Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/awIZh6KzSYKgVU1YGX__k8Rc-fI.roa
File:                     awIZh6KzSYKgVU1YGX__k8Rc-fI.roa (raw, json)
Hash identifier:          8kCJcp3prAEXxvcP7fI5TZMUkspzTMPqPVBPeYMh+Xs=
Subject key identifier:   6B:02:19:87:A2:B3:49:82:A0:55:4D:58:19:7F:FF:93:C4:5C:F9:F2
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       06E0
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/awIZh6KzSYKgVU1YGX__k8Rc-fI.roa
Signing time:             Mon 26 Aug 2024 05:20:58 +0000
ROA not before:           Mon 26 Aug 2024 05:20:58 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     17415
IP address blocks:        103.152.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1760 (0x6e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Aug 26 05:20:58 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6B021987A2B34982A0554D58197FFF93C45CF9F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:0c:73:4b:bc:e9:19:1a:14:04:d0:6e:0f:
                    88:8e:8f:af:8e:e7:1d:ba:a6:b7:f2:72:fb:b3:84:
                    46:11:30:23:f6:29:b2:a2:7d:a6:1d:6d:1e:32:7e:
                    7c:a9:c6:8a:d0:d6:a9:3d:0e:0f:d3:ee:10:19:0f:
                    58:3f:16:ae:cb:a2:ed:e1:da:ab:6b:9f:c9:75:5e:
                    6b:c4:94:0d:77:b8:b9:ac:b6:ea:d2:0a:dc:fc:e3:
                    4d:da:4f:37:e3:5d:dd:35:2c:21:ea:6c:94:41:9d:
                    cd:cd:bc:e6:37:95:0b:21:a2:d3:2f:3e:a7:5c:9c:
                    e7:6f:36:ad:e2:35:5f:a6:fb:00:d3:4c:f9:96:9c:
                    fa:37:d5:a2:9e:3e:39:8e:81:9b:46:de:98:bf:1c:
                    0e:04:b7:63:e4:b3:3d:f2:04:ec:30:ae:88:6c:cd:
                    75:65:a7:82:2e:d4:a4:ba:a3:c3:44:30:87:bc:45:
                    23:93:a2:20:57:45:0e:27:81:e9:81:40:36:1a:69:
                    9a:f7:dd:6f:35:2c:ac:31:c4:6f:67:82:7f:9c:69:
                    cb:46:cb:a8:57:18:9f:0b:42:52:6e:5d:8b:b0:47:
                    d4:74:d4:a1:5e:20:ea:43:af:e7:cf:df:25:19:f6:
                    29:77:19:d1:13:da:b4:ba:cf:0f:52:67:11:6d:d7:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:02:19:87:A2:B3:49:82:A0:55:4D:58:19:7F:FF:93:C4:5C:F9:F2
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/awIZh6KzSYKgVU1YGX__k8Rc-fI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:f7:9b:1c:79:76:40:31:d7:0d:44:e5:91:28:5b:f4:96:a0:
         4d:ff:96:28:f6:5f:51:48:e7:08:eb:09:75:d4:33:c2:bf:73:
         5e:e5:20:02:aa:2a:9e:c0:cc:a5:b4:0b:7d:e6:83:78:10:35:
         39:ea:39:f9:a0:10:08:e2:4e:bf:f6:5b:84:54:7a:37:c1:a2:
         74:14:bd:9e:c4:b1:6b:6d:27:66:66:77:d3:f4:78:a6:0c:83:
         04:16:d7:17:54:28:a6:2a:d1:37:f8:05:33:04:9a:92:3e:21:
         5a:57:2b:15:94:08:d2:22:fa:65:47:aa:bf:90:6a:aa:d1:70:
         04:78:3a:21:33:26:3f:73:64:c8:81:6f:8a:97:d0:2d:6e:5d:
         0e:b2:61:e1:3f:c2:85:f8:bb:7e:0f:23:7c:09:af:cc:05:be:
         32:89:76:04:7c:24:e0:0d:25:c4:d3:ec:02:c8:b1:53:4a:e9:
         ff:dd:23:65:ac:92:ea:9b:fe:f6:74:17:2d:c9:49:6c:24:af:
         47:32:d2:fb:49:4a:6c:f8:e8:f9:7b:4c:de:aa:ac:d5:f7:d6:
         fc:97:b6:19:87:a1:1f:4c:eb:bb:73:84:0e:31:ed:2b:4d:5d:
         d5:ce:8f:0c:51:fc:09:c2:0e:f7:ae:26:61:b1:b7:ba:43:88:
         33:84:97:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:52 2024 by rpki-client on console-fra.rpki-client.org