Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/45_9yMDPwhTssO4V_BTYEfEWgO8.roa
File:                     45_9yMDPwhTssO4V_BTYEfEWgO8.roa (raw, json)
Hash identifier:          otUSjyHCfpgOwxUUEdBeH3Wbfu1DGb6rQWOG85DuyBQ=
Subject key identifier:   E3:9F:FD:C8:C0:CF:C2:14:EC:B0:EE:15:FC:14:D8:11:F1:16:80:EF
Certificate issuer:       /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Certificate serial:       1167
Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/45_9yMDPwhTssO4V_BTYEfEWgO8.roa
Signing time:             Fri 18 Oct 2024 10:18:14 +0000
ROA not before:           Fri 18 Oct 2024 10:18:14 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     5065
IP address blocks:        103.127.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 02:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4455 (0x1167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
        Validity
            Not Before: Oct 18 10:18:14 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E39FFDC8C0CFC214ECB0EE15FC14D811F11680EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d9:07:bc:7f:81:9e:7e:ca:53:b0:61:f7:aa:
                    bc:0e:3a:cc:5c:6f:81:ba:87:b6:7c:44:cf:c9:d8:
                    6b:93:39:56:b7:0f:ea:66:3f:8c:cc:c2:9f:cf:59:
                    cf:fb:7e:37:12:3c:03:35:86:17:89:2b:85:cc:64:
                    3b:a6:2e:0d:aa:b9:1f:59:d9:90:40:a8:b2:bc:dd:
                    77:1f:0a:7f:24:b6:30:6e:e7:f3:ad:ac:01:19:40:
                    74:90:05:46:ec:6d:3a:dd:d3:dc:23:33:c1:7f:ba:
                    9f:07:6b:b2:ea:f5:db:81:03:10:a6:86:ec:34:4c:
                    6f:b0:cb:e0:76:12:d8:67:b2:de:58:b4:29:50:13:
                    8c:b8:50:1b:f0:63:b8:59:62:44:fe:14:a1:54:cc:
                    74:71:68:ef:f5:6b:a2:2b:b6:24:95:52:a8:9d:41:
                    18:c6:5b:20:9a:6b:d1:f9:54:f7:b1:b7:79:85:96:
                    a1:bc:60:43:8e:70:27:2c:02:9f:79:98:b8:b3:5e:
                    b0:2f:f0:e5:76:a5:dc:97:a0:c4:5f:5b:7d:b9:c9:
                    22:fc:6d:34:f7:78:19:f2:0f:37:55:3b:86:3f:7c:
                    02:c4:06:ef:46:68:d4:0a:ae:65:5d:59:51:1f:a0:
                    cd:79:15:28:eb:c3:55:75:95:eb:50:5d:88:89:f0:
                    62:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9F:FD:C8:C0:CF:C2:14:EC:B0:EE:15:FC:14:D8:11:F1:16:80:EF
            X509v3 Authority Key Identifier:
                keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/45_9yMDPwhTssO4V_BTYEfEWgO8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:d1:65:ac:a3:f2:b6:d8:3c:80:ad:5c:8d:00:60:91:8e:20:
         3d:96:1e:13:2f:6a:b8:04:19:4c:a7:ba:8c:7c:90:e3:77:dc:
         e9:c0:18:a4:66:27:1b:ac:73:34:56:d2:bb:a0:01:20:13:9f:
         82:48:6f:1d:38:47:06:65:59:06:ab:1f:2e:3c:f9:70:e8:22:
         28:cb:06:de:0f:70:17:29:c4:de:17:b3:a4:7b:45:76:2a:9e:
         94:1c:23:b4:e1:ae:5f:0d:b8:3f:18:30:40:4a:7f:86:e3:3d:
         d7:90:62:e5:17:76:2b:71:02:15:f5:98:c5:da:57:f8:d5:3d:
         d0:25:26:e3:ca:47:fa:a1:06:11:21:42:61:48:bb:10:b9:5e:
         34:7f:59:36:6c:43:6e:89:97:48:56:6d:82:c3:5e:ab:94:33:
         0b:f9:ea:b1:13:64:77:31:df:82:64:13:9e:90:f1:1c:20:cb:
         20:a7:fe:1e:d8:3a:db:73:96:bf:17:7d:f6:8e:30:99:e4:b1:
         81:cc:12:b9:89:8f:6a:46:11:d5:7a:6b:2f:fe:d1:c9:38:bb:
         2d:ac:85:af:5a:e9:7b:7b:44:0e:93:3b:d0:5e:2d:c1:88:45:
         11:97:cf:a8:a7:c8:fd:bc:17:6c:a0:6f:17:18:5e:15:0b:09:
         a8:6a:c2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:14:35 2024 by rpki-client on console-fra.rpki-client.org