Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fHVhnp4PkiOVp4BB8A9YB5zdAMQ.roa
File:                     fHVhnp4PkiOVp4BB8A9YB5zdAMQ.roa (raw, json)
Hash identifier:          iOh0VH0QkJu3L2Mhlc0ANN0VkgiP+EiXgv7gmTmM724=
Subject key identifier:   7C:75:61:9E:9E:0F:92:23:95:A7:80:41:F0:0F:58:07:9C:DD:00:C4
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       12FB
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fHVhnp4PkiOVp4BB8A9YB5zdAMQ.roa
Signing time:             Fri 01 Sep 2023 09:24:19 +0000
ROA not before:           Fri 01 Sep 2023 09:24:19 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     133747
IP address blocks:        115.30.64.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 07:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4859 (0x12fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep  1 09:24:19 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7C75619E9E0F922395A78041F00F58079CDD00C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:9d:77:c1:d2:f2:4c:ff:5b:8d:bd:81:35:
                    f2:da:b3:96:f0:d5:6b:c0:e2:ac:7b:90:e2:c6:e2:
                    71:51:32:39:07:64:20:99:28:1e:4a:2a:75:25:42:
                    41:09:1c:43:96:ec:b2:33:2f:bb:37:02:cc:44:fc:
                    b1:dd:c0:0d:0f:4d:4c:11:c0:e3:8f:3a:63:ab:4c:
                    f1:a3:92:96:af:7b:35:a8:4a:2a:39:1e:1b:b4:10:
                    bb:f6:42:37:54:40:60:ef:cb:64:b6:8a:52:8f:2f:
                    93:97:f4:ae:2c:d9:54:cf:87:6c:3c:dd:da:ce:65:
                    e9:46:ff:c1:90:8e:01:a4:eb:eb:07:c4:89:57:52:
                    44:b5:41:f4:bb:e1:2c:bb:33:75:b2:17:8d:35:1f:
                    f0:49:ce:f0:7a:21:95:73:36:26:ab:97:67:b9:c0:
                    74:c8:1a:d7:ca:a7:6e:31:e1:21:ad:31:dc:a8:d2:
                    13:5f:a1:b0:a7:52:13:4d:13:90:45:ed:c4:43:cf:
                    f5:57:4c:19:79:da:8e:0e:f3:90:fd:ac:b8:c9:94:
                    69:10:43:dd:05:c9:ba:75:08:4a:d8:d2:1d:90:ab:
                    2a:3a:b7:ea:d3:05:ae:53:91:1c:a3:75:e1:93:5e:
                    53:c7:d7:bf:9a:ec:41:8a:c4:89:21:51:18:a1:a6:
                    ed:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:75:61:9E:9E:0F:92:23:95:A7:80:41:F0:0F:58:07:9C:DD:00:C4
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fHVhnp4PkiOVp4BB8A9YB5zdAMQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.30.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:e1:23:22:68:c3:c8:4d:39:ce:78:4d:d2:3f:ae:2f:21:f2:
         0f:75:57:88:a3:96:06:58:64:79:70:d1:e4:3f:ea:d0:e5:fe:
         35:be:5c:5c:f8:7d:5b:bc:f5:ac:a4:ed:d6:12:19:85:e8:4c:
         09:4c:4c:54:e2:c6:a4:cd:0b:17:92:50:b6:c3:8f:25:c0:df:
         4d:37:e4:4f:06:26:ac:fe:9a:cb:a5:fe:3a:6c:23:91:3d:5f:
         74:f7:9f:2e:d5:0b:b9:66:53:a6:54:9b:c6:cd:ff:1e:e0:90:
         4a:1d:14:78:76:0b:32:e1:e2:a1:a0:fb:00:df:65:49:83:8d:
         3d:65:67:f6:bc:fb:be:d6:c3:02:74:9d:57:90:dc:ee:47:aa:
         86:1c:69:97:de:8f:54:b5:ee:b5:c1:5c:29:fa:b8:ce:5c:fd:
         68:ae:6d:cb:3c:68:3d:58:32:98:a8:9d:5b:35:7d:dd:55:0f:
         63:96:40:21:08:18:df:40:06:8b:9c:44:e9:b3:98:8e:a2:72:
         2e:4d:53:b5:4c:e6:6c:19:35:6d:ca:08:cc:73:1f:74:98:f6:
         13:10:80:08:4e:53:d1:82:0f:16:4d:0c:64:b9:37:3a:0d:1b:
         a2:8a:0f:e1:d8:dc:3d:15:bd:cd:4b:18:43:8d:8c:f3:01:30:
         76:44:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org