Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/GJ6cP9AUqbFo2hyI6iTTrSoVxUg.roa
File:                     GJ6cP9AUqbFo2hyI6iTTrSoVxUg.roa (raw, json)
Hash identifier:          SxumSyRHZ3xXzoXnqKl1EL1ZrI/kUhDWPvalMxoIQNk=
Subject key identifier:   18:9E:9C:3F:D0:14:A9:B1:68:DA:1C:88:EA:24:D3:AD:2A:15:C5:48
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       117C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GJ6cP9AUqbFo2hyI6iTTrSoVxUg.roa
Signing time:             Mon 26 Aug 2024 05:17:35 +0000
ROA not before:           Mon 26 Aug 2024 05:17:35 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     3462
IP address blocks:        220.128.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4476 (0x117c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Aug 26 05:17:35 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=189E9C3FD014A9B168DA1C88EA24D3AD2A15C548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:33:99:20:48:ee:e9:8f:69:ab:4a:18:a3:a5:
                    1d:9e:e3:3b:90:2d:71:8d:4e:3f:51:56:19:4e:27:
                    70:15:19:31:df:30:25:6e:3a:ba:62:10:65:a0:7a:
                    ea:e8:26:63:d9:87:f2:25:11:20:89:9b:a6:88:9a:
                    cd:fe:c4:73:96:98:f4:50:1c:a5:28:86:38:8b:12:
                    87:09:35:d4:9f:a3:2b:94:e4:99:31:2c:ea:4d:d6:
                    ba:52:df:73:ec:00:a6:f5:be:0e:9b:f6:62:2c:2c:
                    b6:4d:4b:5a:3d:c6:1a:48:38:4d:0f:2b:7b:27:bc:
                    cf:26:b9:3b:ff:09:ea:f9:8d:05:b7:8a:47:e0:89:
                    58:db:ac:12:83:ff:d2:17:61:82:ca:ac:3c:c1:78:
                    9a:09:68:eb:3c:8c:d2:81:a8:4f:b7:14:59:fc:32:
                    5c:3c:6e:f7:a3:47:2f:36:bc:59:14:ca:7d:6a:5e:
                    26:7e:c8:1c:f4:9e:6d:ce:b9:2f:69:5d:60:31:27:
                    08:cb:8f:62:30:20:6a:0e:27:07:ee:27:b1:13:4a:
                    20:13:fa:a6:3d:39:c0:af:c1:5d:a8:42:e6:fc:ae:
                    a1:32:1c:08:4c:d6:44:20:35:03:00:db:08:f8:01:
                    7f:28:00:c2:40:5f:b0:ba:b7:8e:60:3f:43:f6:59:
                    c7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9E:9C:3F:D0:14:A9:B1:68:DA:1C:88:EA:24:D3:AD:2A:15:C5:48
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GJ6cP9AUqbFo2hyI6iTTrSoVxUg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.128.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:11:92:e0:6f:6e:7b:51:13:01:38:78:79:98:06:14:b6:0c:
         5f:93:ae:a3:dd:ab:2c:72:6e:25:fd:05:c2:9e:84:28:91:9a:
         81:7f:0d:3c:f9:8f:e3:8c:8b:15:10:d6:14:a7:33:e2:98:44:
         1a:d6:cc:12:53:27:5b:8e:c7:20:45:bc:20:8a:7d:cd:9b:bc:
         64:22:35:d3:c6:3b:f2:97:95:b0:25:f4:ec:58:e8:f5:2a:d4:
         2d:29:45:2e:36:c1:d3:c9:18:6c:7a:d2:b5:c7:ca:bc:24:a0:
         a2:32:ec:88:77:bd:6f:f0:63:b0:ee:2c:1f:b5:73:05:b5:87:
         a9:1b:80:d9:17:32:18:06:c8:eb:3e:96:f2:39:20:f6:9f:ae:
         df:a3:4b:67:10:a5:88:ae:a8:ed:3f:8f:b8:e4:6d:21:24:e8:
         f9:72:2f:98:a8:3f:32:a0:69:49:c5:ba:69:10:c6:59:8e:7e:
         f1:51:e8:02:b9:ab:c0:b9:75:b2:b1:e4:96:9e:2f:b8:b5:31:
         6a:97:ba:af:72:f5:18:7c:96:00:85:58:8f:cb:69:1c:d7:fc:
         3b:f8:8f:1c:7f:7c:ad:42:21:91:2f:35:d2:55:78:33:18:20:
         bd:6e:a9:43:5a:1d:71:91:f9:db:ce:9f:e0:5f:7f:42:f2:6a:
         6d:e1:a4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org