Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/rrdt28WGBtqn9ETETtEBg6UXUMc.roa
File:                     rrdt28WGBtqn9ETETtEBg6UXUMc.roa (raw, json)
Hash identifier:          r5eDVo3Drus9md2zSYK8ZGyt6XKb33iSFBVed3iMuLU=
Subject key identifier:   AE:B7:6D:DB:C5:86:06:DA:A7:F4:44:C4:4E:D1:01:83:A5:17:50:C7
Certificate issuer:       /CN=5501FE0C3056F611261AC1C0EDC67E2344D7993A
Certificate serial:       0105
Authority key identifier: 55:01:FE:0C:30:56:F6:11:26:1A:C1:C0:ED:C6:7E:23:44:D7:99:3A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/VQH-DDBW9hEmGsHA7cZ-I0TXmTo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/rrdt28WGBtqn9ETETtEBg6UXUMc.roa
Signing time:             Mon 23 Sep 2024 05:17:37 +0000
ROA not before:           Mon 23 Sep 2024 05:17:37 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131642
IP address blocks:        2401:3920::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/VQH-DDBW9hEmGsHA7cZ-I0TXmTo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/VQH-DDBW9hEmGsHA7cZ-I0TXmTo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/VQH-DDBW9hEmGsHA7cZ-I0TXmTo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5501FE0C3056F611261AC1C0EDC67E2344D7993A
        Validity
            Not Before: Sep 23 05:17:37 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=AEB76DDBC58606DAA7F444C44ED10183A51750C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d6:7e:7e:a3:9a:0f:f0:b0:26:bf:aa:e2:e5:
                    ab:e0:4c:b9:0f:78:a8:17:8e:5f:4f:15:80:1f:f7:
                    69:c5:b0:97:06:5d:e7:93:ca:fc:2c:e7:17:07:2b:
                    ea:91:99:3e:fe:fc:ef:68:c1:63:74:6c:c0:b8:05:
                    c9:4b:75:76:c4:aa:02:56:28:b4:e0:c7:f2:2d:2a:
                    5b:8c:80:13:7f:c0:ec:95:10:75:80:79:b3:6c:4d:
                    df:e6:64:28:c2:8d:3a:83:fb:50:aa:f4:3a:6c:6d:
                    d5:a5:42:05:dc:47:91:bb:ea:99:e3:ae:d4:4d:2e:
                    be:e4:14:63:52:1e:ac:0a:7c:41:ec:bb:c3:b1:3e:
                    71:98:a8:5e:a4:10:c0:84:45:a5:19:22:2b:8f:9f:
                    79:73:25:f5:3e:55:28:4b:03:2c:c3:4f:60:93:1d:
                    62:fd:b3:38:8b:e7:c4:da:cb:d2:d7:f2:0a:ae:37:
                    67:3f:1b:ef:1d:b1:b7:de:e7:a6:49:43:67:5d:17:
                    1f:b6:68:7b:d3:b3:fa:6b:e7:43:d8:42:07:6d:19:
                    d5:ff:a4:61:d6:72:d6:47:06:1d:74:7b:ec:75:66:
                    48:4e:d2:8a:ee:f9:43:27:e9:88:0f:f1:26:e3:75:
                    e5:85:7c:79:06:74:96:0c:aa:f2:0e:03:bc:76:56:
                    6d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B7:6D:DB:C5:86:06:DA:A7:F4:44:C4:4E:D1:01:83:A5:17:50:C7
            X509v3 Authority Key Identifier:
                keyid:55:01:FE:0C:30:56:F6:11:26:1A:C1:C0:ED:C6:7E:23:44:D7:99:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/VQH-DDBW9hEmGsHA7cZ-I0TXmTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VQH-DDBW9hEmGsHA7cZ-I0TXmTo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/rrdt28WGBtqn9ETETtEBg6UXUMc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3920::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:87:e8:8e:b2:88:51:a9:5a:3f:9b:0c:fb:b1:00:d3:44:b3:
         81:5f:8e:1e:50:6e:c1:31:4b:2c:8a:2d:85:38:02:96:e4:04:
         96:98:cf:1d:56:28:d5:c7:b0:54:15:ce:08:79:95:3d:f6:05:
         f1:f5:2a:32:1c:73:6c:51:22:19:2e:90:b5:c5:87:cc:66:33:
         31:28:34:35:6e:07:f5:f3:cd:85:27:b2:e4:ea:17:7d:cd:b5:
         e2:1f:da:70:16:7c:76:f7:b6:14:98:43:34:34:be:3e:f8:73:
         b5:5f:e7:c4:40:7c:ee:a9:87:41:b1:2a:75:1e:70:ea:34:e4:
         68:4d:e1:93:4c:93:41:3e:eb:06:29:3f:ee:5f:3b:af:4e:0f:
         a5:de:af:2b:e3:e5:4e:00:f0:02:f3:f0:9c:cc:8e:4a:10:c0:
         31:9d:49:10:91:77:ba:1c:d1:51:bb:70:c0:ba:9d:01:43:bc:
         0c:68:d2:a5:f7:1a:af:2f:52:d7:d6:1d:66:c1:37:dc:76:cb:
         ac:4b:0b:2d:0b:aa:0c:dc:44:08:18:32:fe:95:96:5e:f5:09:
         7e:31:f5:09:6d:4f:5c:73:37:b3:56:c3:f7:83:9b:81:b1:6d:
         f8:13:77:18:91:79:26:f8:47:c3:5a:31:ce:77:5f:29:a6:df:
         20:ba:4d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org