Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/OwAiu5ysmJ-ypmjHanr_SXllq3w.roa
File:                     OwAiu5ysmJ-ypmjHanr_SXllq3w.roa (raw, json)
Hash identifier:          hLAZIRX57MtBsnc2C/T4Ha/qTmVP3n9vpVyIlNRgnDc=
Subject key identifier:   3B:00:22:BB:9C:AC:98:9F:B2:A6:68:C7:6A:7A:FF:49:79:65:AB:7C
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0D26
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OwAiu5ysmJ-ypmjHanr_SXllq3w.roa
Signing time:             Mon 15 Jan 2024 21:24:59 +0000
ROA not before:           Mon 15 Jan 2024 21:24:59 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     7482
IP address blocks:        124.219.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 20:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3366 (0xd26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Jan 15 21:24:59 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=3B0022BB9CAC989FB2A668C76A7AFF497965AB7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:b7:ee:69:f3:a4:4d:1c:51:c2:d5:24:69:
                    d1:db:3d:5f:be:c5:bd:3b:c9:80:6f:7d:87:19:8e:
                    b6:61:26:33:64:9e:84:53:bb:1c:d1:15:25:e5:42:
                    16:1c:8d:ca:74:7d:b5:31:e5:a9:04:99:99:b5:44:
                    45:ed:fc:92:62:a3:a9:1f:39:a2:da:a3:31:48:65:
                    98:ed:e3:a1:3e:45:45:d1:24:27:65:8c:17:4a:ee:
                    8c:62:e6:d6:8f:72:bc:8f:ee:ea:2a:7e:40:d4:34:
                    d6:e1:bc:b4:36:8a:28:70:bf:39:84:a0:ba:1c:55:
                    92:87:5e:ab:42:c5:28:f4:12:56:b9:fa:b0:bc:51:
                    c4:aa:3a:ed:94:77:1e:51:31:24:ca:71:fa:6b:48:
                    25:f8:1c:6e:f5:d6:a5:55:84:46:a4:18:82:55:69:
                    ca:df:20:2c:71:a7:80:42:ec:98:4d:a1:a9:00:57:
                    55:de:39:8f:06:f2:0d:9b:dd:dd:55:c7:b5:89:50:
                    e6:e6:e9:ad:16:fe:ae:0c:73:e0:4e:20:19:07:50:
                    fb:16:3a:87:b1:86:86:87:36:e2:76:ad:e2:5b:dd:
                    df:0b:19:9d:99:1b:5c:01:3b:5f:85:b9:39:80:71:
                    a9:bc:53:d0:92:56:ee:bf:56:cb:dd:f9:25:11:21:
                    b2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:00:22:BB:9C:AC:98:9F:B2:A6:68:C7:6A:7A:FF:49:79:65:AB:7C
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OwAiu5ysmJ-ypmjHanr_SXllq3w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.219.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4c:d6:ab:4e:4e:05:6e:24:88:de:94:eb:f7:a6:95:94:e7:e1:
         b6:15:68:43:6a:a1:13:81:bc:f8:ee:d8:96:d7:cf:27:2a:6a:
         7f:44:c1:eb:d9:25:61:71:31:d9:67:14:25:2e:b5:b9:c0:d4:
         79:9e:94:b4:60:e2:c6:76:4a:60:e6:bf:51:1b:c1:44:e2:01:
         a4:c5:3b:59:56:e4:10:5a:f5:d3:4d:96:a4:10:03:f8:57:6b:
         54:95:ba:23:a4:5e:41:fc:3d:c9:d7:77:41:5e:16:a8:f9:c5:
         73:48:84:95:a2:14:06:07:93:c4:11:4a:af:03:f4:3c:3c:df:
         c2:03:88:4f:a0:ca:15:f8:ba:60:3d:89:4e:29:81:b7:2e:63:
         d1:1c:b6:81:3c:8e:6a:09:36:99:27:80:0c:d0:a3:93:f2:49:
         6e:e6:04:bd:31:cb:02:a0:95:62:c8:c0:7c:c8:fc:cb:f4:7a:
         10:d1:cf:a3:15:b4:4b:6f:84:76:47:1f:a1:7e:74:82:42:ac:
         2e:87:59:dc:ea:e7:07:39:cf:15:63:59:76:f9:a8:be:97:bf:
         e3:a4:fa:ba:58:9b:f9:9d:85:f8:5f:9b:4f:a2:59:4e:53:7f:
         b7:48:4b:57:69:e4:54:f2:ac:10:a4:84:34:c1:c9:de:6b:4b:
         2c:18:3b:26
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDSYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTI0NTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNCMDAyMkJCOUNBQzk4
OUZCMkE2NjhDNzZBN0FGRjQ5Nzk2NUFCN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwprfuafOkTRxRwtUkadHbPV++xb07yYBvfYcZjrZhJjNknoRT
uxzRFSXlQhYcjcp0fbUx5akEmZm1REXt/JJio6kfOaLaozFIZZjt46E+RUXRJCdl
jBdK7oxi5taPcryP7uoqfkDUNNbhvLQ2iihwvzmEoLocVZKHXqtCxSj0Ela5+rC8
UcSqOu2Udx5RMSTKcfprSCX4HG711qVVhEakGIJVacrfICxxp4BC7JhNoakAV1Xe
OY8G8g2b3d1Vx7WJUObm6a0W/q4Mc+BOIBkHUPsWOoexhoaHNuJ2reJb3d8LGZ2Z
G1wBO1+FuTmAcam8U9CSVu6/Vsvd+SURIbJxAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUOwAiu5ysmJ+ypmjHanr/SXllq3wwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL093QWl1NXlzbUoteXBtakhhbnJfU1hs
bHEzdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd82wAwDQYJ
KoZIhvcNAQELBQADggEBAEzWq05OBW4kiN6U6/emlZTn4bYVaENqoROBvPju2JbX
zycqan9EwevZJWFxMdlnFCUutbnA1HmelLRg4sZ2SmDmv1EbwUTiAaTFO1lW5BBa
9dNNlqQQA/hXa1SVuiOkXkH8PcnXd0FeFqj5xXNIhJWiFAYHk8QRSq8D9Dw838ID
iE+gyhX4umA9iU4pgbcuY9EctoE8jmoJNpkngAzQo5PySW7mBL0xywKglWLIwHzI
/Mv0ehDRz6MVtEtvhHZHH6F+dIJCrC6HWdzq5wc5zxVjWXb5qL6Xv+Ok+rpYm/md
hfhfm0+iWU5Tf7dIS1dp5FTyrBCkhDTByd5rSywYOyY=
-----END CERTIFICATE-----
Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org