Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/6D1bH5QTs_mmudiuMql0IoHQVYw.roa
File:                     6D1bH5QTs_mmudiuMql0IoHQVYw.roa (raw, json)
Hash identifier:          7XuBl09xH085cuZovrW70zzzEB29lFWrNqrv5pjTy3Q=
Subject key identifier:   E8:3D:5B:1F:94:13:B3:F9:A6:B9:D8:AE:32:A9:74:22:81:D0:55:8C
Certificate issuer:       /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial:       0E0A
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/6D1bH5QTs_mmudiuMql0IoHQVYw.roa
Signing time:             Mon 26 Aug 2024 05:24:58 +0000
ROA not before:           Mon 26 Aug 2024 05:24:58 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38843
IP address blocks:        223.27.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3594 (0xe0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
        Validity
            Not Before: Aug 26 05:24:58 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E83D5B1F9413B3F9A6B9D8AE32A9742281D0558C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:0c:41:a8:6d:87:8a:93:11:e4:b4:70:44:
                    4e:a9:26:aa:39:6a:c8:ee:c3:0c:ac:b9:4c:62:27:
                    00:5c:d2:88:e1:92:c2:d9:d6:53:8a:b1:ee:56:c1:
                    53:46:0c:18:48:47:d7:6d:de:2a:dc:dc:75:dc:b2:
                    fe:45:26:03:14:fd:b2:5b:85:a8:74:38:77:37:a3:
                    3b:7d:f3:87:ef:25:78:66:34:3a:02:dd:aa:00:fa:
                    d4:e7:09:e2:49:f8:4a:55:63:f5:dc:3d:22:87:25:
                    88:df:3f:97:dd:8f:79:43:a3:aa:0a:0f:f3:75:f7:
                    b6:52:ac:7b:db:f7:9c:f5:e3:73:52:6e:5a:58:b8:
                    ea:ba:1a:a8:52:88:99:7a:0f:55:cf:f0:25:9e:dd:
                    ae:1a:57:1d:fc:76:91:60:05:95:16:4a:55:1e:66:
                    c3:62:b6:b2:97:ed:46:e5:9d:ce:9e:d4:28:88:26:
                    9a:1f:6c:6b:6f:8c:17:58:7d:aa:89:bb:30:af:ff:
                    19:92:ff:0a:9b:a3:12:4c:51:f9:95:ac:7c:af:fe:
                    ea:f2:90:b5:cd:2f:ae:11:b7:2f:c2:42:a1:d0:f0:
                    50:59:a8:4d:de:66:fa:c8:1b:f2:12:5a:2e:c3:56:
                    b7:13:ac:20:96:a3:29:f3:b3:93:b0:86:a9:d3:61:
                    10:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3D:5B:1F:94:13:B3:F9:A6:B9:D8:AE:32:A9:74:22:81:D0:55:8C
            X509v3 Authority Key Identifier:
                keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/6D1bH5QTs_mmudiuMql0IoHQVYw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:52:3d:46:ef:e5:39:f9:30:a1:fa:5a:58:0b:5d:c9:8d:e3:
         2e:d9:46:fc:05:c3:45:be:22:11:7f:99:2b:ba:60:60:3e:33:
         c6:05:72:78:18:cc:fa:fe:ab:48:b5:c8:33:78:b6:b4:a8:b5:
         1c:6b:2a:52:de:22:8b:07:bd:b2:99:41:29:67:e4:42:d5:cf:
         11:e3:ac:ac:63:02:f9:ca:25:9b:ac:08:0f:6c:ba:b7:ef:80:
         9e:19:45:74:8b:50:00:70:a0:d1:16:55:73:af:48:ea:97:78:
         cb:ea:f0:7d:d1:7a:ff:dc:e6:f3:e5:3d:0c:11:93:3f:91:2c:
         5d:c0:28:42:6d:5b:5d:d2:f3:d9:71:24:e9:df:a8:1a:c4:31:
         aa:8e:bd:85:8a:44:e0:b3:cc:0b:c1:50:29:6e:7e:38:ba:e9:
         80:c3:95:62:9f:96:ee:fe:cd:ff:10:28:1c:7e:4b:78:0c:9e:
         c9:50:45:d8:89:11:40:36:9d:15:67:93:48:92:f8:41:df:e4:
         28:34:64:96:6c:fe:f2:16:1d:ab:e6:0c:0e:7a:1c:a7:37:04:
         2a:c8:1c:ca:e6:5e:5e:ec:95:91:6f:f2:ac:6f:24:bf:48:fc:
         2a:37:01:42:87:48:e7:82:f8:83:32:c1:7f:27:7f:c7:54:9a:
         04:26:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org