Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/pg5_N6pd1439e7YUOHnWfJlSLpE.roa
File:                     pg5_N6pd1439e7YUOHnWfJlSLpE.roa (raw, json)
Hash identifier:          D4FZkyTr5ZrVDnXwP4usXswq4dWFaUdt3Ad/QQDpEk0=
Subject key identifier:   A6:0E:7F:37:AA:5D:D7:8D:FD:7B:B6:14:38:79:D6:7C:99:52:2E:91
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       1360
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pg5_N6pd1439e7YUOHnWfJlSLpE.roa
Signing time:             Fri 01 Sep 2023 09:24:51 +0000
ROA not before:           Fri 01 Sep 2023 09:24:51 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18049
IP address blocks:        112.105.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 09:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4960 (0x1360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep  1 09:24:51 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=A60E7F37AA5DD78DFD7BB6143879D67C99522E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:0f:02:05:ba:64:93:08:3d:a0:da:0d:2b:
                    2e:23:4e:64:8e:f5:06:6c:a2:d5:a5:2a:c6:c9:2a:
                    e0:eb:fc:84:93:27:07:c7:4a:37:50:e2:5c:fa:04:
                    58:8d:5e:e0:70:b1:d2:e7:87:61:3f:3e:7e:4d:8d:
                    4e:8f:7f:bc:a2:e3:c2:cc:b6:b4:30:6a:28:e8:c0:
                    bb:63:18:02:b6:03:75:c3:40:d6:7c:9a:1b:67:a5:
                    0f:18:4a:23:fd:ae:e7:7b:da:03:24:c6:dd:b5:92:
                    26:80:ea:35:2b:bf:fe:b0:e3:96:49:e3:db:17:4d:
                    0d:90:76:a8:c4:08:15:f5:9e:79:e9:8d:33:e1:0b:
                    a0:2b:e3:f4:4a:1b:4c:e6:b0:6a:96:e9:43:b0:45:
                    f9:e0:e8:c0:58:2f:8d:b0:98:34:76:a5:db:0c:3e:
                    79:81:02:b6:a2:17:33:d1:f8:c3:5a:a8:85:a6:5f:
                    b5:d1:00:3c:a5:f3:bd:70:b7:38:90:ae:03:c4:18:
                    ed:54:f5:84:46:e9:4d:b4:a0:5a:0c:80:41:64:21:
                    14:bf:e3:3f:4e:b8:d2:4b:39:2d:10:10:9c:af:8b:
                    6a:b1:ea:dc:48:f8:2b:d5:0a:98:fc:a7:db:bc:53:
                    81:99:fd:52:05:9b:3a:fa:7f:25:a8:b6:ff:87:f7:
                    97:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0E:7F:37:AA:5D:D7:8D:FD:7B:B6:14:38:79:D6:7C:99:52:2E:91
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pg5_N6pd1439e7YUOHnWfJlSLpE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.105.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:0c:f6:41:df:f6:4f:2d:aa:17:0a:42:6d:ec:13:41:86:7d:
         ed:f8:2e:b7:1b:32:f1:7e:3a:98:74:ef:ab:97:b3:24:a4:15:
         50:b0:0b:ed:38:4f:00:76:57:fb:8f:aa:df:09:65:c8:7d:ec:
         52:e2:4b:60:5a:a0:8c:32:ed:12:8b:76:00:00:29:2f:28:2a:
         bd:81:4f:ab:03:bd:d4:80:97:3f:2d:b6:3b:81:a4:7d:24:93:
         dd:d2:06:8f:6e:57:8d:79:1e:90:73:3e:e4:2a:6d:30:36:0b:
         b0:f9:23:72:8c:18:8c:02:25:7d:e8:47:b8:d3:3f:6c:e9:3a:
         df:fa:ab:39:91:cd:3f:59:75:de:de:57:67:ab:9d:07:2b:cd:
         06:a1:a0:f0:91:3c:c6:34:62:15:2d:72:4e:e0:8e:b9:ab:fb:
         1f:e5:fb:b1:22:83:af:74:e2:2a:49:34:e1:51:3f:a9:0a:9b:
         b8:78:0b:15:af:d5:65:54:5b:38:ee:2e:ff:09:eb:3c:f1:48:
         f8:f9:0e:59:5d:ea:39:6b:2b:98:38:76:d5:83:90:03:20:cf:
         9f:98:aa:69:bb:9b:d7:c8:65:17:24:a1:85:f9:91:f1:79:66:
         70:e1:a9:61:bf:5f:65:bc:40:33:d7:8f:0d:26:ad:b9:c8:75:
         1e:b2:eb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:25:38 2024 by rpki-client on console-ams.rpki-client.org