Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/n6ODV_3WtISmbtTOq2I1xVm6Luo.roa
File:                     n6ODV_3WtISmbtTOq2I1xVm6Luo.roa (raw, json)
Hash identifier:          2L4O1ZzMkM6XLEWHXBFpjLSzKRUpLOAV0WP1WLar51U=
Subject key identifier:   9F:A3:83:57:FD:D6:B4:84:A6:6E:D4:CE:AB:62:35:C5:59:BA:2E:EA
Certificate issuer:       /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial:       037E
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/n6ODV_3WtISmbtTOq2I1xVm6Luo.roa
Signing time:             Mon 10 Feb 2025 13:57:04 +0000
ROA not before:           Mon 10 Feb 2025 13:57:04 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     20473
IP address blocks:        103.169.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894 (0x37e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
        Validity
            Not Before: Feb 10 13:57:04 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=9FA38357FDD6B484A66ED4CEAB6235C559BA2EEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4a:68:dd:4e:85:c8:c3:c7:f8:fa:2a:9f:b3:
                    b5:3c:ae:d4:20:a2:4e:46:4a:0d:22:6d:e5:f7:6f:
                    cc:58:a1:94:e6:44:50:44:f7:45:4b:37:6e:4d:e8:
                    10:e1:29:ca:52:de:95:78:78:b3:d0:a0:21:c3:c3:
                    b3:ce:06:ee:bc:e5:9a:9c:ed:95:ce:77:fe:8c:5d:
                    c6:33:79:06:2d:c7:14:a1:62:4a:ac:a1:8c:fa:1a:
                    a0:d5:2a:a2:43:c7:5a:3a:8a:01:6a:c3:3d:c6:45:
                    d0:57:81:06:76:5e:a0:d7:60:a9:ee:8b:34:79:3e:
                    3b:33:a7:da:b5:0b:f3:b3:0b:62:d8:4c:b0:6c:f2:
                    07:7a:4c:c3:7b:ac:de:b8:86:f8:bd:1d:87:0a:87:
                    9c:18:67:52:6f:4a:a3:38:48:7f:b7:da:22:49:0f:
                    6f:61:9f:ba:c5:43:a0:c2:e9:26:6d:ae:1a:f9:2f:
                    a3:b2:67:a7:64:a2:42:af:43:7b:81:95:c4:ad:35:
                    f2:8f:a7:69:c8:2f:73:b1:bc:f6:d6:ad:56:f8:55:
                    04:41:b6:07:92:4a:fb:7f:b3:d8:d5:d3:a6:fb:5a:
                    b5:bd:62:e1:dc:0a:1c:db:a7:88:d0:50:07:b9:a6:
                    0b:6f:06:32:27:5c:33:4e:26:4a:40:ed:82:ad:f1:
                    a3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A3:83:57:FD:D6:B4:84:A6:6E:D4:CE:AB:62:35:C5:59:BA:2E:EA
            X509v3 Authority Key Identifier:
                keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/n6ODV_3WtISmbtTOq2I1xVm6Luo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:69:82:88:ed:d1:4a:0e:30:d3:d6:c3:ab:a9:95:22:0d:33:
         7f:f2:80:e8:ff:11:52:c7:36:45:2e:5c:59:ae:78:1d:2a:04:
         bd:47:4b:ae:71:6f:5a:c9:fc:a4:5a:40:6b:1e:fe:45:4b:87:
         84:e4:e3:b4:fd:72:bf:3d:ee:da:45:91:b5:fd:f1:a8:e1:9f:
         d4:dc:eb:ae:43:fb:81:2f:74:e4:33:2e:a1:6d:24:fb:c5:e5:
         f3:5e:c0:00:19:63:2b:0d:41:c5:7c:a5:55:49:ae:99:1a:79:
         84:7c:73:a3:c7:42:9b:6e:8e:75:48:de:d5:f8:6a:d4:37:25:
         fa:9d:7c:45:c6:04:a5:78:d6:fa:41:83:90:e2:d5:a6:9c:ce:
         c9:66:98:da:4b:74:c1:b4:f2:af:b3:ce:8b:6f:3d:b3:61:ef:
         c1:3f:c6:8f:62:30:c7:79:81:e1:38:be:bb:ec:64:93:05:6b:
         1c:26:76:88:d2:5b:8d:19:b3:43:82:c6:55:cf:81:83:e2:ac:
         0b:49:64:cd:1d:66:96:42:b1:b5:6c:bc:bf:8f:0d:07:df:48:
         fe:60:75:82:49:4b:3e:85:37:1a:3c:7a:9a:59:66:d0:3b:14:
         12:b8:6f:94:be:2b:be:12:9c:43:70:17:6b:8a:fb:72:f7:28:
         59:4e:f9:28
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:07 2025 by rpki-client