Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWACOM/5pyUoag8aKIcwce03p8lgcqjowE.roa
File:                     5pyUoag8aKIcwce03p8lgcqjowE.roa (raw, json)
Hash identifier:          5eML+Lqqt09qTr7gJlLAQfhIm3PsKENUc4R/Vpd793M=
Subject key identifier:   E6:9C:94:A1:A8:3C:68:A2:1C:C1:C7:B4:DE:9F:25:81:CA:A3:A3:01
Certificate issuer:       /CN=D39A02AE150862D15FB727C511B104D63EFB4686
Certificate serial:       11F4
Authority key identifier: D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/5pyUoag8aKIcwce03p8lgcqjowE.roa
Signing time:             Mon 26 Aug 2024 05:18:46 +0000
ROA not before:           Mon 26 Aug 2024 05:18:46 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     63199
IP address blocks:        103.124.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4596 (0x11f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39A02AE150862D15FB727C511B104D63EFB4686
        Validity
            Not Before: Aug 26 05:18:46 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E69C94A1A83C68A21CC1C7B4DE9F2581CAA3A301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9d:24:df:23:5a:94:46:c3:b9:b4:17:b6:48:
                    45:79:a2:81:d1:30:aa:c0:57:70:78:15:d2:33:4b:
                    39:9e:84:ff:39:84:54:5c:53:c8:a9:d6:2b:64:1f:
                    ad:9d:8c:e0:78:b3:cc:3f:e9:e9:f5:db:9b:0e:48:
                    93:a7:82:87:30:49:d9:67:1b:d7:6d:fe:6b:29:84:
                    a2:30:9f:68:5e:6b:50:68:c5:41:2d:8d:d1:e1:36:
                    9f:b2:5a:49:92:ed:b1:59:36:07:3a:ce:c9:c3:65:
                    a8:e5:79:51:73:b5:b9:49:89:dc:12:c7:e2:53:97:
                    e0:c4:63:1f:46:df:14:c3:c4:87:78:23:a3:80:bd:
                    e3:00:d2:9c:db:d7:f8:cf:24:18:f3:47:41:52:57:
                    cb:37:e2:9a:28:d4:f6:5b:61:25:2c:5e:f4:a7:8b:
                    28:e8:bc:6e:83:0e:b3:99:8a:49:29:e0:aa:4f:77:
                    00:36:05:46:16:69:99:ba:8d:bc:13:23:40:d8:fc:
                    d9:dd:d0:8a:8e:e2:25:84:2d:c7:cf:0c:6f:7c:91:
                    46:66:34:10:6f:00:08:07:ea:30:60:33:c4:b7:0d:
                    00:bb:0e:dc:83:69:e7:f2:27:88:fd:38:10:75:70:
                    b5:aa:f8:84:49:cf:a5:39:5d:82:da:7e:ca:9b:5d:
                    db:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9C:94:A1:A8:3C:68:A2:1C:C1:C7:B4:DE:9F:25:81:CA:A3:A3:01
            X509v3 Authority Key Identifier:
                keyid:D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/5pyUoag8aKIcwce03p8lgcqjowE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:1b:ab:e2:f0:d6:d9:03:b0:1c:6a:6a:69:84:16:29:8f:6a:
         11:2d:8d:e1:ad:00:e2:90:e8:fd:25:49:1a:2d:1d:58:63:4e:
         66:41:a7:68:45:b0:8c:55:e7:c9:ed:ff:66:54:61:52:1a:eb:
         44:60:c2:20:d6:57:dc:29:48:de:96:46:12:99:ed:ae:47:79:
         6a:af:36:ef:8d:2f:eb:4f:59:4d:57:4a:7a:62:d0:59:41:ca:
         c7:98:fe:1d:87:80:5c:4d:56:0e:4d:6f:96:bf:ce:82:d7:5b:
         a4:4e:cb:30:1a:8c:93:9b:da:92:c9:0b:38:fb:e7:6c:bc:30:
         a0:e7:c7:3b:d6:28:51:bf:b4:f4:22:54:9a:17:b3:e6:ea:c8:
         c2:b7:cc:97:3d:c7:ea:b3:34:b0:80:33:40:59:b0:30:b5:a3:
         eb:94:1a:dc:cd:0a:e5:51:32:2a:bd:91:46:85:ad:7e:f3:68:
         26:9c:89:46:af:23:3c:76:f6:f8:20:0e:a4:07:59:07:fa:b5:
         07:68:00:84:30:c9:d0:ea:d9:a7:70:42:d5:58:d0:a6:14:f5:
         30:60:15:ab:d4:64:58:6e:01:c5:24:3c:7d:ff:45:63:bf:cb:
         79:51:ff:0c:09:c1:45:61:cb:86:74:9a:49:09:53:49:26:bf:
         35:ee:4c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:27 2024 by rpki-client on console-fra.rpki-client.org