Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/H9VXGaXkiTkhKNqD9CqMm1XnsXg.roa
File:                     H9VXGaXkiTkhKNqD9CqMm1XnsXg.roa (raw, json)
Hash identifier:          JELJCw94uXxp6NSqfmyG/X8V4FPZhAPSRVuDrrMxVWY=
Subject key identifier:   1F:D5:57:19:A5:E4:89:39:21:28:DA:83:F4:2A:8C:9B:55:E7:B1:78
Certificate issuer:       /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial:       0BFB
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/H9VXGaXkiTkhKNqD9CqMm1XnsXg.roa
Signing time:             Mon 26 Aug 2024 05:26:25 +0000
ROA not before:           Mon 26 Aug 2024 05:26:25 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     40065
IP address blocks:        103.229.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3067 (0xbfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
        Validity
            Not Before: Aug 26 05:26:25 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=1FD55719A5E489392128DA83F42A8C9B55E7B178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:9f:88:f4:18:1e:08:a5:99:db:b7:01:99:
                    e1:01:3c:ce:49:5d:9a:69:08:a8:1f:9b:a5:35:2d:
                    46:98:0e:50:42:5f:f2:f3:9a:1c:aa:1d:8f:df:8d:
                    fb:cf:98:50:60:83:b7:9c:31:0e:a8:d1:56:55:f5:
                    14:01:99:f2:57:fc:fc:b7:b8:78:21:ff:92:b0:d5:
                    aa:9a:e9:aa:45:0c:69:9b:b3:43:c4:e7:c7:19:82:
                    22:8d:53:51:8e:40:52:4c:8f:5a:21:13:a9:87:57:
                    5b:40:7b:c3:1b:76:f5:70:a3:32:6c:1d:c4:2c:4c:
                    36:68:99:36:b1:ea:f2:57:30:6c:7a:a7:fb:08:2b:
                    c5:82:16:38:4d:d7:0d:2f:e2:6a:92:2a:32:e5:ba:
                    ef:5d:72:0e:9b:50:8d:c9:68:a3:0e:b4:f4:84:1e:
                    d1:6e:62:7e:fa:5a:aa:fe:da:f7:27:43:a1:31:b5:
                    43:1b:4f:ec:40:3c:b1:06:44:5d:24:84:c5:ea:d8:
                    c9:97:61:d6:2e:d6:28:aa:38:68:11:b1:ff:3c:55:
                    cb:90:0e:a3:de:2f:7d:4a:82:dc:4f:89:a3:9d:83:
                    ac:14:d5:ae:95:45:e4:99:93:17:b3:5f:6f:78:11:
                    f3:0f:d9:49:03:9f:7d:07:b3:f1:90:e4:bb:5f:25:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D5:57:19:A5:E4:89:39:21:28:DA:83:F4:2A:8C:9B:55:E7:B1:78
            X509v3 Authority Key Identifier:
                keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/H9VXGaXkiTkhKNqD9CqMm1XnsXg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:3c:8d:0f:02:c0:43:27:c5:3e:b2:a2:43:a1:64:ab:ad:b6:
         48:93:1a:af:cb:88:6c:04:3a:5f:4a:d4:6f:00:a9:43:e3:0a:
         93:f9:c7:fb:a4:8c:95:7c:84:5e:9a:4c:71:e5:22:45:62:23:
         c6:c0:94:f0:49:76:02:99:73:26:32:93:a8:8b:1d:ed:e9:e4:
         0b:0a:cb:0b:1d:b1:ed:60:f8:8e:92:13:b3:cc:a5:ff:98:35:
         ae:4a:85:af:30:f2:79:be:ff:90:f8:4f:20:6b:7d:39:fa:a2:
         d9:4f:36:4f:da:7f:75:a0:ec:2a:a7:32:cb:91:65:20:58:87:
         65:6f:1f:83:0a:5b:35:22:b0:8e:2d:d0:d2:99:6b:6d:e9:c1:
         54:75:3d:51:d1:88:5c:63:f8:19:88:4d:36:b4:c2:48:d1:63:
         e0:5c:6d:d4:44:19:ff:fb:ce:5e:ec:3e:80:f2:71:ab:7a:e0:
         27:ff:fd:0e:81:88:59:a7:c8:6e:ed:ed:6f:77:cd:63:17:78:
         4d:e3:20:c7:cd:0b:4e:6d:81:c2:31:75:9e:0d:b8:c7:70:4b:
         64:12:7d:21:a0:df:87:8c:9a:50:f2:80:78:48:12:67:0b:23:
         3e:4e:94:cf:ce:d7:39:45:10:57:ed:bd:87:44:11:b1:91:21:
         c3:84:41:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org