Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/GLUJXv-XO5ux9_ZVuhuykp0nJgc.roa
File:                     GLUJXv-XO5ux9_ZVuhuykp0nJgc.roa (raw, json)
Hash identifier:          73oFiu0qHP72q2FLh15Q4f3CIBHssEpnp8IcK91wi6w=
Subject key identifier:   18:B5:09:5E:FF:97:3B:9B:B1:F7:F6:55:BA:1B:B2:92:9D:27:26:07
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0C5A
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/GLUJXv-XO5ux9_ZVuhuykp0nJgc.roa
Signing time:             Mon 26 Aug 2024 05:23:57 +0000
ROA not before:           Mon 26 Aug 2024 05:23:57 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131593
IP address blocks:        103.42.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3162 (0xc5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Aug 26 05:23:57 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=18B5095EFF973B9BB1F7F655BA1BB2929D272607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:40:d8:b3:4a:47:95:c9:97:a5:3e:0e:12:
                    de:70:fc:20:09:90:b5:a7:14:35:a6:ff:16:4a:19:
                    5b:08:d9:27:d0:58:91:f3:cb:8d:87:c0:9e:c7:44:
                    a8:e0:2a:80:8e:53:90:d0:6f:f4:47:d2:b8:59:6b:
                    88:ca:20:a2:9b:d5:7a:a0:18:60:6f:ba:de:0a:a6:
                    37:69:ab:8e:be:39:3a:c5:47:07:b4:4d:c9:5a:2b:
                    39:97:41:07:db:22:50:dc:22:93:63:5c:b0:19:07:
                    28:b7:33:80:21:c4:10:33:95:cc:b1:f2:28:bf:e9:
                    39:f9:25:5a:6b:ed:93:69:6c:98:bc:d5:e5:fa:c1:
                    ae:1a:42:6e:8f:b4:5d:bf:ba:0d:d6:b7:6b:ed:72:
                    2a:90:8c:b6:18:d0:29:35:2e:89:ff:92:01:4e:0b:
                    62:ec:d2:b5:27:39:0c:2d:68:70:af:00:d1:e4:5b:
                    82:76:2c:dd:b8:70:bb:86:ba:0b:40:3f:13:37:ee:
                    11:ac:11:4e:d4:66:e4:f5:48:b2:3f:ce:73:17:4e:
                    83:66:07:6d:b7:30:99:42:fe:b8:67:65:26:80:97:
                    58:8b:2d:39:df:57:5e:ac:c5:cb:94:d1:90:17:f3:
                    a2:a3:cd:2f:47:0a:ec:cc:14:c3:64:ba:32:32:2c:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B5:09:5E:FF:97:3B:9B:B1:F7:F6:55:BA:1B:B2:92:9D:27:26:07
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/GLUJXv-XO5ux9_ZVuhuykp0nJgc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:7e:dd:99:5b:5c:ec:5d:3e:3e:81:ec:68:30:89:00:4f:68:
         20:34:bd:3a:5f:f0:6c:00:e6:4e:1c:98:b8:b8:f6:1d:8e:14:
         78:49:d8:da:40:93:cb:95:55:a2:c3:a6:df:c8:f9:51:2c:38:
         09:32:f9:1c:96:6e:a6:c9:3d:3b:37:4b:dd:da:99:ad:eb:70:
         a2:48:9c:83:f7:92:f9:bc:b9:e1:2d:a5:5b:e8:f9:fa:80:a6:
         d5:51:3b:b7:5c:71:0e:65:9c:c3:52:c1:01:b2:fe:78:a6:36:
         9a:7b:e7:50:52:fa:a2:65:8c:44:08:52:3d:bf:a6:eb:1d:30:
         ae:7b:ec:0e:60:72:43:5f:e4:a5:2a:d9:ff:7e:57:32:96:ac:
         51:c3:ca:3e:39:34:85:f3:31:50:c8:36:35:49:f6:0c:d0:43:
         9c:06:80:85:b4:b1:f3:c5:7d:8c:d9:17:ea:3c:cd:b0:53:5d:
         9c:83:98:a5:f2:9e:2d:46:41:4b:17:f1:95:ab:70:c0:90:76:
         93:2b:2e:87:fb:76:cf:0d:ba:ed:43:b5:5d:4c:d0:da:4c:d3:
         7a:39:94:57:f4:91:d5:5b:8e:b0:2a:a9:ee:35:4b:96:71:c3:
         61:f2:e9:e3:ba:73:4c:cc:ca:1d:50:88:97:03:8b:54:a7:d9:
         32:d9:81:85
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDFowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMERG
OTRBQjA3MjhDN0EzOEM1MEYwRDYxNTU0RDQ5RDY1MUYzM0FBMjAeFw0yNDA4MjYw
NTIzNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE4QjUwOTVFRkY5NzNC
OUJCMUY3RjY1NUJBMUJCMjkyOUQyNzI2MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPLEDYs0pHlcmXpT4OEt5w/CAJkLWnFDWm/xZKGVsI2SfQWJHz
y42HwJ7HRKjgKoCOU5DQb/RH0rhZa4jKIKKb1XqgGGBvut4Kpjdpq46+OTrFRwe0
TclaKzmXQQfbIlDcIpNjXLAZByi3M4AhxBAzlcyx8ii/6Tn5JVpr7ZNpbJi81eX6
wa4aQm6PtF2/ug3Wt2vtciqQjLYY0Ck1Lon/kgFOC2Ls0rUnOQwtaHCvANHkW4J2
LN24cLuGugtAPxM37hGsEU7UZuT1SLI/znMXToNmB223MJlC/rhnZSaAl1iLLTnf
V16sxcuU0ZAX86KjzS9HCuzMFMNkujIyLOtLAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUGLUJXv+XO5ux9/ZVuhuykp0nJgcwHwYDVR0jBBgwFoAUDflKsHKMejjFDw1h
VU1J1lHzOqIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVHQVRS
T04vRGZsS3NIS01lampGRHcxaFZVMUoxbEh6T3FJLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9EZmxLc0hLTWVqakZEdzFoVlUxSjFsSHpPcUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QRUdBVFJPTi9HTFVKWHYtWE81dXg5
X1pWdWh1eWtwMG5KZ2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZyqUMA0GCSqGSIb3DQEBCwUAA4IBAQBOft2ZW1zsXT4+gexoMIkAT2ggNL06
X/BsAOZOHJi4uPYdjhR4SdjaQJPLlVWiw6bfyPlRLDgJMvkclm6myT07N0vd2pmt
63CiSJyD95L5vLnhLaVb6Pn6gKbVUTu3XHEOZZzDUsEBsv54pjaae+dQUvqiZYxE
CFI9v6brHTCue+wOYHJDX+SlKtn/flcylqxRw8o+OTSF8zFQyDY1SfYM0EOcBoCF
tLHzxX2M2RfqPM2wU12cg5il8p4tRkFLF/GVq3DAkHaTKy6H+3bPDbrtQ7VdTNDa
TNN6OZRX9JHVW46wKqnuNUuWccNh8unjunNMzModUIiXA4tUp9ky2YGF
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:12 2024 by rpki-client on console-ams.rpki-client.org