8f:32:c0:4c:
                    08:d4:3f:7b:eb:c4:43:dc:c2:89:26:84:cf:4a:63:
                    c4:54:71:45:01:2a:79:71:14:64:6b:19:59:cd:f6:
                    04:d8:c9:6f:df:4d:94:ab:d8:dd:06:6c:75:bc:2b:
                    d7:3e:d5:ba:4b:ed:e8:71:99:86:96:37:15:66:4c:
                    22:aa:b3:cf:86:f4:05:f7:be:ff:99:5d:6b:b2:92:
                    60:ae:44:58:45:6e:54:92:bd:0f:9a:67:9a:1e:7a:
                    ce:52:9e:2d:af:6a:33:ce:a6:37:75:62:35:0c:39:
                    b4:5e:6b:59:f7:55:88:a9:db:86:41:ee:51:64:79:
                    bf:a1:c4:f5:7d:0f:b4:ad:98:51:a9:3a:86:05:50:
                    10:2f:4c:d8:22:a0:61:4f:50:6f:7b:14:46:56:cc:
                    5a:a3:d0:87:1a:ea:4a:fe:59:33:0e:a9:93:7d:26:
                    92:1c:6e:da:fc:28:07:5b:8c:0f:f9:cc:48:03:06:
                    37:d3:ea:d3:bf:a5:cf:19:35:06:a7:b5:92:82:11:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:86:83:E0:0E:EF:FB:5D:D2:F9:1F:F9:59:46:98:B5:E3:F5:B8:EA
            X509v3 Authority Key Identifier:
                keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/DYaD4A7v-13S-R_5WUaYteP1uOo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:85:76:f8:fc:34:60:e0:ba:eb:3a:da:67:18:53:cb:d0:fb:
         10:dd:69:2f:72:ac:28:63:fb:9b:e6:84:21:4e:96:4f:be:70:
         30:33:9b:d0:8f:cd:eb:3e:c0:85:99:40:ac:ff:15:3e:48:c9:
         23:7a:d9:a9:f5:90:5e:39:ad:8d:25:ad:3c:83:55:ab:ab:61:
         ca:34:4f:e1:24:87:53:5e:65:bf:fe:a9:3c:99:86:f9:3c:9f:
         9e:49:c9:e5:9d:a2:37:8a:0b:b8:6d:0e:22:ed:25:65:93:ee:
         f0:12:e2:fb:4b:f0:c8:82:e9:5f:4c:f5:b0:2b:12:c4:62:0b:
         7d:c5:b5:34:05:5d:8d:40:5e:5f:bd:47:60:f0:8b:1e:3e:7d:
         b5:f3:58:9c:d3:99:3d:a5:b9:04:ed:c5:96:57:2b:cc:a0:24:
         9b:3e:ad:25:f3:2d:cc:70:56:fa:fd:74:b0:fa:cb:9c:16:a4:
         d4:40:7e:f3:6a:e6:fb:2c:8d:4b:39:97:e7:14:35:df:6d:10:
         7c:3a:52:7a:84:64:79:ec:84:20:8c:7e:61:45:da:c2:db:7b:
         d2:d1:88:e3:e0:01:c4:30:91:62:f6:30:bc:3b:99:00:c0:ae:
         d7:0e:a6:02:88:b7:e9:8e:24:da:92:03:8a:df:79:4c:8e:b9:
         dc:51:3a:9f
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCbkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTlE
RUYyQ0Y4MjhGMEQ5QUI2QUQ5NEY0MjYxMzE3NjREMjU0Q0M1QzAeFw0yNDA4MjYw
NTE1NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBEODY4M0UwMEVFRkZC
NUREMkY5MUZGOTU5NDY5OEI1RTNGNUI4RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjQFYe7B2XCl2AkkX9ZiCyOZV+0b/I2aoGNO+hVdiDVy3sOGj/
+7qmo38mXdIevdZi6vrqo9awjzLATAjUP3vrxEPcwokmhM9KY8RUcUUBKnlxFGRr
GVnN9gTYyW/fTZSr2N0GbHW8K9c+1bpL7ehxmYaWNxVmTCKqs8+G9AX3vv+ZXWuy
kmCuRFhFblSSvQ+aZ5oees5Sni2vajPOpjd1YjUMObRea1n3VYip24ZB7lFkeb+h
xPV9D7StmFGpOoYFUBAvTNgioGFPUG97FEZWzFqj0Ica6kr+WTMOqZN9JpIcbtr8
KAdbjA/5zEgDBjfT6tO/pc8ZNQantZKCEVd/AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUDYaD4A7v+13S+R/5WUaYteP1uOowHwYDVR0jBBgwFoAUWd7yz4KPDZq2rZT0
JhMXZNJUzFwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFOVEFT
WS9XZDd5ejRLUERacTJyWlQwSmhNWFpOSlV6RncuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1dkN3l6NEtQRFpxMnJaVDBKaE1YWk5KVXpGdy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTlRBU1kvRFlhRDRBN3YtMTNTLVJf
NVdVYVl0ZVAxdU9vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AWeS1DANBgkqhkiG9w0BAQsFAAOCAQEAQYV2+Pw0YOC66zraZxhTy9D7EN1pL3Ks
KGP7m+aEIU6WT75wMDOb0I/N6z7AhZlArP8VPkjJI3rZqfWQXjmtjSWtPINVq6th
yjRP4SSHU15lv/6pPJmG+TyfnknJ5Z2iN4oLuG0OIu0lZZPu8BLi+0vwyILpX0z1
sCsSxGILfcW1NAVdjUBeX71HYPCLHj59tfNYnNOZPaW5BO3FllcrzKAkmz6tJfMt
zHBW+v10sPrLnBak1EB+82rm+yyNSzmX5xQ1320QfDpSeoRkeeyEIIx+YUXawtt7
0tGI4+ABxDCRYvYwvDuZAMCu1w6mAoi36Y4k2pIDit95TI653FE6nw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:50 2024 by rpki-client on console-fra.rpki-client.org