Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/gC4W1YziPAeFXDe1cc9dK3Y--ic.roa
File:                     gC4W1YziPAeFXDe1cc9dK3Y--ic.roa (raw, json)
Hash identifier:          TbmJIlCTiHO3X/19PUGKrO7s+LkCGNtL75Xg4waMmac=
Subject key identifier:   80:2E:16:D5:8C:E2:3C:07:85:5C:37:B5:71:CF:5D:2B:76:3E:FA:27
Certificate issuer:       /CN=34F47974E551C20236C3D89395F57F3BA02B57B7
Certificate serial:       0BFB
Authority key identifier: 34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/gC4W1YziPAeFXDe1cc9dK3Y--ic.roa
Signing time:             Tue 05 Nov 2024 03:29:01 +0000
ROA not before:           Tue 05 Nov 2024 03:29:01 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     395793
IP address blocks:        103.129.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3067 (0xbfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F47974E551C20236C3D89395F57F3BA02B57B7
        Validity
            Not Before: Nov  5 03:29:01 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=802E16D58CE23C07855C37B571CF5D2B763EFA27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:06:2f:7a:04:79:ec:6a:ac:96:f7:77:be:
                    cd:a2:f9:b7:b4:0b:c1:30:74:06:1c:3c:0d:3f:ec:
                    75:13:31:13:05:1d:c6:50:c0:96:78:75:8b:c3:60:
                    77:72:22:63:0d:3f:20:e4:47:b5:3d:c8:ef:5d:95:
                    dc:44:0d:9d:66:c3:7d:88:3a:8a:0d:8b:61:8b:25:
                    0e:93:ba:03:a1:72:06:f4:18:f5:fa:96:de:b6:12:
                    3e:af:0a:a4:a5:46:78:f0:66:d1:dc:0c:47:14:ec:
                    b8:23:64:2f:0d:24:ed:6b:c0:51:fa:19:59:d2:26:
                    af:72:75:f3:d6:b4:2c:99:4d:41:3f:3c:b7:0f:8b:
                    9c:00:4e:8c:1d:82:47:a7:21:21:01:53:33:4e:12:
                    c4:83:be:dd:1e:1d:62:a2:15:7b:57:94:16:f0:51:
                    9e:98:79:60:30:c8:56:8c:58:1c:82:08:c6:b2:fb:
                    bd:b8:a2:81:31:61:98:73:ed:78:71:8e:5e:d0:88:
                    89:a9:3a:6c:da:b6:a7:ba:30:ab:5d:15:aa:73:b9:
                    6e:b6:87:b5:ec:ca:f9:46:70:b6:36:4f:cb:8b:a4:
                    36:99:0c:70:bc:5a:c0:5f:4b:c8:c3:1b:e1:a8:79:
                    7a:6f:c5:de:95:41:6e:d3:67:03:06:6f:ae:d6:79:
                    02:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2E:16:D5:8C:E2:3C:07:85:5C:37:B5:71:CF:5D:2B:76:3E:FA:27
            X509v3 Authority Key Identifier:
                keyid:34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/gC4W1YziPAeFXDe1cc9dK3Y--ic.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:3a:c9:e6:82:43:d7:f9:f5:a8:8f:4a:f2:31:75:24:19:2d:
         7b:76:c9:1d:08:4d:9c:71:82:68:64:2c:af:fe:b3:a5:d7:ff:
         16:29:42:e1:4e:c6:ce:a3:05:f8:a0:27:2c:34:d9:aa:15:85:
         65:99:85:04:37:4c:66:75:b1:58:04:bf:79:22:0d:03:31:54:
         73:f7:83:d2:d1:5a:b2:40:0f:b5:b2:d0:df:f0:3e:70:aa:c3:
         13:95:53:c7:07:b9:f1:17:dc:f1:dd:72:83:f3:54:8a:06:45:
         cd:4c:9e:46:93:f4:27:03:58:0d:40:e9:ef:4d:28:7c:e5:0a:
         c4:a0:52:05:b2:79:fb:c3:df:c6:b5:0f:8f:75:85:65:f4:49:
         32:9f:6d:60:9f:1b:83:73:a8:8d:20:9f:23:74:49:7a:46:c7:
         3b:47:8a:3b:59:a3:0a:2e:c7:0f:4b:5d:4d:f4:e5:51:65:ea:
         32:08:80:59:12:37:fe:25:22:f3:7b:e9:85:84:03:89:05:45:
         7a:43:8f:23:ed:56:7d:71:f4:25:db:0a:47:ee:19:6d:69:a5:
         db:e6:b3:f8:80:f9:e4:09:d8:36:57:88:87:f9:d4:2a:2a:f0:
         36:4e:87:dc:f5:37:95:b4:3d:19:fc:1d:cd:ab:08:b7:ca:a4:
         0c:7a:3c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:08:49 2024 by rpki-client on console-fra.rpki-client.org