Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/t7Cjyp179kJ-HnkXphUUmqKmHwA.roa
File:                     t7Cjyp179kJ-HnkXphUUmqKmHwA.roa (raw, json)
Hash identifier:          09tHvN8+zK6qBN96JkC4bSWNi9a1l/1PdOT5GmrSuFk=
Subject key identifier:   B7:B0:A3:CA:9D:7B:F6:42:7E:1E:79:17:A6:15:14:9A:A2:A6:1F:00
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       06E7
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/t7Cjyp179kJ-HnkXphUUmqKmHwA.roa
Signing time:             Mon 26 Aug 2024 05:21:00 +0000
ROA not before:           Mon 26 Aug 2024 05:21:00 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     17415
IP address blocks:        2406:3540:fff0::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1767 (0x6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Aug 26 05:21:00 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=B7B0A3CA9D7BF6427E1E7917A615149AA2A61F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:88:67:be:84:ad:e4:13:4a:55:ca:32:b5:
                    cb:a8:84:47:9f:3a:9a:67:ee:6b:2c:ef:13:51:c5:
                    ee:9f:7c:52:2b:9c:93:bd:78:54:9d:0a:06:10:08:
                    b4:a0:09:eb:7d:a6:fd:57:1d:46:a3:d2:5e:d7:1e:
                    a6:de:6a:75:9f:50:f0:0a:91:f4:f8:d2:a3:84:18:
                    43:32:1b:23:8e:9b:8e:dd:bc:9c:83:61:67:63:cc:
                    fe:2b:a5:16:9d:e5:43:23:59:46:14:a8:ba:10:10:
                    ec:6c:55:f4:36:c7:da:0d:05:38:95:7d:bb:11:bb:
                    96:25:d4:d3:0f:b9:2d:54:3a:7a:0c:00:6e:aa:0d:
                    97:61:8c:c4:6e:bc:d0:a6:fe:aa:59:7c:3e:e1:2d:
                    14:1b:18:d2:e1:40:0f:41:b2:3c:29:08:89:8f:52:
                    3a:3c:71:2c:9a:01:9e:85:e4:cd:ea:f4:65:0b:e7:
                    ea:b5:85:20:cb:e1:11:e6:09:28:88:0a:d2:57:a8:
                    03:2b:c4:bc:43:81:14:d8:01:6a:7d:a8:18:37:d2:
                    20:b3:a1:e9:94:57:9c:e3:ff:68:c8:1b:a2:2f:e1:
                    96:aa:a6:22:37:45:0b:43:0e:10:05:4d:a8:8f:3c:
                    86:26:72:4f:7e:16:14:8e:35:7e:24:17:49:f0:23:
                    0f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B0:A3:CA:9D:7B:F6:42:7E:1E:79:17:A6:15:14:9A:A2:A6:1F:00
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/t7Cjyp179kJ-HnkXphUUmqKmHwA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540:fff0::/46

    Signature Algorithm: sha256WithRSAEncryption
         94:3d:db:da:9f:af:3a:6f:a7:7e:a4:0e:80:34:46:3f:48:48:
         61:a9:86:2e:5f:2b:0f:ba:66:20:a2:de:a1:01:55:9d:6f:aa:
         05:90:0a:fb:62:8e:9f:11:24:bb:8b:f9:da:b5:37:b4:66:da:
         49:0a:09:4c:a3:51:e5:50:4d:07:8b:5b:27:8c:0e:4a:d0:d3:
         1a:87:64:77:e9:fd:8e:b7:bc:7e:4c:9f:ab:dd:d3:55:b9:17:
         c0:0f:78:eb:8a:09:29:59:4a:82:a2:d0:df:75:6d:4a:f5:86:
         eb:17:67:bc:54:bd:71:9b:1c:05:16:20:25:11:2a:d6:11:bd:
         e4:60:48:cd:f5:bd:81:f6:bf:01:34:b6:52:71:0f:01:6a:32:
         53:23:fe:90:c3:30:73:81:e2:1c:12:fa:d4:8b:e4:3e:03:af:
         bd:a8:b5:78:da:35:7e:af:24:2a:2a:80:5e:70:f5:cc:9b:96:
         4a:1e:98:5e:7d:87:df:13:39:11:31:65:f3:30:86:ec:a1:ae:
         70:4f:b4:95:9e:c0:b3:ef:33:ab:3e:f6:80:4a:68:84:ab:de:
         42:5b:40:41:59:ff:0b:62:b9:8e:3f:0b:6b:2f:d2:73:21:66:
         c1:ad:27:61:8b:e1:71:79:5b:6c:92:5c:8e:87:d7:3e:b1:4d:
         0b:1d:e8:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org