Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/bjbQS5ShwWHirS7Rcnh-MChyjf0.roa
File:                     bjbQS5ShwWHirS7Rcnh-MChyjf0.roa (raw, json)
Hash identifier:          o946USyoPBDg+MahWms9hLNcrkM/UjPbzyfSBogs5R0=
Subject key identifier:   6E:36:D0:4B:94:A1:C1:61:E2:AD:2E:D1:72:78:7E:30:28:72:8D:FD
Certificate issuer:       /CN=1C7073A6066C765842FDF07169E43518A0BB0235
Certificate serial:       F1
Authority key identifier: 1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/bjbQS5ShwWHirS7Rcnh-MChyjf0.roa
Signing time:             Sat 26 Oct 2024 15:48:56 +0000
ROA not before:           Sat 26 Oct 2024 15:48:56 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     150755
IP address blocks:        203.175.104.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7073A6066C765842FDF07169E43518A0BB0235
        Validity
            Not Before: Oct 26 15:48:56 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6E36D04B94A1C161E2AD2ED172787E3028728DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:01:57:9d:e9:e3:13:c0:60:87:00:6e:cb:
                    87:c0:6a:2e:0e:9b:1b:e1:d5:73:af:90:ad:80:83:
                    e1:85:33:4a:f6:95:68:bb:46:95:96:14:ad:e0:f9:
                    f0:99:f9:14:2b:ef:76:17:2d:3d:7a:72:d3:37:f1:
                    07:92:cb:11:3d:52:e1:c9:ba:b2:6b:c5:30:22:fb:
                    6d:cd:77:51:a4:c3:a5:87:46:28:8c:ec:6f:41:0a:
                    08:d3:6f:bc:b7:c4:a0:18:b4:84:81:9c:24:54:03:
                    d5:9a:e5:0f:ab:da:df:e0:18:4b:c2:60:61:6c:54:
                    94:b4:1f:21:f2:28:15:ef:f8:41:5b:33:e4:4c:b6:
                    07:96:35:19:36:4f:a6:f0:7e:e7:95:68:c6:75:4d:
                    c7:22:8f:d4:da:fe:d6:1b:3b:74:b5:f7:95:a0:42:
                    67:d4:af:66:5c:cb:17:77:44:8b:29:12:4a:75:8e:
                    51:cf:c7:30:80:bb:09:51:f0:b8:a7:ab:ed:79:4b:
                    0c:44:d0:0e:18:f4:78:31:4d:80:d1:32:08:a7:58:
                    f7:c2:85:fc:45:2d:5e:79:5a:aa:b3:88:b7:e6:f0:
                    14:19:a2:98:fa:2a:4d:c1:60:d9:3a:75:84:23:8b:
                    83:e7:29:c3:12:4b:7f:66:18:e2:12:96:44:e0:d8:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:36:D0:4B:94:A1:C1:61:E2:AD:2E:D1:72:78:7E:30:28:72:8D:FD
            X509v3 Authority Key Identifier:
                keyid:1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/bjbQS5ShwWHirS7Rcnh-MChyjf0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:b4:f2:58:73:07:38:60:bb:4c:9a:5b:d3:f5:55:7d:dd:36:
         a7:e4:50:90:86:58:f1:17:2b:ef:66:48:e4:d1:b7:a9:99:47:
         a9:b7:88:8b:56:86:12:38:de:57:7a:aa:06:90:f3:e7:f1:79:
         3c:54:e6:62:30:75:17:66:28:27:a4:c8:1a:03:51:37:3a:2f:
         aa:b8:32:9d:d7:c1:95:5e:8a:a4:e0:25:06:80:37:c4:1d:13:
         36:35:47:06:a0:80:a0:40:7d:60:67:a7:9b:ea:d5:81:25:89:
         eb:52:a7:a8:03:67:15:07:42:f9:a9:98:a7:fe:cb:b0:86:f5:
         1d:ad:4a:b2:90:f7:09:86:b5:82:78:2c:96:47:09:6e:cf:f3:
         f1:2d:bf:dd:40:f2:31:9c:45:c9:49:01:39:15:34:20:85:84:
         7f:89:ab:02:4e:91:ae:6a:6c:69:13:ee:01:4d:32:d2:7f:40:
         4a:f4:ee:3b:21:af:bb:26:e1:3a:0c:19:24:c7:ed:c5:10:d7:
         94:a3:8d:f0:29:c0:04:06:1d:47:5a:47:6d:be:c2:d0:85:ad:
         bb:fc:5e:66:fd:70:a7:b7:44:51:8b:e3:bc:cb:68:56:ad:b4:
         bc:20:bb:16:d9:5b:43:ce:c0:03:13:4c:cc:82:c2:d3:cb:6b:
         50:ed:df:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org