Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Fvq3rFZFiPw7ED-odX0wB3BlLeY.roa
File:                     Fvq3rFZFiPw7ED-odX0wB3BlLeY.roa (raw, json)
Hash identifier:          xiTjCN1eFZifk2L4J+QqdxOM2OxdvryRYZp0wnB6mEk=
Subject key identifier:   16:FA:B7:AC:56:45:88:FC:3B:10:3F:A8:75:7D:30:07:70:65:2D:E6
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0CE4
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Fvq3rFZFiPw7ED-odX0wB3BlLeY.roa
Signing time:             Mon 15 Jan 2024 21:23:39 +0000
ROA not before:           Mon 15 Jan 2024 21:23:39 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17709
IP address blocks:        210.85.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 20:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3300 (0xce4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Jan 15 21:23:39 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=16FAB7AC564588FC3B103FA8757D300770652DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:03:39:2a:8d:36:6d:13:c4:4b:c4:dc:53:4e:
                    cf:56:59:75:4d:13:65:37:49:f9:34:c6:6e:5d:8f:
                    d7:ac:db:1b:b9:73:00:fe:4e:01:70:e3:54:e8:70:
                    5d:02:21:98:af:2e:52:3b:ae:2b:0d:06:96:e9:fc:
                    67:04:31:0b:05:fc:2c:f2:bd:48:e0:b6:c9:82:e3:
                    43:ce:9c:2f:31:1d:d7:ea:02:32:b2:50:2e:35:1e:
                    91:16:f9:95:33:37:23:64:e8:83:9e:1d:8e:7c:91:
                    b0:d2:fa:e5:20:8b:42:d3:e2:e1:96:1e:60:47:bd:
                    64:a8:b3:33:a2:3f:e0:99:a1:40:16:2e:c2:6a:a2:
                    95:53:5d:75:8e:66:22:1d:71:fe:8f:1b:7a:f9:86:
                    a1:b6:e3:45:af:14:1b:a9:d1:2d:9a:16:dc:c9:3d:
                    bc:d2:db:41:f5:06:45:e2:5c:f7:ce:f7:f4:3b:34:
                    3a:e3:3e:0e:77:17:86:85:0c:5a:53:4e:7a:fc:73:
                    4d:54:08:9b:5c:d2:ef:fc:32:3e:f2:c0:0a:ed:86:
                    31:e7:c0:1a:de:60:fa:db:7e:d4:db:f2:e1:1a:8c:
                    d5:8c:46:44:4f:31:be:5b:f9:2b:8a:8d:91:a3:f2:
                    74:32:01:54:1c:b0:af:ba:4f:c8:a1:1a:2e:50:68:
                    d7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FA:B7:AC:56:45:88:FC:3B:10:3F:A8:75:7D:30:07:70:65:2D:E6
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Fvq3rFZFiPw7ED-odX0wB3BlLeY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.85.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3e:c8:2a:74:95:20:25:bb:e8:fa:b3:5b:9f:56:c4:ae:ec:23:
         c0:79:54:2b:89:48:d3:bc:ac:e4:d6:3b:8e:9c:bb:a7:fd:b0:
         29:91:10:95:2c:d6:fe:97:4b:e8:3a:5b:a1:ae:58:11:4d:ea:
         38:fc:9c:9f:de:a2:6c:ba:50:13:17:f7:40:01:84:84:28:60:
         e9:0f:86:5d:95:e4:d9:27:14:8b:09:71:73:05:14:a5:43:c6:
         cc:ba:eb:15:c0:7f:82:a9:71:03:1e:0b:78:b8:98:9d:55:96:
         04:bc:9b:5a:b8:3e:2b:15:49:d4:33:52:de:8e:fc:5f:ff:4c:
         d0:20:f9:a3:e0:57:c6:5c:55:96:c3:9b:76:14:8f:ea:97:49:
         dd:3a:8d:b2:45:8e:81:b7:59:23:b6:dc:ac:62:a7:70:6d:19:
         d7:f8:9a:53:03:5c:fa:2b:1e:73:3b:75:cb:1e:c6:1d:c7:15:
         ab:5a:83:6d:60:ed:c6:bd:bd:7d:c8:68:95:27:2d:f1:ba:d5:
         4b:d9:df:5a:ec:21:88:b5:86:95:c7:21:fc:28:d9:a1:20:c0:
         9e:3f:9c:cc:17:c8:df:88:bf:1a:7e:90:80:4f:9d:95:5e:b6:
         70:69:9e:d2:55:c1:1c:c6:ee:a8:7b:5d:71:79:7b:60:3e:4e:
         6a:b6:d3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org