Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PNI/Q05_24adGzgjz_TJRF2S5DnXBLQ.roa
File:                     Q05_24adGzgjz_TJRF2S5DnXBLQ.roa (raw, json)
Hash identifier:          glP8VekPWmOlJYKEwf8AeyNKtE0cdR86TV6nu2SrKzs=
Subject key identifier:   43:4E:7F:DB:86:9D:1B:38:23:CF:F4:C9:44:5D:92:E4:39:D7:04:B4
Certificate issuer:       /CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF
Certificate serial:       087F
Authority key identifier: 31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/Q05_24adGzgjz_TJRF2S5DnXBLQ.roa
Signing time:             Mon 23 Sep 2024 07:31:26 +0000
ROA not before:           Mon 23 Sep 2024 07:31:26 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131642
IP address blocks:        103.137.62.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175 (0x87f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF
        Validity
            Not Before: Sep 23 07:31:26 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=434E7FDB869D1B3823CFF4C9445D92E439D704B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3b:87:36:51:92:40:f7:2e:e7:c3:f9:06:a9:
                    65:48:02:31:6b:88:7a:c5:ea:89:2e:6b:f5:5c:d1:
                    94:1b:8d:95:2b:f7:8b:9e:ad:d2:10:ae:8b:e6:d1:
                    8c:9d:1c:86:c5:c2:43:cb:7a:fa:62:c7:00:ad:6d:
                    bc:3d:3f:07:70:0e:d5:82:d1:d4:12:12:a2:99:1e:
                    bd:87:ca:88:31:06:1e:c6:cf:6d:23:00:95:32:ca:
                    a0:09:b1:43:dd:08:67:1c:7b:98:c9:7c:d8:f9:cc:
                    22:3b:61:f5:59:d2:2c:7d:a0:1f:e2:4b:09:b5:2e:
                    26:99:c5:e0:04:f3:f5:29:d4:8c:f7:2f:2c:a9:8a:
                    3d:03:cd:24:c0:11:0e:3d:42:79:07:f9:46:e9:66:
                    6a:bc:60:d8:54:c7:70:cf:cb:1e:13:8d:23:84:0d:
                    ae:ea:cb:bf:19:88:3a:f3:c3:e0:ee:18:39:29:61:
                    98:08:bc:4a:10:2a:86:0e:66:25:6a:62:e7:71:d2:
                    f6:a5:19:01:0a:14:b8:f5:78:b7:30:86:4b:9a:90:
                    a2:f6:6a:e9:81:aa:2b:aa:39:0f:05:cc:83:1c:81:
                    8f:6f:31:1a:29:ed:ea:4a:47:c5:91:c5:77:44:e5:
                    7f:b9:0f:d7:89:79:60:6c:06:23:c5:72:44:3b:75:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4E:7F:DB:86:9D:1B:38:23:CF:F4:C9:44:5D:92:E4:39:D7:04:B4
            X509v3 Authority Key Identifier:
                keyid:31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/Q05_24adGzgjz_TJRF2S5DnXBLQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:85:43:19:da:a3:4a:34:c7:49:b9:d9:cf:aa:2c:47:e6:eb:
         53:80:fc:ac:f7:f7:02:f9:71:ba:94:cb:c5:ed:a5:14:ea:08:
         4e:e8:9e:26:83:17:1d:37:6d:e1:13:a2:ab:fa:19:02:92:ee:
         2b:e4:27:be:8d:48:67:07:2d:0a:13:c8:e2:4a:bf:12:9d:7c:
         27:d9:0e:b7:f1:b8:a4:b6:37:b6:bc:84:2a:3e:39:70:72:dd:
         3d:0b:b3:30:50:d5:1d:6b:88:cf:1f:6b:21:0a:34:a5:e2:39:
         59:13:e3:eb:78:01:12:fb:d0:f9:34:09:75:24:54:2d:3f:4c:
         d8:90:b1:f2:11:e3:8b:69:f3:93:98:3a:b8:4a:43:37:e6:11:
         45:c9:24:5d:a8:d8:63:e4:40:7b:b4:4e:28:8a:bd:f3:d8:cc:
         31:47:17:bf:2e:45:66:c0:62:f5:6e:ae:4f:4a:a7:7f:f0:46:
         8b:b7:14:ce:ed:a7:34:ca:7f:00:2a:82:11:b7:3f:83:9c:22:
         d4:be:81:23:ab:26:af:1e:1c:87:55:cb:28:70:b3:4e:85:ae:
         9f:2f:7e:94:80:57:61:fa:30:83:7d:d2:96:53:5a:c4:20:c1:
         94:dd:a9:7d:e8:dc:78:e4:84:5e:1e:3c:19:7e:55:6b:30:b0:
         5c:d0:68:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:43 2024 by rpki-client on console-fra.rpki-client.org