Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ue0pLQ9mNeZWHNyhUm4UTPoCvYs.roa
File:                     ue0pLQ9mNeZWHNyhUm4UTPoCvYs.roa (raw, json)
Hash identifier:          TBSJXv/7lznrNUJJN4mdQKw4uofxE0vWcM8pajozo/o=
Subject key identifier:   B9:ED:29:2D:0F:66:35:E6:56:1C:DC:A1:52:6E:14:4C:FA:02:BD:8B
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       1349
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ue0pLQ9mNeZWHNyhUm4UTPoCvYs.roa
Signing time:             Fri 01 Sep 2023 09:24:44 +0000
ROA not before:           Fri 01 Sep 2023 09:24:44 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     4780
IP address blocks:        210.64.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 09:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4937 (0x1349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep  1 09:24:44 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=B9ED292D0F6635E6561CDCA1526E144CFA02BD8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:68:b7:3b:2f:06:0c:a0:27:5e:87:d7:44:
                    8a:dc:bd:04:60:8b:6f:96:94:94:ee:61:15:06:0e:
                    d3:96:d6:dc:ef:d2:7f:66:e6:0a:02:2d:db:19:b8:
                    c6:74:db:fc:43:df:ca:e5:53:a7:d2:02:f1:87:96:
                    e8:08:d2:96:2a:c3:ed:7a:19:88:5a:f4:12:e7:c2:
                    d5:48:34:e3:37:0d:96:44:ea:81:e5:5e:6a:35:13:
                    a1:eb:cd:81:c4:5a:2c:98:3a:99:07:2c:22:8a:83:
                    39:7a:43:6d:92:65:91:04:f4:75:96:46:db:ee:0b:
                    c0:f7:7a:ca:c4:c5:3c:e1:47:eb:a6:f8:85:2c:cf:
                    0c:23:38:66:a5:d4:4e:58:c4:71:38:d1:7c:b5:13:
                    01:7c:f0:da:05:e3:b3:cb:2c:b5:43:d4:ab:a9:df:
                    a2:0f:2d:70:9f:9c:7e:82:ef:4e:e4:48:a3:a5:74:
                    12:fc:48:24:b9:81:59:08:2b:14:2c:1b:87:b4:02:
                    07:13:9d:2c:b7:9b:c0:17:8b:5b:61:49:0d:d0:2a:
                    a7:8d:19:6b:37:55:35:55:3d:7e:78:74:81:f8:c3:
                    d9:db:d5:a4:09:4c:36:00:38:f4:f2:61:ea:1f:89:
                    df:ba:8d:29:cd:65:5b:92:24:79:dc:a2:63:f7:e6:
                    c5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:ED:29:2D:0F:66:35:E6:56:1C:DC:A1:52:6E:14:4C:FA:02:BD:8B
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ue0pLQ9mNeZWHNyhUm4UTPoCvYs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.64.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         47:96:32:06:92:6f:9e:c8:20:82:70:5f:a4:25:86:7e:6b:18:
         38:41:a8:5b:f3:89:0d:ca:b2:79:f8:15:0c:25:a5:d6:da:9c:
         41:4d:c1:cf:25:9a:b0:67:35:1b:01:15:ea:ba:3a:45:09:56:
         63:59:6c:a4:26:0e:35:6e:10:19:27:bf:3d:2b:6f:3c:01:26:
         81:43:e0:95:58:23:17:67:ea:27:fd:7d:c6:52:ae:88:8d:f5:
         23:8a:0c:f7:d2:72:7f:13:99:ce:ce:8a:eb:25:cb:c5:c6:69:
         64:4d:3c:88:77:b4:3b:c7:73:cf:76:d7:2c:87:ee:bc:68:83:
         77:13:48:bf:84:d8:67:ff:51:4b:da:8a:f7:6d:91:0a:60:ec:
         2b:1c:7d:32:06:1b:14:4e:fe:61:c1:d6:4a:66:76:30:52:c0:
         5e:29:5c:02:3e:26:57:38:10:44:4d:8b:18:49:d6:cb:89:aa:
         72:2f:24:d4:42:f9:3f:bd:38:a7:8a:42:20:d3:ad:87:df:fb:
         ce:0c:23:16:aa:7b:cf:d6:6d:fd:22:e7:0b:9c:14:c6:07:a5:
         93:0b:7b:2e:0b:52:bf:94:8f:d6:3b:97:ad:43:a9:5b:4b:72:
         8a:a5:4d:58:6e:0e:0b:5b:14:5b:d9:09:cd:d2:0b:bc:d4:7a:
         48:d4:b3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:20:18 2024 by rpki-client on console-fra.rpki-client.org