Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWACOM/8yXOjN9zRtosBBIHEBVGLCLQjgA.roa
File:                     8yXOjN9zRtosBBIHEBVGLCLQjgA.roa (raw, json)
Hash identifier:          BAuZs+IaUZMMWWZrKQaB+eMDnXUmrrmOCFhCQH4CHz8=
Subject key identifier:   F3:25:CE:8C:DF:73:46:DA:2C:04:12:07:10:15:46:2C:22:D0:8E:00
Certificate issuer:       /CN=D39A02AE150862D15FB727C511B104D63EFB4686
Certificate serial:       11F2
Authority key identifier: D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/8yXOjN9zRtosBBIHEBVGLCLQjgA.roa
Signing time:             Mon 26 Aug 2024 05:18:46 +0000
ROA not before:           Mon 26 Aug 2024 05:18:46 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     63199
IP address blocks:        103.124.150.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4594 (0x11f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39A02AE150862D15FB727C511B104D63EFB4686
        Validity
            Not Before: Aug 26 05:18:46 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F325CE8CDF7346DA2C0412071015462C22D08E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:8a:e7:3d:b9:4a:7c:29:6d:f1:01:27:4a:
                    76:f0:07:f2:07:6d:16:b0:a5:b5:d9:c1:27:d1:e1:
                    ae:36:c8:76:21:1b:80:a4:63:30:3c:fa:26:ef:8c:
                    1f:f2:ae:6a:77:bd:ae:89:33:1f:bb:11:ca:9f:a4:
                    2c:ee:e8:61:82:26:95:94:be:38:38:90:f1:04:9f:
                    29:b9:da:98:04:6e:1e:13:5d:85:7b:cc:e9:1e:9f:
                    f3:99:d0:9a:0f:ac:26:8d:80:20:c6:f4:54:bc:1a:
                    32:1e:c8:a3:5e:05:65:26:4c:82:03:27:3a:57:0c:
                    4f:68:29:14:db:08:f4:d4:00:79:60:46:df:15:b3:
                    5d:4d:1c:55:4e:3e:61:86:93:56:39:43:75:10:6e:
                    8e:36:c3:b3:e4:13:8a:87:54:e2:fd:ec:c1:2b:3f:
                    1f:6b:42:30:4f:0a:da:76:05:90:97:94:56:d3:9c:
                    02:37:82:89:c9:50:e3:a6:fe:6a:2a:27:73:55:f1:
                    38:04:95:7f:06:2e:03:b8:ff:8d:fc:77:29:4e:f6:
                    91:52:c2:60:86:92:99:da:4b:4b:da:7f:31:de:49:
                    5e:3a:3d:f8:a2:bf:c6:57:b7:4f:fd:83:8d:64:f5:
                    e2:76:ac:0e:c0:5b:6f:8f:6f:74:21:58:ea:8a:73:
                    0c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:25:CE:8C:DF:73:46:DA:2C:04:12:07:10:15:46:2C:22:D0:8E:00
            X509v3 Authority Key Identifier:
                keyid:D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/8yXOjN9zRtosBBIHEBVGLCLQjgA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:99:84:8b:0f:26:60:c9:3f:ad:58:20:ba:4b:62:88:a5:15:
         7a:98:fb:67:8c:5a:0b:0a:43:40:d9:73:38:fc:01:3f:89:45:
         0b:4c:64:86:fc:ce:86:cc:96:a2:c4:b0:5f:a7:e0:7f:5a:94:
         6d:41:33:e2:6e:86:41:fd:7e:c9:6f:fa:c4:c7:cc:17:0f:40:
         c5:38:b9:8b:9d:06:7e:59:70:d7:2a:ca:3a:1a:d6:97:df:ca:
         cb:85:e3:54:cd:e5:88:02:76:12:2c:87:14:f2:1b:4a:c8:86:
         0c:3e:8d:67:01:35:22:96:d7:5f:6e:fc:a0:9c:93:90:bf:ae:
         1a:54:95:57:d1:87:fa:aa:a2:64:b0:23:8f:df:89:2d:cf:52:
         76:9a:36:29:80:9d:5a:40:7f:ff:1e:ab:d3:f4:4e:e0:71:a7:
         51:ef:32:b3:33:8b:06:ae:e2:91:62:90:b7:18:c2:65:c1:66:
         6f:11:2b:12:60:15:08:44:5b:12:d5:8f:0d:d9:ee:74:04:54:
         e4:2d:47:af:f4:9f:2d:bf:be:58:00:4d:5d:05:47:93:66:94:
         9b:4c:f9:9e:24:9c:a4:08:42:c3:0e:81:ac:75:9e:1d:8a:b6:
         93:48:6e:f2:11:0e:79:d9:e7:ec:60:fa:1e:f8:3e:14:9e:00:
         a1:1c:2c:b3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDM5
QTAyQUUxNTA4NjJEMTVGQjcyN0M1MTFCMTA0RDYzRUZCNDY4NjAeFw0yNDA4MjYw
NTE4NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYzMjVDRThDREY3MzQ2
REEyQzA0MTIwNzEwMTU0NjJDMjJEMDhFMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGjYrnPblKfClt8QEnSnbwB/IHbRawpbXZwSfR4a42yHYhG4Ck
YzA8+ibvjB/yrmp3va6JMx+7EcqfpCzu6GGCJpWUvjg4kPEEnym52pgEbh4TXYV7
zOken/OZ0JoPrCaNgCDG9FS8GjIeyKNeBWUmTIIDJzpXDE9oKRTbCPTUAHlgRt8V
s11NHFVOPmGGk1Y5Q3UQbo42w7PkE4qHVOL97MErPx9rQjBPCtp2BZCXlFbTnAI3
gonJUOOm/moqJ3NV8TgElX8GLgO4/438dylO9pFSwmCGkpnaS0vafzHeSV46Pfii
v8ZXt0/9g41k9eJ2rA7AW2+Pb3QhWOqKcwxfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8yXOjN9zRtosBBIHEBVGLCLQjgAwHwYDVR0jBBgwFoAU05oCrhUIYtFftyfF
EbEE1j77RoYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFdBQ09N
LzA1b0NyaFVJWXRGZnR5ZkZFYkVFMWo3N1JvWS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvMDVvQ3JoVUlZdEZmdHlmRkViRUUxajc3Um9ZLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFdBQ09NLzh5WE9qTjl6UnRvc0JCSUhF
QlZHTENMUWpnQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn
fJYwDQYJKoZIhvcNAQELBQADggEBAIWZhIsPJmDJP61YILpLYoilFXqY+2eMWgsK
Q0DZczj8AT+JRQtMZIb8zobMlqLEsF+n4H9alG1BM+JuhkH9fslv+sTHzBcPQMU4
uYudBn5ZcNcqyjoa1pffysuF41TN5YgCdhIshxTyG0rIhgw+jWcBNSKW119u/KCc
k5C/rhpUlVfRh/qqomSwI4/fiS3PUnaaNimAnVpAf/8eq9P0TuBxp1HvMrMziwau
4pFikLcYwmXBZm8RKxJgFQhEWxLVjw3Z7nQEVOQtR6/0ny2/vlgATV0FR5NmlJtM
+Z4knKQIQsMOgax1nh2KtpNIbvIRDnnZ5+xg+h74PhSeAKEcLLM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:27 2024 by rpki-client on console-fra.rpki-client.org