Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/pUf4DWxDLxZutXaxyVbUoW4P264.roa
File:                     pUf4DWxDLxZutXaxyVbUoW4P264.roa (raw, json)
Hash identifier:          GfETrFUHfU9+/MEzRVOXZw4eFb+oTtrRiRZrHS72+Ys=
Subject key identifier:   A5:47:F8:0D:6C:43:2F:16:6E:B5:76:B1:C9:56:D4:A1:6E:0F:DB:AE
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0F81
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/pUf4DWxDLxZutXaxyVbUoW4P264.roa
Signing time:             Fri 01 Sep 2023 09:36:56 +0000
ROA not before:           Fri 01 Sep 2023 09:36:56 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131628
IP address blocks:        175.99.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 00:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3969 (0xf81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep  1 09:36:56 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=A547F80D6C432F166EB576B1C956D4A16E0FDBAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:35:0e:f0:59:eb:05:06:4a:06:63:61:4e:
                    1b:d1:40:b6:eb:b6:1b:6f:34:4d:82:c2:89:e0:35:
                    94:cf:f4:17:d8:d2:34:75:29:39:69:a2:b3:f2:52:
                    e9:a1:b0:bd:de:7b:5a:b1:9f:38:4f:cb:0a:70:c9:
                    77:fe:b2:31:8e:9a:7c:80:c8:39:d4:3e:6f:11:c4:
                    4a:9d:de:93:ce:61:20:56:76:ad:70:c9:3f:1b:c3:
                    a5:23:89:08:38:42:36:93:1b:de:71:1c:6d:82:87:
                    a8:50:68:c1:9f:2a:28:e3:26:81:ca:df:ff:76:14:
                    f8:8b:e7:d1:b4:e9:b0:f0:c2:c8:2c:6d:35:10:10:
                    c4:18:98:1e:c4:3a:06:25:16:ff:05:01:c0:60:93:
                    ee:37:ca:b4:5b:f2:19:2a:c7:2d:33:b9:51:8e:d2:
                    6b:08:36:64:f7:6a:96:b4:10:66:69:12:84:e2:36:
                    56:df:d2:a7:77:fc:8e:f0:58:a2:48:72:70:b4:50:
                    cf:75:56:88:71:b3:c5:62:18:86:7c:ba:13:01:04:
                    84:fb:1b:49:0c:0c:7d:1c:a6:8e:01:49:d6:02:78:
                    c4:0d:7c:cc:a9:40:e5:f3:93:3c:89:39:49:7e:58:
                    32:1d:2c:e5:f0:09:f3:bb:57:47:7d:35:bb:38:a0:
                    79:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:47:F8:0D:6C:43:2F:16:6E:B5:76:B1:C9:56:D4:A1:6E:0F:DB:AE
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/pUf4DWxDLxZutXaxyVbUoW4P264.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.99.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:61:75:19:00:5d:9d:29:44:d9:21:7a:c7:15:cf:7c:27:02:
         98:66:9d:08:83:3b:05:7e:41:f0:5c:61:96:92:26:03:66:58:
         47:d5:8c:28:3f:6e:50:59:a5:d4:80:d8:ef:fe:eb:64:05:fd:
         87:5d:06:75:04:46:08:1a:52:14:31:2c:aa:b6:3e:8a:ba:06:
         0a:1f:63:c3:ac:58:68:c9:ae:35:b1:a2:e3:00:70:b0:15:69:
         3c:59:38:b2:87:b7:fc:c8:83:69:6e:8f:20:5e:3f:c8:56:fa:
         cc:0e:76:b4:59:29:a4:5a:07:e2:52:5b:bc:ac:e2:ac:c2:9a:
         61:a7:bd:9d:09:bf:f6:82:90:3c:d1:81:e7:25:83:12:d7:55:
         2f:f0:c2:e6:12:fd:d8:86:32:c1:41:37:76:90:4c:f1:df:3c:
         7a:d4:ef:e0:bb:bc:ce:a4:0f:84:a6:1e:c1:e7:40:0c:a2:da:
         41:6e:6f:01:32:bd:87:4c:8e:44:8b:bf:21:3f:7f:75:4c:cb:
         d4:18:b0:65:61:5b:d3:f1:5e:c3:84:18:a4:22:51:a7:4b:24:
         7d:13:bf:72:04:08:ce:13:e2:66:d7:2a:6e:50:f8:e1:8b:ec:
         09:5e:54:0c:c3:54:ca:5f:76:21:90:22:c5:6f:dd:f3:db:e3:
         8d:59:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org