Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/uhuInFnj_R3mHYAPj_0c5Z5nv2U.roa
File:                     uhuInFnj_R3mHYAPj_0c5Z5nv2U.roa (raw, json)
Hash identifier:          dJhDWV2l0ynVo0P619T6m0xY2gfUsPcUMYPGbUtkTOQ=
Subject key identifier:   BA:1B:88:9C:59:E3:FD:1D:E6:1D:80:0F:8F:FD:1C:E5:9E:67:BF:65
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0D9A
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/uhuInFnj_R3mHYAPj_0c5Z5nv2U.roa
Signing time:             Mon 15 Jan 2024 21:29:39 +0000
ROA not before:           Mon 15 Jan 2024 21:29:39 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     1131591
IP address blocks:        103.231.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 14:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3482 (0xd9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Jan 15 21:29:39 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=BA1B889C59E3FD1DE61D800F8FFD1CE59E67BF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:d1:3a:6a:86:a2:25:80:fd:7b:ee:f9:0b:
                    6e:96:34:d0:bb:a2:1e:2e:d7:27:fc:85:be:84:74:
                    22:2e:95:c6:f1:93:ca:5a:4e:6a:32:03:45:c0:a7:
                    78:25:c5:fd:75:6b:bd:66:0d:3e:25:88:54:df:4e:
                    11:95:22:05:00:ba:f6:1c:cb:f6:40:77:66:64:83:
                    b2:b9:0f:3c:cd:28:48:b5:bd:62:69:2c:b5:5e:ac:
                    c8:7c:c7:98:5a:70:6e:09:11:01:50:da:d8:27:94:
                    2f:38:06:11:8d:5b:31:f4:6a:87:90:76:7b:8d:b7:
                    dd:ac:97:94:d0:a7:d0:1b:31:6e:7e:dc:bf:3b:d4:
                    5b:8f:77:92:6a:a7:54:00:cf:7d:05:df:74:fa:3c:
                    7e:21:36:49:ca:6a:d3:fe:a8:d9:74:b8:f6:80:40:
                    07:cd:49:60:05:22:07:5f:fc:5c:3d:33:fe:09:6c:
                    2c:f8:35:2d:32:90:03:8b:32:6d:8c:2d:d1:e7:f7:
                    87:9c:7d:94:ad:c5:8e:f7:03:89:f3:4e:1a:e8:9b:
                    2a:32:25:08:e2:d7:b2:78:8c:da:f7:28:66:61:5b:
                    98:4d:be:c7:af:7a:ff:52:da:ae:1b:87:55:55:5c:
                    d5:98:85:14:89:00:9b:35:03:39:b4:51:29:f6:48:
                    f0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1B:88:9C:59:E3:FD:1D:E6:1D:80:0F:8F:FD:1C:E5:9E:67:BF:65
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/uhuInFnj_R3mHYAPj_0c5Z5nv2U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f8:23:ae:74:d9:2d:37:99:6b:96:f7:a5:d2:2f:e9:3e:bb:
         76:1a:78:ea:a9:00:86:75:ec:0c:6f:ce:50:17:34:8f:9c:d6:
         08:8b:90:e9:ea:79:b4:62:7e:2c:af:ea:18:a5:4d:40:ad:37:
         45:08:29:a5:cf:40:2b:bd:04:ef:4d:2f:a1:4c:bc:2a:95:07:
         97:27:9d:33:ee:12:21:96:82:2c:73:4d:cc:51:48:4a:bc:48:
         d1:c3:dc:e3:61:5c:b8:86:66:d2:56:32:76:3f:fc:e8:36:35:
         ae:ee:c9:12:7f:d6:a9:85:dc:d1:53:ba:13:b2:9a:d8:3c:e6:
         db:92:ce:bf:3f:20:88:9f:08:25:13:04:01:ab:ed:e5:95:c4:
         d4:a9:ba:a4:09:d3:06:f0:09:a0:ee:c2:86:a7:34:03:c7:1f:
         77:82:13:5d:9f:25:58:1b:00:3a:f1:d3:31:f4:b3:50:7d:d7:
         e8:59:22:3d:f7:42:98:c9:d9:cb:7b:b9:9b:0f:97:8b:e2:1d:
         ba:61:4e:a3:80:bd:f7:f8:06:a7:5d:7a:34:be:a5:ec:85:49:
         b8:6a:03:42:6f:4d:37:ce:9e:a1:94:5c:52:ad:f7:a7:6e:4c:
         e7:6f:9b:99:ad:93:ab:84:3a:59:d8:7b:2b:6d:70:5f:e1:ee:
         3d:e8:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 12:04:54 2024 by rpki-client on console-ams.rpki-client.org