Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/-xC-8iF9ZHilO0dWNe7wdMin6Fo.roa
File:                     -xC-8iF9ZHilO0dWNe7wdMin6Fo.roa (download)
Hash identifier:          xyaMW21re/gxtnMbpihu8Iu5L5tawgNK4Ko0Grjk8iM=
Subject key identifier:   FB:10:BE:F2:21:7D:64:78:A5:3B:47:56:35:EE:F0:74:C8:A7:E8:5A
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       0469
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/-xC-8iF9ZHilO0dWNe7wdMin6Fo.roa
ROA valid until:          Sep 06 03:00:35 2023 GMT
asID:                     20473
IP address blocks:
    1: 103.153.176.0/23 maxlen: 23

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Sep 15 02:34:56 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FB10BEF2217D6478A53B475635EEF074C8A7E85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fb:5d:7a:2b:78:70:42:a2:a8:ec:66:e6:73:
                    a1:dc:90:35:cc:52:bb:a6:39:07:51:ec:48:73:78:
                    c3:d5:a4:15:d1:44:ef:2b:09:05:fc:bb:2b:ef:8d:
                    ed:0f:33:2a:54:e8:16:68:ba:9f:20:2e:56:d5:43:
                    f5:5b:95:a7:43:60:e6:bf:07:fb:d1:2a:34:05:8d:
                    6a:e6:f1:f0:e1:fe:6a:b3:a9:7d:c0:91:e2:25:3f:
                    78:2b:64:7e:35:cc:2b:f1:17:33:80:11:ba:a2:97:
                    0b:ee:d9:38:b8:dc:30:49:58:39:9f:ac:86:a6:0e:
                    25:fa:5a:b8:c1:6c:f1:97:60:f1:da:34:48:b7:ef:
                    39:f0:13:5b:97:b7:85:a1:9b:63:aa:68:f8:16:03:
                    28:10:ea:f8:df:0e:48:c1:ad:a4:f6:81:34:77:9c:
                    ae:89:5e:26:fd:9d:dd:c6:6d:7d:88:01:b3:30:8b:
                    60:5a:d0:fd:26:0a:71:b2:b9:2c:c9:26:e8:fc:05:
                    04:d8:ba:73:15:81:1a:67:7a:48:17:4e:99:59:39:
                    ed:04:da:45:7c:99:f9:83:68:d1:2b:91:c2:0a:d6:
                    85:21:b1:e7:ed:37:5f:e5:ea:d6:14:db:32:14:0e:
                    d8:fa:88:69:21:bb:84:e0:4a:dc:32:d4:8a:ce:d8:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FB:10:BE:F2:21:7D:64:78:A5:3B:47:56:35:EE:F0:74:C8:A7:E8:5A
            X509v3 Authority Key Identifier: 
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access: 
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/-xC-8iF9ZHilO0dWNe7wdMin6Fo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:44:f0:9c:1b:a6:87:17:64:98:23:9f:92:0b:a2:4f:cc:a6:
         f4:41:f4:7d:f5:fc:5d:c5:71:e2:e1:e0:a0:6a:2f:f4:76:1e:
         e1:d8:50:40:a5:e7:31:82:f7:e6:87:20:8c:0b:ce:ca:78:ca:
         1d:a9:34:32:1a:18:a0:53:df:9b:49:3e:f4:7b:03:9d:b8:46:
         7b:c0:bf:f9:28:1b:c8:b1:b8:08:62:e6:2b:54:a1:e9:aa:66:
         69:74:67:77:20:9f:ab:59:75:96:bd:8c:a6:17:10:dd:21:b2:
         da:9f:e5:9d:2b:97:1d:59:85:13:92:f1:80:99:cf:e1:8d:a1:
         06:8a:a5:b1:ac:0f:c4:09:b1:e6:4e:74:af:50:47:20:6d:4b:
         b5:c8:f4:92:3e:26:f9:fb:5f:3a:77:0b:8b:8d:00:fe:e6:62:
         a9:79:2f:af:c1:41:41:54:04:d0:03:91:b9:12:f9:33:84:fd:
         e4:37:5f:13:52:7e:0e:50:e1:b0:70:9b:c7:f1:40:8c:97:71:
         dc:be:60:78:d6:2b:ff:84:7b:b3:03:d1:b2:96:a0:3d:96:34:
         eb:86:c7:20:98:bd:c4:46:d5:62:0e:bd:56:d2:c9:b7:5b:f1:
         e7:1c:9e:03:0b:62:cb:e1:28:0f:bb:1a:f3:20:73:83:c6:ce:
         c4:42:8d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 03:08:01 2022 by rpki-client.