Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/_ayIEBHltmEv-j5p06ToBmD5ERM.roa
File:                     _ayIEBHltmEv-j5p06ToBmD5ERM.roa (raw, json)
Hash identifier:          AbcvNNsvMFCanVZayCnacnmeH6nGJ2eZ+/i8QXbTioc=
Subject key identifier:   FD:AC:88:10:11:E5:B6:61:2F:FA:3E:69:D3:A4:E8:06:60:F9:11:13
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       1331
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/_ayIEBHltmEv-j5p06ToBmD5ERM.roa
Signing time:             Mon 10 Feb 2025 14:09:13 +0000
ROA not before:           Mon 10 Feb 2025 14:09:13 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9924
IP address blocks:        219.86.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 02:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4913 (0x1331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb 10 14:09:13 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=FDAC881011E5B6612FFA3E69D3A4E80660F91113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b1:7a:37:7b:9e:01:6b:65:12:60:b1:c8:05:
                    ef:a1:31:0f:14:14:48:27:bb:1c:3f:c0:33:88:2f:
                    02:21:d9:b2:fb:94:94:4c:52:73:69:ba:68:05:57:
                    40:85:dc:6c:63:4c:12:5a:af:cd:0f:6e:0f:f2:42:
                    83:df:f0:d1:8a:f3:b0:f4:7e:e2:73:5b:a4:71:30:
                    7e:bb:96:cf:6c:25:ad:04:98:b2:56:e0:36:b8:28:
                    ce:23:3b:92:d9:fd:23:1c:0a:a0:29:6c:a2:24:83:
                    8d:1d:6e:19:3c:8a:1f:a3:fd:37:3d:5f:75:8b:e9:
                    c3:c7:a0:08:4a:33:d6:29:ae:d8:5b:57:ff:7c:97:
                    af:f6:03:b8:3b:14:36:c2:e9:b7:23:de:90:d1:28:
                    2d:a1:e1:31:28:63:7f:d9:b7:ea:08:ec:d3:ef:cb:
                    72:85:01:47:a7:c7:dd:73:31:e5:e1:23:ab:2c:83:
                    5c:1d:df:97:c0:a0:b9:1d:94:d3:da:c5:7b:6f:c0:
                    86:81:43:b3:1d:6d:0f:e3:e7:a1:09:6f:e2:19:ea:
                    cd:df:81:54:f9:17:57:52:7a:85:10:89:c7:68:6a:
                    be:8e:f7:9a:53:8b:8e:ab:ad:6e:0a:51:9b:42:50:
                    78:63:e3:40:a7:3d:10:ad:6b:f4:83:b6:98:4a:b4:
                    c0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AC:88:10:11:E5:B6:61:2F:FA:3E:69:D3:A4:E8:06:60:F9:11:13
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/_ayIEBHltmEv-j5p06ToBmD5ERM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.86.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         45:7d:bd:bd:7e:c6:88:3b:e8:32:2b:3b:17:1d:27:4b:4d:62:
         40:5d:85:19:80:80:26:43:ee:8e:4f:e2:01:8d:51:45:25:fb:
         5a:41:f6:3f:54:32:4b:34:9b:48:9a:a7:f8:cb:0c:62:4f:8b:
         53:68:ea:c2:9b:c4:ea:ac:54:b7:0b:44:23:d9:78:b2:bc:28:
         fd:38:99:1a:2e:a3:74:5c:8e:01:4d:cf:f2:91:04:ad:3e:71:
         61:86:19:2b:a6:1e:e6:0d:d1:12:26:df:ab:68:06:1e:8d:83:
         cf:4d:92:e5:dd:fd:a0:be:c1:2f:f0:37:cb:39:07:7d:14:26:
         39:76:97:90:71:ee:be:3f:44:8f:3c:8f:6d:e9:48:0e:4a:88:
         4c:f7:26:84:dd:7c:93:04:c0:ec:dd:b3:3a:0a:9f:ee:37:c2:
         03:1b:f1:e2:95:ce:d4:14:39:09:50:e6:8c:6a:a1:54:2a:4a:
         07:b0:26:9e:c9:50:59:cc:32:15:cd:cd:c1:8e:ee:e5:4a:5e:
         16:87:72:4b:41:8b:29:1d:b5:60:80:f8:67:d7:f1:ac:3c:8a:
         7e:80:2b:fd:11:08:b2:a0:b1:cf:77:12:f1:2a:b5:67:5b:8e:
         5b:86:22:c5:bf:0d:95:5b:9a:03:57:77:09:8f:7f:42:1b:91:
         7f:31:0e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:00:13 2025 by rpki-client