Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GRpuVF-mGuAJT2wTtGNEbse8Z6k.roa
File:                     GRpuVF-mGuAJT2wTtGNEbse8Z6k.roa (raw, json)
Hash identifier:          vrnohd85c5uYXrLrJ44iQ44AD8Str36mNzvhccgBRfQ=
Subject key identifier:   19:1A:6E:54:5F:A6:1A:E0:09:4F:6C:13:B4:63:44:6E:C7:BC:67:A9
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0FFA
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GRpuVF-mGuAJT2wTtGNEbse8Z6k.roa
Signing time:             Fri 01 Sep 2023 09:37:35 +0000
ROA not before:           Fri 01 Sep 2023 09:37:35 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131597
IP address blocks:        219.86.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 00:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4090 (0xffa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep  1 09:37:35 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=191A6E545FA61AE0094F6C13B463446EC7BC67A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:51:39:30:74:eb:40:fb:80:6a:5c:e2:fa:
                    06:78:6b:94:b8:e4:07:90:12:ad:e9:8a:a3:1d:53:
                    84:fc:fe:d7:0d:c9:ab:54:13:8a:33:e8:24:45:cb:
                    35:42:85:e7:b7:a0:a7:b6:98:d2:3e:87:5e:b7:03:
                    49:3e:9e:a2:4c:d6:49:0f:7a:d6:5c:fb:b5:4a:17:
                    02:7c:3a:32:7e:99:59:a9:68:b4:6e:93:7d:bc:3f:
                    51:4e:32:3d:7f:d0:99:f6:5b:1d:7a:78:89:1d:48:
                    f3:a5:8d:b4:0c:3b:7c:b6:92:ea:6b:72:16:46:90:
                    5d:f6:e1:01:29:fb:61:a4:4f:03:f0:5f:6a:0f:37:
                    cc:2f:18:8c:19:02:6e:48:b5:3c:92:7a:52:52:04:
                    a3:e2:fb:ce:e5:23:9e:ac:58:13:e2:ad:20:92:d9:
                    80:f5:ac:b3:53:5f:61:27:16:b0:90:82:d1:73:13:
                    c4:3a:73:f9:ce:9a:15:2d:db:aa:e1:3a:48:b4:f6:
                    a6:2a:21:2c:22:b4:e6:85:c4:a8:63:f3:e2:86:79:
                    d0:64:36:28:3b:bf:98:57:aa:28:96:38:59:7b:0c:
                    a6:0e:9c:e3:5b:6a:72:51:21:36:f0:6a:11:0c:57:
                    6d:85:a5:d5:8a:5e:97:dc:90:86:a7:fd:16:41:77:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1A:6E:54:5F:A6:1A:E0:09:4F:6C:13:B4:63:44:6E:C7:BC:67:A9
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GRpuVF-mGuAJT2wTtGNEbse8Z6k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.86.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:53:55:14:64:50:09:69:37:ed:9e:5d:4a:ac:bf:19:86:1a:
         d2:0a:9d:f3:4d:cb:ee:a9:7a:34:71:8e:74:a7:ec:eb:83:48:
         35:f5:80:af:0b:d1:88:11:31:d2:ba:18:ff:b3:6c:43:9d:00:
         f5:cd:e9:88:a3:b0:26:10:9d:d4:14:37:f3:cf:c0:7b:77:e5:
         79:80:38:19:90:1b:05:98:4a:99:3d:a2:94:36:b0:91:e5:8e:
         96:0f:67:f3:13:58:e3:2c:b2:d6:1e:2f:d4:61:09:29:bc:e6:
         c8:38:cb:e6:fb:1a:fa:c6:4b:da:dc:20:eb:6e:68:d0:e9:8f:
         d2:77:5e:ec:46:1a:a4:a5:9d:49:43:f3:d7:58:08:91:10:bf:
         6d:29:d3:8c:72:34:c2:d7:f7:02:d1:f2:99:6e:54:17:6e:2e:
         97:63:87:12:d3:5c:f6:4f:45:da:27:82:4d:19:90:40:79:52:
         99:92:2f:de:31:36:67:82:eb:ac:fe:ee:85:97:fb:1c:dd:57:
         f2:15:69:20:15:63:0d:ac:01:d5:97:aa:f9:cb:37:a1:72:dd:
         3f:50:d8:6f:00:6b:80:65:25:38:ae:6e:e5:81:cb:29:c1:12:
         ce:b2:7d:f5:23:31:9f:95:59:14:f9:1c:d5:30:39:4d:87:4a:
         5b:be:e5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:02 2024 by rpki-client on console-fra.rpki-client.org