Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/UIhCI5EC4KP9eqA4-OFLVCDaJio.roa
File:                     UIhCI5EC4KP9eqA4-OFLVCDaJio.roa (raw, json)
Hash identifier:          YckniEq2Kd8t4OeXL7XYtrYKLp7fLIeWlg3ZGo0zujg=
Subject key identifier:   50:88:42:23:91:02:E0:A3:FD:7A:A0:38:F8:E1:4B:54:20:DA:26:2A
Certificate issuer:       /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial:       0309
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/UIhCI5EC4KP9eqA4-OFLVCDaJio.roa
Signing time:             Mon 26 Aug 2024 05:17:26 +0000
ROA not before:           Mon 26 Aug 2024 05:17:26 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38852
IP address blocks:        103.169.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777 (0x309)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
        Validity
            Not Before: Aug 26 05:17:26 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=508842239102E0A3FD7AA038F8E14B5420DA262A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:06:b9:ab:05:33:5f:78:fe:6a:15:f2:d5:84:
                    13:7b:fd:05:e8:73:23:50:e4:a9:7d:b7:8f:6c:12:
                    a5:89:48:f9:86:43:e1:cd:3f:4e:f2:5a:91:97:62:
                    e4:77:d7:fa:e2:68:8d:95:b2:cb:6c:73:6e:9f:04:
                    d0:80:dd:fc:20:9f:ec:cc:87:39:a3:ef:be:be:20:
                    71:57:c1:ed:3e:9f:a3:d0:fa:d6:37:6c:24:c6:01:
                    49:96:51:90:9b:54:20:13:01:79:0f:33:2c:a0:bc:
                    12:5c:d1:8a:0a:99:27:b9:76:e8:4f:5b:a6:68:1d:
                    63:fa:38:d9:36:21:b5:1a:a0:4f:2d:8d:ec:35:45:
                    13:13:09:33:a6:73:36:53:09:65:34:89:b5:bc:be:
                    0c:38:88:64:2e:4a:f9:31:b6:7d:a9:4e:b2:2d:8d:
                    e6:22:2a:25:23:c8:12:82:6b:2a:d3:0c:e9:4e:b8:
                    ea:91:9b:0c:34:a6:4c:d4:e4:73:e1:11:2a:a6:a8:
                    c5:09:23:c8:03:33:19:8b:73:53:e0:11:c5:38:2e:
                    61:8f:bf:fa:06:32:41:fb:af:5c:86:1c:2d:df:78:
                    e4:18:e5:70:fe:a8:2f:5a:f3:5e:f5:21:fb:25:3e:
                    3a:22:a7:94:8a:39:14:f7:76:2b:27:c1:55:d4:26:
                    d7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:88:42:23:91:02:E0:A3:FD:7A:A0:38:F8:E1:4B:54:20:DA:26:2A
            X509v3 Authority Key Identifier:
                keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/UIhCI5EC4KP9eqA4-OFLVCDaJio.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:4c:b6:a9:81:9a:ba:b1:c9:d0:32:c1:81:0c:2b:09:66:a9:
         03:04:81:e5:f3:0e:1f:b1:42:a2:67:d6:ca:a3:59:f2:61:5e:
         3a:1a:59:5d:45:13:d1:b3:99:64:0a:08:b6:7f:49:6d:e3:7c:
         68:65:69:e4:84:c4:b0:99:bb:58:36:b2:c9:90:64:a8:c7:d7:
         0a:5c:40:15:7c:e5:51:d4:97:54:05:b5:a3:b0:67:ec:a8:d3:
         5c:70:03:66:1e:88:8d:82:7f:90:31:92:86:f6:2d:95:ed:4a:
         32:ac:52:15:10:61:4c:e6:78:79:96:56:1c:cc:b1:cb:b3:7c:
         1f:c1:e4:37:76:c5:7f:02:bb:af:00:5e:96:bc:4a:58:ba:c6:
         20:5f:02:8b:e9:30:18:41:96:9d:bd:61:e4:ab:29:c1:ba:1b:
         71:c5:9c:0c:e0:8c:8f:75:f1:a7:f8:8d:bd:6d:89:b6:f6:bb:
         b4:6a:eb:3f:a6:72:5a:58:90:b5:f7:b8:1c:23:2d:d1:10:18:
         bf:fd:47:76:50:86:64:3f:54:8d:70:ba:d2:8c:46:ca:f2:aa:
         ea:60:e4:3f:da:2a:70:7b:82:e2:a6:09:cf:c4:56:5f:82:8b:
         8e:cb:35:2e:af:c0:5a:7b:d9:35:2c:48:74:74:9e:bc:9c:3c:
         4c:a2:8f:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org