Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/r6WztecU-ZvhccaqvMNaapB4oJc.roa
File:                     r6WztecU-ZvhccaqvMNaapB4oJc.roa (raw, json)
Hash identifier:          jlGwuJYXc9UL3F3INlrT6YqnAverCCdROO9so5QYFRw=
Subject key identifier:   AF:A5:B3:B5:E7:14:F9:9B:E1:71:C6:AA:BC:C3:5A:6A:90:78:A0:97
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       06E1
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/r6WztecU-ZvhccaqvMNaapB4oJc.roa
Signing time:             Mon 26 Aug 2024 05:20:59 +0000
ROA not before:           Mon 26 Aug 2024 05:20:59 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131668
IP address blocks:        103.152.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1761 (0x6e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Aug 26 05:20:59 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=AFA5B3B5E714F99BE171C6AABCC35A6A9078A097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3b:90:3b:69:2b:6e:04:29:9a:5d:fb:7b:8b:
                    48:e0:73:75:0a:98:5d:dd:9a:00:76:53:e4:20:f4:
                    a6:01:62:99:67:48:8d:20:32:d8:93:65:1d:5b:01:
                    a5:73:51:83:7c:8d:e7:9d:8f:38:87:77:39:b7:9a:
                    34:f5:4b:69:d7:19:42:fa:9d:8d:93:bf:db:27:62:
                    d2:92:40:b8:23:2d:20:e5:45:43:9d:3c:2b:e5:6d:
                    7e:2c:c5:39:c9:f4:9a:fe:16:7d:a5:94:0f:16:06:
                    c4:d2:a1:18:14:ca:49:69:b7:1c:13:c5:56:54:6d:
                    b2:c6:ad:e3:4e:b0:5a:76:43:c2:f1:ea:14:12:61:
                    19:2b:74:dc:76:fc:0a:19:10:74:ce:14:27:ed:37:
                    e2:4c:95:ba:f5:f8:90:71:bb:52:00:b6:57:24:bd:
                    34:dd:bb:b0:30:65:ae:db:46:1c:a2:1d:10:62:db:
                    67:a8:9d:15:28:1f:b7:4a:57:d8:48:94:57:e7:a2:
                    7f:30:54:81:a1:00:f1:65:1d:1e:37:48:2d:84:12:
                    93:3e:2f:02:52:51:d9:10:6a:d9:81:1f:07:12:16:
                    fe:99:7e:cc:6e:4c:c1:cb:0f:e7:56:84:70:18:32:
                    8a:e2:80:2b:ce:3a:10:e8:ff:be:6d:b8:fb:18:43:
                    91:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A5:B3:B5:E7:14:F9:9B:E1:71:C6:AA:BC:C3:5A:6A:90:78:A0:97
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/r6WztecU-ZvhccaqvMNaapB4oJc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:55:7d:e7:d4:46:e7:50:c4:27:1a:47:05:47:51:27:29:d1:
         a9:27:cc:20:f0:92:31:72:d5:90:e1:a5:ac:cd:ee:f4:f8:1d:
         6c:9c:1f:5a:ff:33:f0:a3:a3:4d:50:4c:b0:2d:aa:18:ea:98:
         a1:ae:31:8e:28:66:7c:35:fb:92:50:8f:fa:db:31:60:f3:4c:
         91:f8:24:bd:1c:a0:1f:17:b2:a3:d7:aa:f0:77:3f:96:4f:b5:
         a9:fe:5e:8b:ae:a2:8a:fb:a4:d4:31:ca:e0:4d:3d:c3:66:07:
         87:2f:8c:9b:da:6f:c0:de:10:2f:eb:db:aa:65:c9:8b:49:da:
         e4:ab:3e:8b:17:55:2f:e0:ee:fc:81:4d:b6:a6:a0:1f:ba:5f:
         ea:48:3a:78:f9:99:44:a7:58:37:a7:aa:9d:8b:30:23:12:e8:
         e0:50:5e:f3:fa:82:c8:8f:f7:33:18:c6:3a:e1:71:bf:bc:2a:
         fd:f8:0a:2d:1e:d8:24:dc:78:67:2c:c3:01:b4:d2:db:a9:fd:
         62:31:5f:d1:56:16:2f:a9:0a:b6:1f:11:86:58:49:a3:2b:53:
         4c:0c:12:8c:1d:64:fd:29:88:da:71:cc:23:db:78:a7:26:d7:
         fb:3d:4b:3d:dc:31:cc:ca:bb:13:c9:44:97:3f:c5:83:22:92:
         7d:6f:cb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:52 2024 by rpki-client on console-fra.rpki-client.org