Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Eu6i5x6iR9Au_0sUDDY7HnClnh4.roa
File:                     Eu6i5x6iR9Au_0sUDDY7HnClnh4.roa (raw, json)
Hash identifier:          TS1/aSSKrNXovbyGiteslKip3cb0KrFkaQGPeKzFOFk=
Subject key identifier:   12:EE:A2:E7:1E:A2:47:D0:2E:FF:4B:14:0C:36:3B:1E:70:A5:9E:1E
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       06CC
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Eu6i5x6iR9Au_0sUDDY7HnClnh4.roa
Signing time:             Mon 26 Aug 2024 05:18:28 +0000
ROA not before:           Mon 26 Aug 2024 05:18:28 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     20473
IP address blocks:        103.122.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 02:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Aug 26 05:18:28 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=12EEA2E71EA247D02EFF4B140C363B1E70A59E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:78:21:5e:33:e1:85:a5:84:d8:5e:d9:00:
                    aa:78:30:74:75:9a:d0:88:6f:d7:8f:79:55:61:e0:
                    b7:62:47:e1:24:9a:99:cc:37:54:90:a1:bd:82:2e:
                    c6:24:08:28:ea:2c:cd:ad:14:b5:d7:87:75:22:48:
                    25:99:7a:49:08:b3:01:a5:4f:af:20:28:db:cf:11:
                    e2:31:3e:99:64:8a:b5:de:bb:61:d9:a0:08:df:d6:
                    2c:18:07:2e:36:b0:5f:db:ef:f0:1c:2c:a0:d7:3d:
                    df:9c:a7:b5:63:50:b5:4b:5e:a8:0c:2f:a7:bc:8e:
                    95:f8:bb:77:35:4b:a2:5b:4b:80:6a:5e:55:6e:a1:
                    b6:10:52:9a:73:12:8a:d8:24:32:1c:a9:34:db:85:
                    79:e0:74:69:20:d8:51:36:ef:9e:e9:a3:de:0c:1d:
                    59:93:3d:2d:96:e6:51:28:2b:7c:49:86:9d:96:29:
                    04:90:1c:91:56:49:48:a6:d4:c6:c7:5f:96:95:e1:
                    f2:0a:be:67:a3:90:f4:e2:2e:cb:71:0e:34:6c:01:
                    e9:49:eb:dd:bb:7d:af:bf:47:3c:ba:e0:1f:95:e3:
                    15:26:47:0c:d3:a1:91:4c:7a:c6:3e:ec:73:02:8b:
                    f4:81:15:13:8b:92:91:08:22:2b:80:36:12:39:67:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EE:A2:E7:1E:A2:47:D0:2E:FF:4B:14:0C:36:3B:1E:70:A5:9E:1E
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Eu6i5x6iR9Au_0sUDDY7HnClnh4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:05:ac:4c:69:2c:47:36:24:1c:4b:dc:27:62:3e:63:6d:07:
         a1:e5:ba:ea:12:f6:fc:37:26:59:78:1e:fc:08:0d:8c:29:83:
         2a:3a:b3:b2:c5:be:05:44:06:9c:c2:fd:ed:ba:1f:1a:02:65:
         13:59:d7:03:8c:6f:0b:5d:39:16:bb:b4:1d:bb:2f:e8:c5:c4:
         48:e2:80:e5:0b:bb:d0:3e:c5:c6:6b:e2:2a:0b:79:9f:18:bb:
         e3:2a:0d:31:63:08:4f:3c:4a:d8:d8:81:38:27:13:ec:41:fb:
         b5:88:a6:d9:f6:9d:ca:f9:9f:ae:e1:2c:3a:d7:0c:60:ca:34:
         7a:9e:a8:cc:f9:14:f2:be:16:f3:b5:55:37:2a:fa:ef:3b:da:
         7c:47:f0:c4:ac:d3:ea:67:1b:96:b1:b1:a3:4d:49:5c:b2:f8:
         17:4e:d5:41:83:b8:16:bf:7c:ff:b3:1c:17:2d:e8:38:9b:6d:
         9b:81:04:aa:5f:76:32:45:fb:ad:37:7c:97:3f:d7:54:ec:f1:
         54:08:d0:0f:6f:97:44:08:73:9e:c6:ec:93:62:96:4f:10:1e:
         59:f7:85:92:de:1f:4a:41:d7:63:48:bd:48:e5:92:04:f9:1e:
         78:9a:9b:56:cf:81:ec:e2:09:e1:79:8f:95:12:08:19:2e:32:
         06:8d:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:15 2024 by rpki-client on console-ams.rpki-client.org