Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/LOdmgVnP9g1dBmchREnTKxuH63c.roa
File:                     LOdmgVnP9g1dBmchREnTKxuH63c.roa (download)
Hash identifier:          4O9EB6M4q5lFRQJK8GvsSa0M3xmRZFn5OljmgXhfzio=
Subject key identifier:   2C:E7:66:81:59:CF:F6:0D:5D:06:67:21:44:49:D3:2B:1B:87:EB:77
Certificate issuer:       /CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Certificate serial:       0A68
Authority key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/LOdmgVnP9g1dBmchREnTKxuH63c.roa
ROA valid until:          Sep 06 03:00:35 2023 GMT
asID:                     20473
IP address blocks:
    1: 103.122.188.0/22 maxlen: 22

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2664 (0xa68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
        Validity
            Not Before: Sep 15 02:47:51 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2CE7668159CFF60D5D0667214449D32B1B87EB77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:de:d9:32:41:0d:46:92:1d:6b:e3:93:e9:
                    8b:ee:1b:7b:eb:c6:37:be:94:2b:22:56:98:40:67:
                    25:da:1c:c4:41:d8:3c:a5:52:64:30:5b:60:bf:4e:
                    4e:17:92:de:6f:e4:db:d8:4c:8c:40:17:6b:88:5c:
                    c1:b3:9a:c3:80:c7:51:70:e6:83:7c:86:83:52:3e:
                    a8:be:e5:96:3e:8e:73:4d:5e:dd:ec:2f:32:e2:77:
                    d1:b9:47:5e:14:17:08:73:d7:14:65:f2:e3:e2:e6:
                    3a:7d:ec:f1:aa:84:08:0a:88:61:b3:e3:90:1d:e9:
                    94:58:8c:8d:49:84:5d:65:28:a9:9f:cb:24:38:e8:
                    d6:ac:1d:49:56:55:49:c1:8c:f6:89:c7:32:d3:fe:
                    cc:e4:80:ce:95:94:8a:fb:48:da:bf:c0:c3:c5:f8:
                    d2:8f:49:f2:70:2b:b1:06:55:1c:da:75:8c:40:f9:
                    16:13:c3:0e:30:63:39:07:02:08:d5:e9:da:26:a1:
                    8d:32:9d:38:75:c9:cc:53:01:70:c5:5a:e9:a4:a4:
                    c8:26:8d:78:0a:2e:c2:49:88:7e:aa:1c:7b:b1:3d:
                    5a:c7:0c:a0:c5:aa:e3:27:11:37:df:48:ab:55:6a:
                    af:2d:fe:c1:ca:f9:e0:96:ff:60:41:3b:5a:ab:fa:
                    6f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2C:E7:66:81:59:CF:F6:0D:5D:06:67:21:44:49:D3:2B:1B:87:EB:77
            X509v3 Authority Key Identifier: 
                keyid:38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access: 
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/LOdmgVnP9g1dBmchREnTKxuH63c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:83:bf:78:c2:39:f2:68:76:38:69:1e:64:51:33:16:11:
         bb:65:31:de:1d:83:78:7e:27:23:d7:30:56:c3:cc:40:27:0f:
         f3:1d:3e:40:1b:1b:12:91:9c:52:0f:37:fd:ec:d5:e9:ad:bf:
         78:21:9a:2f:0c:c8:35:7d:8d:2b:d6:40:50:59:e7:64:f3:71:
         11:e7:29:f3:b4:a9:7a:94:7e:ee:ca:6e:6a:04:01:7d:c8:24:
         18:f8:23:57:72:ec:50:38:70:c7:97:c2:f1:9f:b1:94:2d:7c:
         0c:8e:3e:95:4c:0b:32:8b:51:63:c3:44:44:83:2d:af:33:d3:
         3c:19:e8:22:1c:17:35:9e:cf:0b:af:36:db:10:5b:3a:ee:3b:
         1b:eb:ce:81:10:5e:fe:50:64:0a:1a:47:8f:c5:17:7e:d4:5d:
         53:a3:8a:5d:2e:ec:0c:a6:22:40:b8:9e:75:b0:ef:e7:d1:6a:
         93:23:99:6a:1f:a4:23:01:fc:45:13:7d:30:30:7d:6b:cb:76:
         b6:52:04:e9:d6:72:d7:14:40:9d:b7:b2:33:86:e6:1b:86:98:
         75:c5:51:df:e0:26:31:3e:e9:9c:76:af:6a:b6:e8:63:e8:38:
         15:09:9f:ce:51:36:e0:28:7a:fc:d7:20:ba:b6:5f:2a:49:01:
         f4:51:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 03:07:57 2022 by rpki-client.