Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/SlcXwU8wuUJoyiXR-sU_vQr14_8.roa
File:                     SlcXwU8wuUJoyiXR-sU_vQr14_8.roa (raw, json)
Hash identifier:          XqowuSIc5t2cShtSoJoJJDw7ZQytuyxnzV8qTSkGSZI=
Subject key identifier:   4A:57:17:C1:4F:30:B9:42:68:CA:25:D1:FA:C5:3F:BD:0A:F5:E3:FF
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0D34
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/SlcXwU8wuUJoyiXR-sU_vQr14_8.roa
Signing time:             Mon 15 Jan 2024 21:25:17 +0000
ROA not before:           Mon 15 Jan 2024 21:25:17 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     7482
IP address blocks:        210.201.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 13:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3380 (0xd34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Jan 15 21:25:17 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=4A5717C14F30B94268CA25D1FAC53FBD0AF5E3FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6c:6e:65:b5:16:ce:b1:ad:b4:43:05:63:b3:
                    aa:8e:d9:77:6d:d9:98:c1:05:fc:f6:e4:4b:df:f9:
                    dc:86:a2:72:3b:bd:9a:02:86:aa:55:c6:0b:30:c2:
                    59:13:2d:b6:bb:eb:90:be:b4:4e:ef:1d:71:a6:78:
                    0f:0f:65:75:26:64:70:d3:b7:c4:aa:9b:62:f7:e8:
                    3e:65:49:68:dd:b9:5e:2e:51:65:2c:92:24:8c:5f:
                    dc:14:25:e0:18:f0:1b:89:10:32:89:cf:9b:4d:44:
                    bd:0c:c7:b3:c9:88:28:a9:e8:ec:41:3d:79:bc:36:
                    1b:90:a3:4d:2a:79:6b:de:b3:01:1a:82:29:d6:12:
                    a9:6d:19:4c:0b:0f:1f:f3:ec:c9:13:3a:6e:8d:b2:
                    ad:2c:56:d0:5f:03:93:42:62:9c:12:bb:db:45:2f:
                    80:a7:70:0a:bc:28:24:4d:ec:98:78:28:eb:bd:c8:
                    30:7e:b8:34:05:6a:07:cd:c2:f1:c4:91:ed:0b:46:
                    fd:f5:f4:67:08:e6:16:7a:8e:68:08:ed:25:33:1c:
                    a8:8e:ae:ac:e2:cc:81:c7:91:3c:47:7f:68:18:92:
                    4b:95:fb:99:21:fc:a9:32:5b:53:a9:3b:0c:9b:6c:
                    1e:46:d8:1a:f2:70:44:11:93:dc:15:d9:5f:45:5d:
                    31:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:57:17:C1:4F:30:B9:42:68:CA:25:D1:FA:C5:3F:BD:0A:F5:E3:FF
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/SlcXwU8wuUJoyiXR-sU_vQr14_8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.201.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:57:e4:45:53:62:84:ab:73:5e:1b:9b:b3:bc:91:98:fc:80:
         a2:92:34:c9:c7:e9:e4:e9:fe:ee:85:03:3d:60:50:9b:54:c1:
         b4:37:76:82:ed:d1:aa:d7:cc:1b:a9:2a:a2:96:2c:23:49:e7:
         93:57:5c:b0:78:50:4d:7d:39:23:d9:94:0d:52:03:37:09:38:
         a9:c0:26:05:dc:b8:d2:72:23:7d:c0:12:12:02:6b:93:aa:00:
         20:27:3d:9f:e6:f8:fe:5c:8d:f0:f0:a2:8d:92:e8:f8:a2:ca:
         1d:9b:a3:fd:d3:07:00:3f:92:64:c2:fb:8f:7e:ef:0a:75:f6:
         b1:de:61:70:56:73:43:36:9e:f3:81:20:28:85:98:ea:0d:27:
         a7:2c:96:89:fc:9e:e0:b1:e1:ab:39:11:a9:b3:74:0b:fd:71:
         d3:08:cd:6b:07:2c:c9:82:64:e5:74:a1:04:55:55:fb:0c:39:
         fc:29:74:ca:58:0a:be:aa:06:3e:37:cb:d3:7e:21:dd:ec:0f:
         89:37:c8:a6:40:2c:84:ed:c9:30:0b:13:a7:28:64:d4:8a:23:
         eb:9a:ae:d8:5c:eb:90:c3:ed:c8:94:37:c8:86:71:16:0e:15:
         5d:f6:d8:43:25:38:fc:3b:f2:56:61:3d:fc:bb:4c:23:c2:ce:
         79:10:73:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:48:26 2024 by rpki-client on console-ams.rpki-client.org