Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LUHWA/Rttgi0m_ViNZHPdLmFW2sCE4FoE.roa
File:                     Rttgi0m_ViNZHPdLmFW2sCE4FoE.roa (raw, json)
Hash identifier:          tccf1mdTGFufHuuFG3XIqI2JO0JA76FCLfxa5ZJI8Yg=
Subject key identifier:   46:DB:60:8B:49:BF:56:23:59:1C:F7:4B:98:55:B6:B0:21:38:16:81
Certificate issuer:       /CN=5818978B2D089A5F3DEAE0AF01E9335F4DD5D4BC
Certificate serial:       1227
Authority key identifier: 58:18:97:8B:2D:08:9A:5F:3D:EA:E0:AF:01:E9:33:5F:4D:D5:D4:BC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/Rttgi0m_ViNZHPdLmFW2sCE4FoE.roa
Signing time:             Mon 26 Aug 2024 05:20:27 +0000
ROA not before:           Mon 26 Aug 2024 05:20:27 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131627
IP address blocks:        103.124.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4647 (0x1227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5818978B2D089A5F3DEAE0AF01E9335F4DD5D4BC
        Validity
            Not Before: Aug 26 05:20:27 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=46DB608B49BF5623591CF74B9855B6B021381681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:84:ba:15:6e:3a:f3:4a:9c:43:d8:6c:b9:
                    be:e8:3d:9f:4a:be:fe:3f:b5:86:b1:fa:0f:e6:e2:
                    71:c4:f9:59:a7:dd:41:3d:af:ef:f1:0c:62:62:64:
                    20:a3:69:b7:17:4d:a7:ed:1a:10:bd:fb:b4:ab:c2:
                    83:e0:d9:97:be:37:90:9d:e1:93:ec:3e:49:33:66:
                    78:36:f6:34:eb:8d:7d:0b:80:eb:62:30:38:84:b8:
                    9d:45:f6:7e:6f:aa:66:bb:b0:12:f2:5c:60:4b:ef:
                    94:47:15:62:8b:dd:71:1e:a8:1c:94:fa:8c:93:44:
                    38:3f:3e:3a:b2:a7:51:c6:3a:56:25:0a:ba:07:1e:
                    ab:c1:f9:ce:62:ad:ba:88:a6:7d:07:e7:72:d8:fe:
                    22:40:d3:5d:69:08:b0:f1:7f:36:a1:f2:02:24:32:
                    a5:13:e2:cb:95:3d:99:88:b4:5f:dd:df:86:ff:9d:
                    c7:0b:79:02:07:4c:59:df:43:87:d4:f4:ce:ed:02:
                    46:d0:6a:90:e5:4c:4d:01:ae:c5:09:4c:46:bb:96:
                    06:9f:45:ac:3b:a9:13:d2:10:a9:75:68:2c:52:57:
                    91:16:00:8d:07:65:0b:9e:bf:7e:4f:39:54:d3:d3:
                    61:9f:e8:2c:b4:04:58:29:3c:b5:b8:9c:68:f6:c4:
                    a0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DB:60:8B:49:BF:56:23:59:1C:F7:4B:98:55:B6:B0:21:38:16:81
            X509v3 Authority Key Identifier:
                keyid:58:18:97:8B:2D:08:9A:5F:3D:EA:E0:AF:01:E9:33:5F:4D:D5:D4:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/Rttgi0m_ViNZHPdLmFW2sCE4FoE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:cc:35:0f:22:26:7f:73:a4:1c:92:f6:1d:19:8d:4f:9a:19:
         56:c7:fb:bf:5b:a7:6f:6a:73:4b:e9:44:b3:69:dc:2c:a3:d6:
         1a:25:1f:9c:25:de:56:ee:99:3a:b5:20:75:e7:e7:aa:90:17:
         ec:5c:60:b8:1b:9d:b1:6e:ae:bf:37:cb:f9:66:7b:bc:2f:ad:
         56:13:44:04:f7:6c:0d:00:22:b9:0c:23:d9:0a:2e:4c:b9:4c:
         a7:bd:92:43:7e:1c:39:82:1c:76:0a:46:54:a2:9b:9b:49:ae:
         f1:9b:0f:70:1e:6f:94:d1:5f:4d:80:7e:a3:7b:d4:06:c8:b2:
         8b:96:7b:5f:35:48:c9:62:24:35:57:88:11:c1:94:17:a8:eb:
         c7:97:9d:58:00:dc:69:f7:c0:5a:95:dd:48:a1:e0:03:15:64:
         5e:ac:65:92:28:56:93:81:61:52:90:48:3f:57:87:03:29:1b:
         c6:18:a2:e5:02:84:e4:b3:07:07:f5:48:12:b4:52:4c:24:87:
         9d:ac:a8:3b:83:01:17:2c:d1:91:b2:40:5c:a6:94:83:1e:d3:
         d4:ad:81:97:b6:4c:80:8f:71:b8:ff:13:da:8f:bf:62:a1:70:
         bc:59:e3:ed:0b:95:d8:a7:24:cf:ec:31:c9:e7:00:9c:f8:65:
         cc:62:e3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:09 2024 by rpki-client on console-ams.rpki-client.org