Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/gEe4qyBw_9tZo4CxRujKJwxnHKU.roa
File:                     gEe4qyBw_9tZo4CxRujKJwxnHKU.roa (raw, json)
Hash identifier:          zFEmSwyqIZHWFFrCOtEQ48z9JNdNW/G2CTiXD+SF5fQ=
Subject key identifier:   80:47:B8:AB:20:70:FF:DB:59:A3:80:B1:46:E8:CA:27:0C:67:1C:A5
Certificate issuer:       /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Certificate serial:       027F
Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/gEe4qyBw_9tZo4CxRujKJwxnHKU.roa
Signing time:             Mon 26 Aug 2024 05:19:07 +0000
ROA not before:           Mon 26 Aug 2024 05:19:07 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38047
IP address blocks:        2400:5ea0:852a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
        Validity
            Not Before: Aug 26 05:19:07 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8047B8AB2070FFDB59A380B146E8CA270C671CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:89:74:92:1d:d4:f5:99:e0:57:5a:d7:4d:
                    c7:67:fa:33:cc:d4:e0:6b:bd:4c:23:16:c8:cd:91:
                    8c:c4:90:12:b9:74:a3:17:75:53:70:1a:03:fb:c7:
                    ca:57:aa:46:af:21:e4:fc:22:a4:95:89:09:cf:26:
                    79:d1:c1:dd:5f:2e:ff:a2:fe:26:5c:aa:0e:99:1e:
                    cc:a3:db:cd:c4:d7:2c:d8:72:64:b9:97:57:21:35:
                    cc:d9:9a:43:22:44:3c:ab:74:1b:01:aa:c2:4e:80:
                    59:1e:3b:3b:0b:59:ae:10:34:dd:d9:bb:0d:2e:ab:
                    f5:e4:24:d2:55:1d:23:98:83:ba:10:e2:19:e2:6d:
                    6b:9b:3a:43:81:bc:bb:b0:e1:45:19:db:ca:6e:d9:
                    5a:cd:4c:4b:d3:4e:e7:f4:66:11:60:58:ca:b1:f9:
                    6e:dc:c9:fe:b3:21:fe:10:6a:a9:3b:61:7f:36:cc:
                    20:f4:16:37:61:22:ca:cb:1c:3e:56:2f:17:b7:7b:
                    5c:c6:53:3e:64:e7:4e:15:90:e5:be:9f:2e:86:3e:
                    e9:da:e7:6f:45:af:d8:43:99:d3:2b:79:3b:a0:9f:
                    b4:08:6c:50:55:0a:17:6d:c6:b7:29:96:91:0a:1b:
                    18:91:ef:02:d5:96:71:b5:cc:23:1a:9b:ec:21:fe:
                    35:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:47:B8:AB:20:70:FF:DB:59:A3:80:B1:46:E8:CA:27:0C:67:1C:A5
            X509v3 Authority Key Identifier:
                keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/gEe4qyBw_9tZo4CxRujKJwxnHKU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:5ea0:852a::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:b3:df:d5:a6:a0:ed:d4:62:b6:6a:34:f3:21:53:5b:ca:c2:
         de:7f:af:cf:d6:ae:e8:44:d1:a8:08:39:e9:c1:74:ad:3f:a9:
         74:87:f3:2a:d5:c7:99:24:02:a5:2e:db:da:d3:d9:fa:77:42:
         e6:00:12:80:9c:ac:8e:73:e9:8d:70:fc:41:21:06:cd:12:8e:
         ec:4b:a8:32:91:40:dd:44:37:2a:02:24:6f:6c:3e:73:d2:05:
         6a:25:58:e1:f6:cb:60:e4:f5:0c:d3:68:79:da:17:3d:7c:d8:
         e1:a3:db:01:80:e3:80:16:e8:ec:55:ec:63:f5:fa:17:aa:c5:
         8f:5f:ef:ab:d5:67:04:d9:a7:06:8b:b7:4b:0f:51:2c:e1:10:
         ec:2e:56:d7:7b:fe:61:d0:43:67:fb:f7:69:99:9d:47:bc:43:
         49:26:78:b4:84:ee:b8:71:d1:09:42:5c:f9:7d:52:07:f3:19:
         83:8c:64:88:ef:0c:d7:14:d8:74:81:4e:84:cb:3e:e7:61:d1:
         b6:7b:9e:83:83:b1:a7:fb:48:9c:9b:42:dc:66:34:11:6a:d1:
         d6:a2:e3:3e:65:f2:e6:57:4f:e7:f7:2a:0f:86:fd:54:da:f5:
         3d:0b:5b:65:6d:f1:f6:85:40:8f:51:dc:5f:3d:47:d3:e9:4f:
         89:9a:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org