Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/W2PW0159D49vnY1X6YuK8pcD_Yw.roa
File:                     W2PW0159D49vnY1X6YuK8pcD_Yw.roa (raw, json)
Hash identifier:          /K6uRnNubqLn1MMz6oppqYwTca/MQs5kN8TSk1Qieho=
Subject key identifier:   5B:63:D6:D3:5E:7D:0F:8F:6F:9D:8D:57:E9:8B:8A:F2:97:03:FD:8C
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       06DF
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/W2PW0159D49vnY1X6YuK8pcD_Yw.roa
Signing time:             Mon 26 Aug 2024 05:20:58 +0000
ROA not before:           Mon 26 Aug 2024 05:20:58 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38840
IP address blocks:        2406:3540:fff8::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1759 (0x6df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Aug 26 05:20:58 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=5B63D6D35E7D0F8F6F9D8D57E98B8AF29703FD8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:71:32:2f:06:94:d4:6b:1f:11:5c:db:3a:ac:
                    ab:32:b7:e8:99:c9:96:ee:44:79:2a:c0:35:fe:08:
                    de:06:e8:8c:4f:dc:d1:f0:24:b3:94:92:a9:e1:39:
                    e6:32:72:13:6e:65:36:74:bb:e7:cf:ea:f5:0f:8c:
                    23:5c:3a:c7:dc:99:51:6c:06:e2:c8:1c:16:33:86:
                    fe:3d:fd:0c:93:f0:f0:77:d5:24:b6:aa:b8:69:f2:
                    37:2a:a2:55:5f:b6:f2:65:b9:e0:01:e4:30:cf:ab:
                    62:40:78:8f:7b:b0:de:79:d1:e0:35:1a:06:5e:1d:
                    f3:6c:ec:1e:07:7c:af:e1:ec:1a:64:ec:20:f7:b2:
                    a8:73:5c:35:8c:ea:04:66:9b:df:79:76:23:98:31:
                    27:de:e1:73:73:02:2d:de:57:b1:ec:e8:75:98:c4:
                    0f:dd:e8:fe:46:f8:f8:27:90:db:29:13:b6:36:98:
                    bf:78:82:5f:31:00:f8:70:46:d9:82:88:91:fb:fd:
                    ea:61:de:00:64:cc:71:59:8f:9e:84:ee:2a:ee:76:
                    ac:dc:f8:2a:21:10:9c:53:fd:c7:3d:40:f3:ce:a0:
                    19:6e:e0:0c:97:16:42:fb:d0:d9:45:3b:7f:5d:61:
                    4b:91:1a:de:d3:93:7d:61:72:9d:03:6a:3c:1e:c3:
                    95:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:63:D6:D3:5E:7D:0F:8F:6F:9D:8D:57:E9:8B:8A:F2:97:03:FD:8C
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/W2PW0159D49vnY1X6YuK8pcD_Yw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540:fff8::/46

    Signature Algorithm: sha256WithRSAEncryption
         05:9b:96:db:40:9b:54:6f:8b:c2:df:4e:24:11:e5:3d:fc:f2:
         a1:8c:32:d6:37:3a:25:40:33:0b:9c:05:27:0e:a2:74:14:34:
         3b:41:f3:77:b9:84:7c:5d:86:2c:2c:d3:96:fc:35:be:a0:68:
         92:96:ee:bf:15:01:d5:b7:eb:e7:82:4c:32:41:e6:98:5a:e8:
         39:96:8c:d9:51:0e:26:64:66:de:7d:de:15:ee:a5:53:69:42:
         d6:b6:41:c3:ca:61:9f:07:a6:51:5e:54:24:3b:1b:e4:a4:4a:
         64:c2:c2:7c:6f:e4:e7:35:35:8d:d8:78:01:15:6b:1e:86:7e:
         1f:7e:d3:1e:10:ce:22:b4:66:af:c1:cb:6d:98:0b:39:f7:b8:
         a5:f2:23:3b:ed:d2:18:f2:fd:60:76:f1:c9:45:53:ca:92:90:
         55:06:45:89:7d:19:3b:d3:81:cd:1f:58:d3:b3:6f:9f:84:88:
         06:b1:38:b6:4e:af:ed:9e:70:f5:0e:f9:e3:a2:7b:13:bb:65:
         9a:ef:9a:d9:76:65:9a:44:41:04:4a:9b:b0:95:1a:51:f9:12:
         a5:16:6c:6e:6f:e0:b5:99:26:6d:69:49:17:45:e2:60:38:43:
         02:92:33:17:ae:7c:78:6b:64:6a:f9:9d:bf:ea:0f:5e:c1:f7:
         e4:03:cb:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:13:10 2024 by rpki-client on console-fra.rpki-client.org