Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/BfL27bvwTx31j4Z4CVCdQud2V_w.roa
File:                     BfL27bvwTx31j4Z4CVCdQud2V_w.roa (raw, json)
Hash identifier:          icOVrugmZ2CCZ6U8xpD5CJ/fzDcnAiiz5HD1wYygXAU=
Subject key identifier:   05:F2:F6:ED:BB:F0:4F:1D:F5:8F:86:78:09:50:9D:42:E7:76:57:FC
Certificate issuer:       /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial:       0BA4
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/BfL27bvwTx31j4Z4CVCdQud2V_w.roa
Signing time:             Sat 11 May 2024 05:03:44 +0000
ROA not before:           Sat 11 May 2024 05:03:44 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     7483
IP address blocks:        103.229.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2980 (0xba4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
        Validity
            Not Before: May 11 05:03:44 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=05F2F6EDBBF04F1DF58F867809509D42E77657FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:a4:71:fe:90:a2:a2:14:2d:3e:ed:48:c6:
                    b4:31:7e:09:b0:0a:46:31:55:25:47:51:27:cf:6a:
                    27:ec:f2:45:8c:ee:2d:44:93:89:55:97:3f:85:cd:
                    51:ca:a1:2e:d4:4b:7c:b5:23:a0:bb:8c:99:ee:f5:
                    b0:59:f7:0d:99:db:7c:fd:8c:e1:5e:b9:1d:d8:7f:
                    cd:ff:b3:0a:e0:01:3b:39:4c:1d:7f:d1:4d:3f:c2:
                    df:1d:7b:47:76:00:66:be:5a:15:4f:93:53:3a:12:
                    d9:74:18:26:7f:6f:61:38:a8:ce:38:54:97:34:1e:
                    09:7f:e4:87:cf:bc:fa:2e:ea:8a:c3:b1:27:5a:1b:
                    4d:47:94:46:24:46:2b:e5:c6:16:bd:22:49:ae:58:
                    c4:af:97:86:b6:d9:b2:65:07:6d:52:1a:5e:0d:be:
                    7f:b6:a4:a1:7e:6c:6e:74:17:1c:cf:55:10:12:91:
                    3d:1a:a6:6a:da:24:17:b3:e0:93:32:8b:23:16:bd:
                    56:df:58:e3:66:c8:a4:c5:da:7a:df:3c:8d:52:67:
                    38:79:cb:a9:0b:1a:c5:67:70:15:40:11:15:8d:55:
                    dd:b7:aa:3b:84:fd:1b:cb:c1:50:82:0a:3c:1c:95:
                    aa:d0:49:d4:37:d9:04:47:75:90:61:f1:a8:3d:c7:
                    f8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F2:F6:ED:BB:F0:4F:1D:F5:8F:86:78:09:50:9D:42:E7:76:57:FC
            X509v3 Authority Key Identifier:
                keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/BfL27bvwTx31j4Z4CVCdQud2V_w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:cd:88:1d:9c:47:a8:04:05:cc:ee:56:52:e9:e1:8b:37:a9:
         5f:07:2a:2d:76:b7:e2:aa:de:51:6e:e3:fc:c9:5c:e9:b9:b3:
         94:69:89:bd:cb:6f:be:a9:ea:81:e2:37:fe:12:4e:f4:2a:1e:
         bc:75:af:5b:9c:f8:e1:da:b7:89:64:c3:80:d5:fa:be:7b:43:
         ca:66:1e:94:22:c9:3a:6f:84:fb:29:9f:11:ae:df:51:dd:a9:
         57:8f:8b:bc:23:48:72:cc:91:57:c8:24:60:c5:d4:be:35:d1:
         1c:5c:6c:00:24:b7:93:03:10:fa:ef:05:ba:0b:cf:39:e8:bd:
         95:f4:5c:ab:df:4a:ec:b7:1a:a6:83:c8:4e:7f:ce:9a:7f:8c:
         3f:f2:a2:61:9c:8f:21:06:43:c1:44:88:3b:2b:47:27:97:24:
         cd:73:18:5f:80:38:8d:6e:68:ad:c6:e8:fb:5e:73:cf:19:be:
         3f:11:c4:82:5a:47:5c:03:10:d6:ee:58:9f:cd:86:e7:d9:c0:
         5c:56:f9:af:39:75:37:e9:92:7a:19:e2:25:52:7b:b2:12:4a:
         4c:a0:ad:1d:ba:64:59:d1:16:1f:bd:1b:55:7d:3e:18:0a:54:
         ef:b0:75:33:a0:db:c4:9d:3d:b9:a9:48:46:0f:03:45:b3:5f:
         57:80:71:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org