Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/j-R6pt9Fdx7Wa_33O9sI58M_JJo.roa
File:                     j-R6pt9Fdx7Wa_33O9sI58M_JJo.roa (raw, json)
Hash identifier:          AeXpSoe0hoxi23XnZExWDcWDuzvKp8z3E3mcSt/o3NM=
Subject key identifier:   8F:E4:7A:A6:DF:45:77:1E:D6:6B:FD:F7:3B:DB:08:E7:C3:3F:24:9A
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       0CD4
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/j-R6pt9Fdx7Wa_33O9sI58M_JJo.roa
Signing time:             Mon 26 Aug 2024 05:25:20 +0000
ROA not before:           Mon 26 Aug 2024 05:25:20 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9676
IP address blocks:        61.65.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3284 (0xcd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Aug 26 05:25:20 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8FE47AA6DF45771ED66BFDF73BDB08E7C33F249A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:b9:8d:9b:47:98:72:22:d3:7e:b6:73:98:
                    aa:02:52:e9:88:17:a3:0e:0f:93:1d:75:e5:53:8f:
                    a2:ce:42:a5:09:a9:e1:88:b6:15:74:e0:bb:17:e2:
                    9f:65:6c:2a:4c:de:bf:41:39:09:38:fc:ab:3b:f7:
                    28:04:93:f2:d9:66:6c:e9:2e:9e:db:fd:6f:2a:d8:
                    4d:a5:fb:37:cc:3f:77:3d:d3:30:db:3d:e2:61:ae:
                    4d:0b:81:99:d4:11:e7:f7:54:f8:89:57:ea:de:0e:
                    37:6a:75:74:ab:47:cb:f6:6d:60:3f:1b:24:e2:9b:
                    f1:83:2b:ee:2f:bf:0f:3b:a3:b2:2f:0f:38:19:34:
                    dd:1f:79:05:4d:d6:8f:56:57:db:36:ee:3e:c5:27:
                    cf:e8:df:0d:b9:15:60:1b:f2:03:78:78:38:90:0d:
                    17:19:36:4e:e9:f4:02:1c:45:8a:dd:18:94:27:24:
                    34:68:0d:6c:12:ef:5a:d4:c7:c2:4b:40:46:7d:e9:
                    09:73:bc:59:42:39:2e:15:56:42:62:b2:73:03:fa:
                    56:8f:08:02:44:01:bd:92:86:9b:3a:d9:72:fc:6c:
                    12:15:ae:2a:60:23:da:0f:36:3b:86:47:c1:62:35:
                    2b:16:1d:8d:4a:fb:ea:05:e0:fa:10:3a:8b:90:6f:
                    49:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E4:7A:A6:DF:45:77:1E:D6:6B:FD:F7:3B:DB:08:E7:C3:3F:24:9A
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/j-R6pt9Fdx7Wa_33O9sI58M_JJo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.65.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         46:d7:27:66:39:ed:97:69:77:4e:fd:40:8a:29:cc:eb:ba:c4:
         47:f8:d2:82:af:59:88:a8:80:ba:8f:15:4b:27:9a:4e:06:7e:
         41:84:88:13:b0:4e:b1:b7:ff:f3:ea:c4:9d:ad:ee:fe:03:a5:
         e7:8c:91:7e:b5:e0:28:6e:f0:0f:71:ae:13:58:11:ca:51:53:
         dd:0e:2c:93:17:0b:d3:73:e3:98:fe:be:c2:21:f3:da:31:c3:
         00:6b:98:e7:43:64:2c:62:3c:8e:f6:e2:ec:24:d3:3b:70:7b:
         6f:ff:76:6e:51:85:d8:99:61:ac:33:ef:70:38:c5:41:d5:74:
         70:64:69:cb:5b:42:4f:3c:5e:7f:46:f9:a5:8e:a3:e9:ef:1c:
         9e:7f:67:dd:83:f1:f8:33:8f:5c:67:a7:c4:79:a8:30:f8:bc:
         df:33:fa:6f:1d:55:1c:7d:83:88:5b:73:3e:75:7d:17:24:c5:
         ce:c1:da:24:48:8a:7b:77:8c:ef:6f:07:e6:b4:ee:64:ee:8f:
         10:44:e1:53:e9:00:7e:52:2f:1b:42:27:25:84:39:da:32:d4:
         42:30:06:3e:95:4e:39:4c:21:38:09:c6:fb:65:b2:8e:70:86:
         c3:bd:3f:4e:33:3b:bd:53:06:71:f6:9d:e6:c6:fc:3c:97:77:
         b5:b5:9a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:44 2024 by rpki-client on console-fra.rpki-client.org