Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Fe-uAza3AsK968n9WtalFrCgWDM.roa
File:                     Fe-uAza3AsK968n9WtalFrCgWDM.roa (raw, json)
Hash identifier:          EMZkjwTYGO9KznzX59GBiRSSLwpAZx/7GtzExHqRYZo=
Subject key identifier:   15:EF:AE:03:36:B7:02:C2:BD:EB:C9:FD:5A:D6:A5:16:B0:A0:58:33
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       164E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Fe-uAza3AsK968n9WtalFrCgWDM.roa
Signing time:             Mon 26 Aug 2024 05:22:02 +0000
ROA not before:           Mon 26 Aug 2024 05:22:02 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     4780
IP address blocks:        203.190.16.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5710 (0x164e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Aug 26 05:22:02 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=15EFAE0336B702C2BDEBC9FD5AD6A516B0A05833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:28:ee:3f:4d:f1:cc:bd:87:08:98:5f:bd:
                    6f:cd:dc:f1:e1:c4:4c:0c:93:b6:b6:e5:9e:69:aa:
                    01:94:91:5a:99:dc:81:d1:74:a0:06:d8:85:34:54:
                    ed:0c:1f:33:e0:39:1d:d0:34:1b:c2:9b:72:29:6c:
                    60:34:c6:95:26:22:bb:71:e4:65:f9:16:c8:cf:63:
                    85:f2:d3:0d:61:db:c5:20:66:9e:ba:b6:2d:00:81:
                    da:18:80:2c:65:28:71:c1:aa:c8:3c:82:07:d7:3b:
                    37:e7:09:fd:5f:c5:3e:eb:2e:6f:5f:ad:88:68:fd:
                    bc:d1:22:31:e6:46:c8:ee:24:54:ce:3a:fd:f8:ec:
                    12:e9:26:46:8c:7f:e7:a8:44:b4:7e:f8:df:53:d5:
                    75:77:93:63:e0:cb:5d:bd:5f:b2:1c:9b:39:9f:62:
                    27:aa:52:15:37:a2:86:68:4c:2f:fb:7f:e8:74:f4:
                    43:d6:76:08:8d:76:90:01:f1:7d:f5:53:26:cc:68:
                    0a:70:0a:a6:84:11:ef:70:7e:3b:65:b9:2f:90:b4:
                    f9:61:d5:b3:0e:26:1c:48:a3:f2:25:8c:b7:f6:09:
                    bb:5d:0c:1c:20:1c:d6:e7:e9:9a:0d:33:ce:6a:fe:
                    f4:0e:a7:73:27:5d:cf:b8:9a:66:fd:04:77:f9:df:
                    1a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EF:AE:03:36:B7:02:C2:BD:EB:C9:FD:5A:D6:A5:16:B0:A0:58:33
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Fe-uAza3AsK968n9WtalFrCgWDM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.190.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:73:2b:12:d5:5b:b2:23:76:4d:e2:e5:4a:14:9f:72:d9:f9:
         30:a0:be:a6:db:87:ac:a4:66:2d:0e:b2:37:8d:9c:60:cc:f0:
         75:4f:22:18:ea:e8:b1:a0:19:e5:e5:21:75:82:9a:10:92:cd:
         58:39:c5:d9:b1:59:1b:e7:8e:43:4f:0d:31:b9:87:22:94:d0:
         ed:77:49:df:0c:f3:8e:4b:7b:54:e5:15:1e:6e:14:2b:a6:2d:
         e3:5e:0c:47:63:2e:c7:f9:9b:9d:6c:f1:a3:ae:b0:3a:e3:2c:
         8f:12:57:13:d8:ea:3d:23:d7:40:28:6e:1f:e9:74:4b:0a:08:
         ed:c7:e5:a0:52:b2:f1:0f:83:4e:6e:79:c4:2b:35:2a:f5:6f:
         d0:02:5e:bd:2d:9b:66:32:36:14:0e:48:67:59:42:12:24:20:
         a5:a8:75:ec:d9:db:f1:b9:0f:34:33:b3:ff:fe:0f:15:dc:a3:
         0f:83:ec:bd:b1:15:a7:9b:6f:17:6a:a3:ed:92:6e:be:29:bc:
         a7:e3:aa:73:1f:bc:11:ee:8f:ec:d6:4e:3c:1a:42:b6:b8:51:
         28:0f:b7:28:e6:a6:ac:fe:7d:6b:08:b3:5e:9e:9d:51:34:90:
         a5:09:e1:75:df:e5:cc:c1:21:0c:a9:af:f9:27:12:8c:18:ec:
         c1:b0:1e:d8
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICFk4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw
NTIyMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE1RUZBRTAzMzZCNzAy
QzJCREVCQzlGRDVBRDZBNTE2QjBBMDU4MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvpCjuP03xzL2HCJhfvW/N3PHhxEwMk7a25Z5pqgGUkVqZ3IHR
dKAG2IU0VO0MHzPgOR3QNBvCm3IpbGA0xpUmIrtx5GX5FsjPY4Xy0w1h28UgZp66
ti0AgdoYgCxlKHHBqsg8ggfXOzfnCf1fxT7rLm9frYho/bzRIjHmRsjuJFTOOv34
7BLpJkaMf+eoRLR++N9T1XV3k2Pgy129X7IcmzmfYieqUhU3ooZoTC/7f+h09EPW
dgiNdpAB8X31UybMaApwCqaEEe9wfjtluS+QtPlh1bMOJhxIo/IljLf2CbtdDBwg
HNbn6ZoNM85q/vQOp3MnXc+4mmb9BHf53xr1AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUFe+uAza3AsK968n9WtalFrCgWDMwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRmUtdUF6YTNBc0s5NjhuOVd0YWxG
ckNnV0RNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8u+EDAN
BgkqhkiG9w0BAQsFAAOCAQEADnMrEtVbsiN2TeLlShSfctn5MKC+ptuHrKRmLQ6y
N42cYMzwdU8iGOrosaAZ5eUhdYKaEJLNWDnF2bFZG+eOQ08NMbmHIpTQ7XdJ3wzz
jkt7VOUVHm4UK6Yt414MR2Mux/mbnWzxo66wOuMsjxJXE9jqPSPXQChuH+l0SwoI
7cfloFKy8Q+DTm55xCs1KvVv0AJevS2bZjI2FA5IZ1lCEiQgpah17Nnb8bkPNDOz
//4PFdyjD4PsvbEVp5tvF2qj7ZJuvim8p+Oqcx+8Ee6P7NZOPBpCtrhRKA+3KOam
rP59awizXp6dUTSQpQnhdd/lzMEhDKmv+ScSjBjswbAe2A==
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:10 2024 by rpki-client on console-ams.rpki-client.org