Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/sweixy4Vr0-xBSCVvUVugk1HnCo.roa
File:                     sweixy4Vr0-xBSCVvUVugk1HnCo.roa (raw, json)
Hash identifier:          zDb/n9uFWQivQ5DLk426CpWlc4J41FUwqpdZfyPSu/Q=
Subject key identifier:   B3:07:A2:C7:2E:15:AF:4F:B1:05:20:95:BD:45:6E:82:4D:47:9C:2A
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       05A3
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/sweixy4Vr0-xBSCVvUVugk1HnCo.roa
Signing time:             Thu 12 Oct 2023 08:24:45 +0000
ROA not before:           Thu 12 Oct 2023 08:24:45 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     20473
IP address blocks:        103.122.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 09:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1443 (0x5a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Oct 12 08:24:45 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=B307A2C72E15AF4FB1052095BD456E824D479C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:59:50:a3:f7:88:7e:35:b8:84:80:f8:65:f3:
                    6b:a6:84:0b:cc:81:09:06:16:b7:81:e2:13:03:1a:
                    bb:7d:61:6e:14:eb:32:21:34:35:13:f0:8e:45:c0:
                    3f:84:92:4e:bc:09:e6:e6:13:11:63:33:8a:f7:e9:
                    0e:99:60:b3:68:6a:23:e0:61:95:7d:0a:04:7c:46:
                    a3:61:ec:f9:67:cd:3c:6a:32:4c:38:84:be:61:76:
                    34:e8:89:ba:58:cf:80:07:a2:e4:27:2f:98:85:88:
                    6d:f6:80:57:90:dc:e4:7d:7f:84:b0:dd:d8:f4:f0:
                    1c:71:50:aa:46:26:4e:05:bc:ff:6a:5b:cb:08:bc:
                    18:14:1c:53:04:cb:1c:dd:64:7b:20:6f:36:57:7c:
                    22:ce:4c:5c:0e:31:31:26:e9:0e:0c:11:1a:7d:87:
                    20:4e:93:a0:dc:30:6e:41:63:9f:2e:3c:29:1d:0a:
                    db:56:65:8e:c1:a5:af:38:5c:74:3d:1a:92:af:a6:
                    72:9f:85:b5:9c:5b:c3:72:f5:ea:ab:1c:2c:dd:88:
                    59:24:5b:8d:54:55:4c:0c:17:9c:62:30:1a:85:0e:
                    32:e8:c3:cc:f0:2a:df:fb:93:50:4d:bd:68:a7:9a:
                    cb:90:2d:b1:b7:63:c3:88:55:ed:77:5e:fa:a1:27:
                    f1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:07:A2:C7:2E:15:AF:4F:B1:05:20:95:BD:45:6E:82:4D:47:9C:2A
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/sweixy4Vr0-xBSCVvUVugk1HnCo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:e0:ca:09:f5:b9:80:09:9d:b9:26:3f:f2:cd:c8:97:18:4a:
         2a:1d:f4:1a:eb:d0:3e:87:f0:0e:31:be:a7:5d:b0:e2:93:44:
         8b:a0:02:04:9e:12:80:04:1f:5a:93:bd:75:05:61:97:7e:86:
         94:3f:06:a6:4d:9f:94:49:3e:b3:c2:40:f9:21:99:4c:a2:98:
         ef:38:55:59:de:d3:5a:58:60:dd:5c:3c:3d:8d:99:8f:16:b2:
         a7:50:ee:34:20:53:be:6e:dc:42:85:0d:d0:ba:45:9b:6b:09:
         d1:c9:f7:4c:8c:e7:3c:d7:9a:9f:55:a5:3a:67:4a:a1:4e:87:
         93:e9:b5:fe:98:96:9d:f0:69:31:c4:a4:7d:51:01:8a:fb:06:
         d5:7e:7c:e1:ef:58:0d:36:09:f6:56:54:9f:ba:1b:d1:90:a5:
         50:c6:a9:88:08:d0:24:96:af:6c:c0:f1:94:e4:7a:bb:35:19:
         6f:d2:1e:c9:09:84:10:36:55:9f:75:58:a5:cf:a5:9e:65:5d:
         62:4b:fd:ac:17:b8:c0:cc:5f:eb:86:54:40:c3:75:5e:e8:b5:
         0a:d1:a7:bc:12:89:6b:74:2c:98:00:cc:31:29:7d:97:d0:93:
         ea:b6:29:60:9e:3e:ef:1b:a4:eb:15:5d:f1:63:e6:08:a9:44:
         a8:19:a1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:11:01 2024 by rpki-client on console-fra.rpki-client.org