Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/AdELYAE_rBjgnPF6SVV-nJP5KMI.roa
File:                     AdELYAE_rBjgnPF6SVV-nJP5KMI.roa (raw, json)
Hash identifier:          5eduTSXIe6awGRLREDjPvW/MZKLjaMd/3Za9EFgSK4E=
Subject key identifier:   01:D1:0B:60:01:3F:AC:18:E0:9C:F1:7A:49:55:7E:9C:93:F9:28:C2
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0FFD
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AdELYAE_rBjgnPF6SVV-nJP5KMI.roa
Signing time:             Mon 26 Aug 2024 05:15:57 +0000
ROA not before:           Mon 26 Aug 2024 05:15:57 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     17709
IP address blocks:        222.250.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4093 (0xffd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Aug 26 05:15:57 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=01D10B60013FAC18E09CF17A49557E9C93F928C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:08:85:f1:4a:e7:07:12:63:6b:ee:b0:03:
                    19:4b:33:4c:a3:7f:11:ae:23:6a:28:4f:94:2f:19:
                    d3:65:80:03:50:ab:9e:4e:0b:1c:b8:72:c6:bc:0d:
                    f1:2d:25:d0:95:af:db:1b:1b:d2:50:de:33:e0:bf:
                    ea:d9:49:1e:47:91:a1:41:40:f2:ab:1d:36:3e:3b:
                    36:61:8f:0e:9e:6f:27:ac:cd:94:c7:38:fa:db:b8:
                    a1:84:bb:f3:13:b5:29:7e:c9:43:a6:df:34:3e:2f:
                    79:9f:db:cd:7d:77:36:1c:f8:7a:c2:43:bb:ad:5f:
                    7e:fe:2c:de:ce:01:b6:10:28:f2:91:bc:4a:ed:9f:
                    db:00:ef:8c:87:b7:80:43:d6:0b:c7:14:c4:da:fd:
                    93:1d:ab:53:07:9c:a4:b2:5f:c2:57:a0:78:63:55:
                    68:92:95:39:8f:cb:5c:b4:fb:de:c5:b8:51:3a:40:
                    29:77:1e:b9:8a:3a:f6:54:4e:2e:9e:cd:de:14:a6:
                    1a:76:a3:b5:39:06:b7:28:9d:cf:84:dd:7b:e0:69:
                    57:95:e2:21:cc:8f:8b:70:08:7a:14:df:71:48:6b:
                    d3:f4:cb:17:0d:9a:6f:01:51:56:d3:43:bb:fa:7d:
                    1b:a9:a6:7c:39:a8:fd:78:09:77:e3:f8:f4:90:42:
                    65:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D1:0B:60:01:3F:AC:18:E0:9C:F1:7A:49:55:7E:9C:93:F9:28:C2
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AdELYAE_rBjgnPF6SVV-nJP5KMI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.250.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:85:b2:ef:b4:18:1a:06:c4:ee:34:e2:1a:a9:d6:5e:96:02:
         97:9a:48:21:f7:42:3c:bf:a4:33:cd:ab:b1:36:62:89:6d:0e:
         a2:3a:34:0c:43:a0:0c:91:f0:b4:15:a6:85:32:5d:2f:12:f2:
         a5:e1:18:0f:ed:4e:d7:02:88:a5:a0:89:8c:a2:86:d5:a3:9f:
         ae:d9:34:13:3e:a8:9d:d4:b3:83:f0:77:b3:ce:cf:9a:44:a2:
         03:d6:45:85:4b:60:8c:e1:08:07:6f:e9:00:0c:8b:5e:19:a1:
         ec:6c:9e:87:29:2d:ae:91:d1:d9:9e:c2:cb:50:98:9c:ba:d9:
         33:60:61:0f:93:63:d3:2f:8f:23:95:60:7a:6c:67:85:b3:ea:
         86:19:75:c5:5f:2d:dd:41:13:a6:19:0c:fe:69:a9:6d:37:79:
         18:0c:c7:44:42:a7:69:9f:16:25:b4:2c:8b:f2:2c:e8:ae:c1:
         4c:61:36:05:0e:e6:21:1f:f2:98:c3:36:7d:27:51:5b:99:84:
         42:3b:c0:10:da:e8:f5:b2:cc:9c:1a:2e:74:2c:eb:0d:25:6a:
         08:ff:f9:5a:6f:53:49:26:7f:7b:02:31:a5:79:f3:2a:85:5d:
         4d:c8:7f:ce:96:44:ac:67:37:3b:27:a2:d0:78:6d:60:f0:26:
         6d:e2:36:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:04 2024 by rpki-client on console-ams.rpki-client.org