Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINENET/Tu26jNxyTUfGka87xkhE2smDphQ.roa
File:                     Tu26jNxyTUfGka87xkhE2smDphQ.roa (raw, json)
Hash identifier:          BLe130TYsj5oSRm9g2SeH58MWbXsDBtc//FLLqseSTs=
Subject key identifier:   4E:ED:BA:8C:DC:72:4D:47:C6:91:AF:3B:C6:48:44:DA:C9:83:A6:14
Certificate issuer:       /CN=45542320685E62421C114DBA65B8F5705A774845
Certificate serial:       0135
Authority key identifier: 45:54:23:20:68:5E:62:42:1C:11:4D:BA:65:B8:F5:70:5A:77:48:45
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RVQjIGheYkIcEU26Zbj1cFp3SEU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/Tu26jNxyTUfGka87xkhE2smDphQ.roa
Signing time:             Mon 26 Aug 2024 05:25:59 +0000
ROA not before:           Mon 26 Aug 2024 05:25:59 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     150770
IP address blocks:        103.197.158.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/RVQjIGheYkIcEU26Zbj1cFp3SEU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/RVQjIGheYkIcEU26Zbj1cFp3SEU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RVQjIGheYkIcEU26Zbj1cFp3SEU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 00:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45542320685E62421C114DBA65B8F5705A774845
        Validity
            Not Before: Aug 26 05:25:59 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=4EEDBA8CDC724D47C691AF3BC64844DAC983A614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:fb:e4:1a:ca:6b:5d:3c:54:b2:3e:86:37:
                    54:07:9c:44:39:b2:a1:4f:6e:d8:a4:df:9a:a0:c7:
                    97:7e:61:69:7c:a1:fb:c6:cc:50:fb:ae:76:91:8d:
                    f5:33:7c:19:3f:94:76:25:5f:fe:91:5d:e2:f3:b4:
                    8c:e1:d3:e4:42:9d:60:4f:71:b7:31:e8:7f:f9:c6:
                    34:cf:20:02:c6:27:ad:14:15:f1:f6:26:f0:af:74:
                    f7:c9:af:01:41:6d:7b:75:1c:a4:42:79:83:fb:4f:
                    73:8c:02:ab:14:85:84:e8:6d:1a:a4:a9:74:a3:86:
                    80:90:c7:91:16:49:b7:10:1d:60:85:44:00:0f:de:
                    dd:86:d5:26:dd:72:c3:83:ba:30:8a:ee:07:b6:73:
                    87:99:98:00:0e:b9:58:f3:51:55:a3:0c:ca:d9:8c:
                    5c:77:92:7c:d9:c6:81:a4:c8:ef:15:9f:fb:83:1f:
                    0f:b0:b5:dd:73:3e:e1:14:e4:b9:02:e0:b8:f7:bc:
                    e7:fa:d3:a1:29:77:36:60:eb:98:25:17:a9:53:12:
                    73:23:aa:20:9f:b2:6f:95:3d:de:9b:6b:7c:3e:87:
                    51:6c:c6:9f:86:08:43:1c:91:14:f3:a0:a8:af:4a:
                    70:40:85:bc:cf:54:ed:38:06:0f:27:cb:02:c5:c8:
                    e4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:ED:BA:8C:DC:72:4D:47:C6:91:AF:3B:C6:48:44:DA:C9:83:A6:14
            X509v3 Authority Key Identifier:
                keyid:45:54:23:20:68:5E:62:42:1C:11:4D:BA:65:B8:F5:70:5A:77:48:45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/RVQjIGheYkIcEU26Zbj1cFp3SEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RVQjIGheYkIcEU26Zbj1cFp3SEU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/Tu26jNxyTUfGka87xkhE2smDphQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:4b:78:53:60:1a:05:94:cb:1c:d7:23:8c:5a:45:ea:7e:e8:
         c2:28:66:30:68:43:d4:03:1d:18:ab:ed:93:86:09:82:03:80:
         0e:4f:1f:50:32:dc:b4:3b:e6:dc:63:26:19:f4:fa:02:c8:c2:
         45:10:7e:b7:4b:a2:38:04:cf:7c:bc:3e:4f:55:07:59:47:2f:
         18:50:e8:ef:d5:44:8d:ea:82:28:2e:46:4b:8c:32:1c:08:11:
         c0:df:37:46:f5:a7:54:e4:99:97:e2:0f:80:19:5c:81:fd:6c:
         af:f9:de:b8:5f:23:64:24:65:14:16:5a:8d:a0:9f:e9:41:62:
         63:2b:28:3f:4c:37:c9:fa:12:b6:59:37:09:b2:55:01:95:74:
         fb:b4:a3:80:6b:fc:63:37:59:a5:75:a9:64:5e:cd:8f:17:15:
         62:2e:71:e8:cc:42:51:41:4a:3c:6f:27:23:d0:81:d2:af:c5:
         07:bb:b9:fe:34:7d:17:19:15:a8:36:96:49:eb:9c:2f:ac:1d:
         70:1d:af:31:aa:20:ab:69:08:42:85:4f:ac:59:b5:e4:61:3d:
         5b:24:be:6a:31:88:b9:a9:21:3a:6f:33:e1:00:11:1d:19:14:
         3b:3f:4e:6a:cc:cb:46:53:4d:45:ad:3a:50:d8:d8:d9:b2:8f:
         a9:4f:3e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:56:34 2024 by rpki-client on console-fra.rpki-client.org