Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/0cHIH041fe_GrRu2vdVWpHqynbw.roa
File:                     0cHIH041fe_GrRu2vdVWpHqynbw.roa (raw, json)
Hash identifier:          pt4vVMOY1I4J518GPaGblYgSKAwBq3HyrTem4HBak1k=
Subject key identifier:   D1:C1:C8:1F:4E:35:7D:EF:C6:AD:1B:B6:BD:D5:56:A4:7A:B2:9D:BC
Certificate issuer:       /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial:       0BFA
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/0cHIH041fe_GrRu2vdVWpHqynbw.roa
Signing time:             Mon 26 Aug 2024 05:26:25 +0000
ROA not before:           Mon 26 Aug 2024 05:26:25 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     7483
IP address blocks:        103.229.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3066 (0xbfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
        Validity
            Not Before: Aug 26 05:26:25 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D1C1C81F4E357DEFC6AD1BB6BDD556A47AB29DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:54:e3:2a:52:3b:e6:b1:14:66:5b:a4:2a:c3:
                    0b:73:bb:45:fe:71:f1:72:9b:d0:3c:b1:a8:3f:6f:
                    87:ba:7d:2a:31:64:74:bf:78:00:9c:51:c5:40:cd:
                    a9:9b:93:9b:bf:3d:e4:6a:79:f6:b3:86:c2:3d:a9:
                    cd:cb:af:72:c5:75:69:1f:57:bc:3b:17:fc:71:9b:
                    2c:35:e0:09:f9:dd:ce:e6:bb:a9:26:41:b2:35:63:
                    6a:7b:c0:e6:a1:22:7c:d8:2e:a5:29:6a:e4:b4:3a:
                    24:7d:49:3a:c2:b8:a3:26:60:50:c3:e2:ae:53:bf:
                    7c:c7:a2:b4:02:2d:0c:11:57:a2:57:c6:c0:f5:e0:
                    a5:8f:f7:d1:a4:11:af:0a:8e:29:3a:de:e2:aa:fa:
                    b6:c9:c2:ea:5c:c9:e4:10:88:4a:fe:19:cb:b0:24:
                    94:4d:8b:af:60:7b:7c:42:04:7a:85:90:cd:89:ba:
                    40:8e:f8:b2:26:6e:a6:c9:5c:94:4e:26:30:73:b4:
                    29:33:2d:7d:94:56:70:bf:47:c2:2f:bf:a4:18:e1:
                    95:df:e2:6b:10:a8:e3:cc:51:5e:97:8f:91:23:aa:
                    27:d1:fb:a5:28:4b:a1:51:b3:1e:b5:cf:93:28:52:
                    9e:a0:26:44:00:4a:86:45:56:64:e4:4b:7d:08:9c:
                    fb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C1:C8:1F:4E:35:7D:EF:C6:AD:1B:B6:BD:D5:56:A4:7A:B2:9D:BC
            X509v3 Authority Key Identifier:
                keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/0cHIH041fe_GrRu2vdVWpHqynbw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:5d:2a:ff:c4:cb:89:7c:8d:f1:87:86:83:06:83:0d:2d:30:
         8b:0d:ff:e3:d0:4d:c8:de:bd:4d:09:da:46:4a:69:24:78:51:
         a2:07:5d:f2:a8:da:20:18:75:d5:b1:ab:85:94:37:8f:57:b9:
         f0:d3:d4:15:96:52:c0:42:84:e4:99:fc:64:46:22:4e:1f:28:
         37:0b:1b:6e:29:9c:28:ee:cb:e3:a9:24:0f:6c:bb:8b:b1:62:
         77:9c:dc:85:73:58:dc:a4:ee:93:2d:cb:63:e7:b2:cb:dc:3a:
         68:1d:fc:63:31:b8:2b:a2:e2:87:32:18:93:cf:1b:06:4d:ca:
         7f:ef:fb:75:5d:2e:d3:36:2e:85:53:18:cc:7f:c3:32:35:1a:
         cf:65:cb:70:8b:62:53:93:94:e5:3f:bc:14:1d:37:4d:72:3b:
         05:30:43:58:ce:6c:77:eb:0f:cf:17:46:1e:d6:c1:c5:a3:2b:
         ce:d9:23:fe:8b:d5:6f:e2:e3:f6:f0:cd:c3:60:d8:a2:b2:c7:
         cc:4a:a4:3d:b1:39:df:98:76:24:7a:65:56:1e:b7:11:06:55:
         2b:42:64:1e:d6:12:08:d1:e5:1a:1e:10:8f:d9:3d:c3:d0:d2:
         72:dd:e2:6a:15:1b:20:ff:11:b1:6b:58:a5:a1:de:30:c6:36:
         a8:3c:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org