Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/qV1k02Rs0xhoBqdqv8RLkeF2exM.roa
File:                     qV1k02Rs0xhoBqdqv8RLkeF2exM.roa (raw, json)
Hash identifier:          nQMPhifmoIR9AM/sU8D4hSrjP0xHqHFSxNkKjcf1+wA=
Subject key identifier:   A9:5D:64:D3:64:6C:D3:18:68:06:A7:6A:BF:C4:4B:91:E1:76:7B:13
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0E4F
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/qV1k02Rs0xhoBqdqv8RLkeF2exM.roa
Signing time:             Fri 19 Apr 2024 07:51:23 +0000
ROA not before:           Fri 19 Apr 2024 07:51:23 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     4780
IP address blocks:        222.157.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 20:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3663 (0xe4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Apr 19 07:51:23 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=A95D64D3646CD3186806A76ABFC44B91E1767B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:9a:bb:86:35:c9:b2:43:f9:1f:9d:75:31:
                    fd:31:55:60:05:94:e8:7f:81:b9:de:e5:9c:a3:d1:
                    43:5a:3c:c4:07:a7:97:98:9f:37:82:03:b4:9d:88:
                    bb:15:d2:d0:05:a8:0e:95:0a:e3:c5:c4:2c:ae:4e:
                    55:b3:7f:1c:94:53:43:50:45:9a:da:fd:08:60:fc:
                    01:f7:cc:f1:b1:4b:2c:8e:eb:ac:39:08:83:7a:12:
                    03:85:2a:47:7f:14:96:33:aa:a1:cd:12:6c:84:4a:
                    61:5b:22:a7:ee:8a:0a:6b:27:cd:2b:a7:40:8f:73:
                    f0:23:bc:51:22:02:17:55:cd:01:c1:6a:f4:e6:95:
                    15:7d:2b:27:a9:30:5d:a8:39:8f:8c:2f:c3:57:2c:
                    8d:e6:dd:15:96:d9:8a:f0:4a:eb:ef:bd:08:2e:89:
                    f0:1e:a0:f2:93:b9:1a:1b:ad:93:be:f9:d9:96:e1:
                    84:02:99:e2:22:ad:9c:23:8a:4e:b0:a5:bc:ff:5e:
                    7f:04:a6:cc:59:e2:7d:7f:63:d2:e1:91:6c:b3:93:
                    da:a9:7f:27:1e:29:c5:2f:35:5b:9e:28:29:70:1b:
                    8f:27:a2:9e:09:4c:f7:60:cb:a4:dc:a1:d3:06:f0:
                    92:68:93:7b:b7:dc:84:6f:af:ce:b9:d4:b9:60:74:
                    76:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5D:64:D3:64:6C:D3:18:68:06:A7:6A:BF:C4:4B:91:E1:76:7B:13
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/qV1k02Rs0xhoBqdqv8RLkeF2exM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.157.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7c:f8:c3:d8:ca:26:42:85:8a:1b:14:55:12:a1:59:c3:ce:e1:
         e9:38:01:95:88:2a:d9:5e:25:c3:06:5d:46:20:ac:7f:3c:72:
         63:92:d8:ba:40:05:ae:d3:13:ee:7d:bf:2b:1e:c5:99:4b:32:
         82:ef:04:48:7c:72:26:c8:62:34:be:3b:63:d9:d0:91:3e:49:
         28:5f:e9:c5:4e:2d:a6:e5:da:f7:66:c9:b5:d7:b8:da:83:16:
         f7:6c:59:4a:64:7a:a1:e3:a4:6a:e8:74:ed:ed:83:2d:cb:18:
         25:fe:3a:c7:61:22:ae:98:9a:1f:6f:39:9e:95:d3:f5:cc:dd:
         24:48:70:e7:4d:e7:7c:14:a9:e2:1c:e8:f5:78:00:ad:7f:88:
         83:80:6a:93:4c:f8:0e:83:33:6d:e4:d8:76:a7:85:56:bc:71:
         1b:a3:34:60:04:d7:62:62:a6:0c:c0:72:5c:c3:ff:92:0d:1f:
         f5:a6:96:a9:ab:d1:bb:ea:93:84:0b:67:0f:8b:ca:52:d8:5d:
         61:2e:5a:dc:ec:03:26:38:b3:94:bb:fd:82:f6:f5:7e:bf:c9:
         8f:01:cd:97:0e:03:de:b5:99:c3:29:90:d6:88:b4:7b:ba:f1:
         eb:11:fa:17:d3:23:75:76:c9:5e:17:04:36:32:26:d5:c2:7b:
         60:69:f1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org