Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/kaan-RdH5hPvN6Bhd8f7udn9Q9s.roa
File:                     kaan-RdH5hPvN6Bhd8f7udn9Q9s.roa (raw, json)
Hash identifier:          G8imEEkWvm6nr/mNS9Iy2kfJ0w2z/zDvkmJJclOlV4w=
Subject key identifier:   91:A6:A7:F9:17:47:E6:13:EF:37:A0:61:77:C7:FB:B9:D9:FD:43:DB
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       162D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kaan-RdH5hPvN6Bhd8f7udn9Q9s.roa
Signing time:             Mon 26 Aug 2024 05:21:52 +0000
ROA not before:           Mon 26 Aug 2024 05:21:52 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     23675
IP address blocks:        106.105.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5677 (0x162d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Aug 26 05:21:52 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=91A6A7F91747E613EF37A06177C7FBB9D9FD43DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:32:28:34:de:fe:90:3b:ba:dc:d6:97:ec:
                    b7:92:b4:a2:4f:18:62:20:0a:ab:42:8f:7c:a4:e2:
                    f5:db:36:98:a2:6e:69:25:4b:bf:cd:8c:ee:d2:9c:
                    8f:16:37:d1:4f:b3:9f:5c:8f:b7:a4:0b:e1:c0:fd:
                    7a:81:b2:74:52:54:19:6e:0c:c0:11:7f:fe:d0:69:
                    6c:17:72:2b:c3:8c:e3:f0:59:99:0a:bf:5d:eb:b6:
                    d8:1d:aa:5e:58:13:e1:61:fb:60:bd:f3:c9:6d:01:
                    a5:25:61:3d:06:3c:12:7c:1b:52:ab:dd:08:ea:81:
                    ac:e5:ad:8e:7a:7d:5d:65:62:77:39:71:a5:9d:f6:
                    63:5c:02:69:69:80:f0:12:cb:36:58:69:b3:9e:3c:
                    76:6f:6c:99:37:a8:27:c2:e9:ba:4d:d9:20:08:d7:
                    e1:ac:aa:41:2a:31:2d:72:dd:9d:43:33:46:1a:84:
                    96:6d:42:ef:d1:26:6e:c1:89:7b:f6:f7:f7:6e:cf:
                    64:66:6e:ac:8d:f7:56:5c:b4:98:fe:5a:c1:39:56:
                    86:d1:54:03:8e:86:40:d3:c0:c6:c9:37:a1:88:6a:
                    a1:fe:c7:ed:34:ce:fc:41:60:d1:be:5a:0a:63:8c:
                    1b:57:a8:0d:f7:90:70:1b:88:95:c4:5f:b8:02:ec:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A6:A7:F9:17:47:E6:13:EF:37:A0:61:77:C7:FB:B9:D9:FD:43:DB
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kaan-RdH5hPvN6Bhd8f7udn9Q9s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:d1:53:8a:3e:44:47:93:a9:2b:52:8c:56:45:08:81:78:01:
         0e:9b:06:6d:d4:f9:91:b6:eb:1c:34:38:58:78:2d:04:b5:45:
         8c:90:50:5d:e2:e4:09:74:0c:7f:2e:05:7e:38:3a:ae:4a:ee:
         23:33:2f:38:51:7e:06:e5:03:81:11:16:d8:35:da:44:db:07:
         d3:90:a6:1c:7c:a3:0e:91:03:33:9c:ee:d2:b4:91:01:1a:27:
         0f:11:8f:88:65:fe:e4:e2:a7:4d:a7:4d:01:02:25:f1:20:f9:
         8f:21:aa:62:bd:86:4d:2e:4c:d5:c4:8e:0f:04:00:fc:74:7d:
         7a:a3:af:4e:7e:ef:8d:e4:0d:b7:33:1a:48:1e:00:de:ec:7f:
         58:71:93:1e:35:5a:e8:b7:f3:e2:e4:92:56:a2:a3:22:5d:cc:
         b8:00:60:2b:25:19:3c:e3:b1:e5:8b:f7:c2:53:5d:5b:76:73:
         92:40:c9:74:a3:27:83:89:f5:11:9d:9a:6d:06:e5:ce:ac:86:
         d4:08:02:42:64:b8:43:ab:0a:88:f2:9f:d0:3c:5c:3f:d3:56:
         7e:36:06:e1:be:8c:6a:75:f0:e7:4d:bd:21:54:40:f8:aa:da:
         e2:90:51:e7:e5:4f:aa:fc:00:b5:b8:3a:cf:35:0d:ff:20:bc:
         7f:e8:42:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:11 2024 by rpki-client on console-ams.rpki-client.org