Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/WwlLVYHugHzuReHQyhih36_p-s4.roa
File:                     WwlLVYHugHzuReHQyhih36_p-s4.roa (raw, json)
Hash identifier:          CnFK6DcsYm62v5ymEhUK/aVToB0LurX/N3lg4mFU7ZE=
Subject key identifier:   5B:09:4B:55:81:EE:80:7C:EE:45:E1:D0:CA:18:A1:DF:AF:E9:FA:CE
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       13A6
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WwlLVYHugHzuReHQyhih36_p-s4.roa
Signing time:             Fri 01 Sep 2023 09:25:15 +0000
ROA not before:           Fri 01 Sep 2023 09:25:15 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     4780
IP address blocks:        112.105.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 07:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5030 (0x13a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep  1 09:25:15 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=5B094B5581EE807CEE45E1D0CA18A1DFAFE9FACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:a2:cd:41:ca:33:66:99:f2:43:ad:c2:67:
                    fc:c9:0e:8d:eb:2f:09:5c:e3:e8:3d:4d:38:4c:4a:
                    bf:ba:37:7e:ec:47:2a:22:cb:1b:5d:2a:4c:68:f0:
                    90:cf:37:1d:bc:fc:a3:d0:10:f1:86:95:52:fc:88:
                    ce:e6:fd:dc:04:72:09:d0:5e:b0:35:34:9b:3d:bf:
                    b4:bb:76:bc:d8:ef:7b:49:00:0e:72:9f:65:aa:51:
                    42:ae:1e:0e:08:da:0d:f6:d3:0f:9a:03:6a:5b:c2:
                    7a:e3:4e:35:5e:5d:5a:b6:a6:aa:a1:77:11:85:71:
                    f8:13:a4:82:9d:fd:9c:73:9c:81:2a:df:59:9c:dd:
                    33:23:02:71:28:38:76:cc:9d:53:59:86:38:15:6a:
                    2d:94:d5:3f:d8:c5:db:00:e2:3a:5f:e9:2d:c6:ff:
                    59:c2:5f:df:67:c7:a3:b0:97:f7:9c:bf:47:66:97:
                    b0:20:6a:9f:e3:aa:fa:cc:1b:b0:77:38:61:bf:1f:
                    6a:9e:7e:6c:7f:72:d9:7a:10:66:7c:66:71:ec:81:
                    a8:56:e7:0a:28:ec:4c:2d:d2:d3:5e:06:e9:20:6b:
                    6d:a5:5d:43:db:e1:48:3f:68:09:80:a2:56:1b:c9:
                    9c:e6:89:8c:bf:83:d6:41:e6:76:b3:59:0d:4c:f5:
                    bc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:09:4B:55:81:EE:80:7C:EE:45:E1:D0:CA:18:A1:DF:AF:E9:FA:CE
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WwlLVYHugHzuReHQyhih36_p-s4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.105.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         59:90:80:60:dd:23:72:0c:e4:9f:d0:00:fe:ca:13:64:21:05:
         eb:33:12:2c:19:c6:f1:ac:be:77:88:ee:c5:8b:0d:35:91:a2:
         55:a8:0e:2a:a5:19:ac:a7:e7:80:80:0d:5e:39:88:b4:30:1a:
         c3:f1:cf:18:0f:4d:28:9f:0d:46:6a:0e:e4:3f:86:3e:6d:7d:
         a4:aa:f4:6a:78:35:e4:9b:68:fa:ba:eb:6b:a6:7e:94:d6:52:
         26:0c:bb:14:e2:37:cf:78:ec:5a:b9:33:70:81:f7:3e:52:32:
         0e:03:98:60:eb:e9:d2:fd:95:2e:2f:95:92:40:6a:fe:18:52:
         fa:91:90:00:89:25:5b:ef:20:6a:be:72:4b:a5:72:c9:e8:57:
         27:92:fc:6d:25:14:96:b0:34:c6:19:7c:ff:6d:3f:5a:ae:d9:
         ee:3d:d2:b9:77:4c:64:6e:ad:c4:8f:5e:3e:9d:5c:1f:f8:1d:
         b8:f9:20:5b:f1:ff:52:93:20:ce:ea:af:5e:b0:e3:86:b7:40:
         33:e1:47:da:b2:05:07:97:e9:6d:54:cf:45:74:78:67:0e:0d:
         b0:41:b9:1a:30:f1:f2:b0:f7:b7:54:0d:fb:34:08:49:05:57:
         83:44:22:1f:d1:f0:d9:d5:1e:c2:4a:02:83:df:68:27:25:bb:
         91:75:fd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org