Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INFORICH/acqEEEyP1ncA2iBF_O6fINAb_ts.roa
File:                     acqEEEyP1ncA2iBF_O6fINAb_ts.roa (raw, json)
Hash identifier:          7BFMKMkic0yTegH9Fx0Sj1Efd7c6ma0+IeITqZhXlOk=
Subject key identifier:   69:CA:84:10:4C:8F:D6:77:00:DA:20:45:FC:EE:9F:20:D0:1B:FE:DB
Certificate issuer:       /CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Certificate serial:       0505
Authority key identifier: 91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/acqEEEyP1ncA2iBF_O6fINAb_ts.roa
Signing time:             Mon 26 Aug 2024 05:19:04 +0000
ROA not before:           Mon 26 Aug 2024 05:19:04 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131674
IP address blocks:        2406:3a40::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:54:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1285 (0x505)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
        Validity
            Not Before: Aug 26 05:19:04 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=69CA84104C8FD67700DA2045FCEE9F20D01BFEDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:55:6e:24:8c:15:8e:4a:52:b0:ac:a2:48:
                    11:94:cb:d1:56:3b:67:99:b6:73:57:42:5f:b6:f6:
                    28:10:1e:5e:c6:b8:99:f0:db:ed:4b:6c:f8:8a:dd:
                    6c:39:bc:99:55:d3:6f:3c:11:dd:0f:98:b6:7a:16:
                    1a:77:13:18:3b:cc:c7:82:bd:25:ea:60:2d:aa:15:
                    fe:44:cb:8b:c3:35:5a:ae:11:4f:58:0e:bf:24:85:
                    0a:61:6d:fe:1f:99:00:e2:e4:67:0a:64:f9:dd:59:
                    f4:1e:fd:30:d7:f9:ce:08:89:38:ce:6a:86:7a:f2:
                    87:82:d8:3e:83:b6:76:d5:33:43:7e:19:f7:28:c5:
                    d0:03:b4:ee:03:b6:c6:5f:80:ed:30:2f:77:cd:7d:
                    10:b8:76:32:55:b3:f2:92:31:3f:e8:73:6d:4a:dc:
                    e6:7f:92:3e:c2:59:9a:18:43:2f:3e:f2:45:09:af:
                    25:ac:2e:6a:3d:a3:9b:11:03:c4:5b:f1:4b:f3:68:
                    e9:df:e9:37:3f:ea:52:2a:33:a5:c4:18:de:ef:68:
                    9b:0c:8a:ef:5f:6a:d7:14:f1:66:d0:d6:de:4c:df:
                    e9:72:c2:ab:83:91:ac:93:f4:81:38:a4:65:43:97:
                    a1:74:d8:16:ba:91:25:e2:c5:e7:23:b0:7e:d6:df:
                    ae:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CA:84:10:4C:8F:D6:77:00:DA:20:45:FC:EE:9F:20:D0:1B:FE:DB
            X509v3 Authority Key Identifier:
                keyid:91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/acqEEEyP1ncA2iBF_O6fINAb_ts.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:ef:e3:87:84:c1:51:8e:63:54:91:ae:7a:04:69:6c:d6:f9:
         d6:4c:63:09:6f:13:a6:45:9e:82:3d:a2:5a:63:87:4c:a8:8d:
         8f:47:a8:70:a9:03:e4:71:d8:d6:d5:cb:db:38:fc:4d:78:90:
         46:02:5e:d0:3e:42:3d:cf:79:ca:0f:ae:0d:27:fb:14:db:a9:
         aa:5a:8f:b4:c3:f8:a3:51:31:30:a6:f5:50:3e:4c:72:04:92:
         62:8b:fa:89:7e:b5:27:6b:c3:4a:9f:3c:75:72:70:af:03:b8:
         56:ce:f3:e6:81:6a:90:e6:3a:23:0f:4f:03:67:ff:0b:46:59:
         83:33:ca:e8:ad:88:68:77:be:5b:ec:28:f7:19:d4:6c:39:12:
         0a:a8:d7:91:5d:83:a5:3e:2f:9f:6d:d1:b4:6f:54:fd:89:b2:
         41:59:8a:8b:f1:48:08:e2:d8:00:20:00:32:0e:ef:1b:0a:45:
         9b:89:ae:8e:c0:d1:21:de:6e:35:4a:25:d9:6a:37:43:7b:72:
         e8:a8:2a:18:48:01:e1:16:47:1a:e5:02:cf:68:b2:b7:d7:ec:
         e4:80:d6:14:b8:2e:de:e7:21:87:49:82:25:11:c7:b5:b5:36:
         44:50:09:1c:1d:b2:fa:88:52:5a:2f:47:c1:b3:8c:40:4c:d9:
         ce:ad:a9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 12:00:44 2024 by rpki-client on console-ams.rpki-client.org