Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SPETW/S6wQg4pa3wX2WWEWbC9PrJTPKkM.roa
File:                     S6wQg4pa3wX2WWEWbC9PrJTPKkM.roa (raw, json)
Hash identifier:          uZ6qDu5lJL7vfKz5Jb/jHDLXGWwklVvLim6sg0N4lQc=
Subject key identifier:   4B:AC:10:83:8A:5A:DF:05:F6:59:61:16:6C:2F:4F:AC:94:CF:2A:43
Certificate issuer:       /CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2
Certificate serial:       0C00
Authority key identifier: 6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/S6wQg4pa3wX2WWEWbC9PrJTPKkM.roa
Signing time:             Mon 26 Aug 2024 05:26:39 +0000
ROA not before:           Mon 26 Aug 2024 05:26:39 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131623
IP address blocks:        103.117.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3072 (0xc00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2
        Validity
            Not Before: Aug 26 05:26:39 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=4BAC10838A5ADF05F65961166C2F4FAC94CF2A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:7c:dc:74:7b:f0:11:68:07:5a:24:d6:71:
                    5f:0e:d7:21:1d:e1:fe:0c:e1:c6:6e:9f:50:cb:c3:
                    77:f4:87:f6:30:c0:01:e8:6d:a4:ed:e7:bf:c3:08:
                    09:c9:c5:7d:22:c5:cb:e7:61:c0:99:60:59:17:86:
                    e7:a0:d1:f0:0a:19:0c:c7:4a:75:ed:a6:06:09:79:
                    37:c1:2e:a3:2b:67:cf:f6:6c:05:75:7c:f6:68:8f:
                    22:9c:db:47:62:bd:e7:6f:aa:6e:25:6f:91:c9:ba:
                    fd:a7:23:61:45:78:eb:08:d1:2d:cd:7a:f2:6d:e0:
                    b8:21:0d:76:79:d9:07:c9:af:d2:6f:ab:41:34:49:
                    ab:f8:b3:51:4f:76:80:8b:3a:05:ca:62:72:92:f9:
                    1e:5c:44:c0:33:08:31:5a:37:a3:04:37:9c:ec:ca:
                    01:26:a9:5d:16:44:b5:53:ae:ec:79:e8:1e:cf:2c:
                    3e:65:0c:1c:70:9e:0b:4b:11:08:1b:a4:77:cf:8a:
                    30:b8:11:e9:a9:ae:5f:77:45:a7:b9:54:94:d0:aa:
                    bb:05:14:a6:49:5b:0d:dc:7e:68:33:b1:8b:10:a9:
                    ef:77:a8:cb:08:61:e2:f6:af:be:87:0e:78:da:52:
                    97:db:ca:32:ff:b3:80:b0:c5:81:10:26:ff:c4:1e:
                    19:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AC:10:83:8A:5A:DF:05:F6:59:61:16:6C:2F:4F:AC:94:CF:2A:43
            X509v3 Authority Key Identifier:
                keyid:6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/S6wQg4pa3wX2WWEWbC9PrJTPKkM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:59:34:74:8b:b2:29:9d:0e:74:6a:d6:94:53:3b:16:f5:e2:
         05:c0:9e:4d:f1:6c:0d:02:a9:f4:5c:17:7c:e1:eb:55:45:8b:
         9c:9a:55:15:0d:f1:d7:5c:27:57:d1:8e:e5:ac:aa:25:fc:f4:
         f5:4d:83:a8:fa:e3:8a:37:9e:79:64:99:46:67:37:87:1c:98:
         a8:0f:71:e2:34:b1:0e:be:30:d0:08:1c:f1:d3:3d:ed:8c:97:
         1e:c5:48:77:b8:5f:b2:4c:bf:9e:aa:80:3d:07:a6:36:d8:bd:
         a7:df:47:03:a2:ca:62:e4:5c:f9:4e:97:7a:19:57:af:c8:eb:
         a3:53:fa:71:02:90:46:a9:5a:7a:3a:18:bf:8a:70:86:dd:fc:
         3b:73:92:43:93:21:df:c0:ee:8f:87:2e:b9:24:d4:a2:ff:b7:
         e5:af:cc:32:e6:1c:99:14:73:38:a2:6e:8f:19:9c:de:23:0c:
         3d:f9:1f:ae:d5:42:8d:18:fe:78:15:06:2e:b8:c1:5e:aa:b4:
         7d:76:4a:be:7f:de:49:3b:6e:a6:51:9b:c8:1c:37:32:cc:14:
         7c:c6:75:ae:e7:4d:2b:8e:39:5a:49:4f:47:d5:10:0d:0b:9b:
         90:4a:6c:60:04:9e:2b:c1:95:e5:db:2a:b3:1c:32:6b:71:c0:
         d6:e7:02:26
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDAAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkY4
QzkyREZDNzhDQkZFOEM1RUZENkJBNUEzN0ExNjI4MjIxRkZFMjAeFw0yNDA4MjYw
NTI2MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRCQUMxMDgzOEE1QURG
MDVGNjU5NjExNjZDMkY0RkFDOTRDRjJBNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBDnzcdHvwEWgHWiTWcV8O1yEd4f4M4cZun1DLw3f0h/YwwAHo
baTt57/DCAnJxX0ixcvnYcCZYFkXhueg0fAKGQzHSnXtpgYJeTfBLqMrZ8/2bAV1
fPZojyKc20divedvqm4lb5HJuv2nI2FFeOsI0S3NevJt4LghDXZ52QfJr9Jvq0E0
Sav4s1FPdoCLOgXKYnKS+R5cRMAzCDFaN6MEN5zsygEmqV0WRLVTrux56B7PLD5l
DBxwngtLEQgbpHfPijC4Eemprl93Rae5VJTQqrsFFKZJWw3cfmgzsYsQqe93qMsI
YeL2r76HDnjaUpfbyjL/s4CwxYEQJv/EHhltAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUS6wQg4pa3wX2WWEWbC9PrJTPKkMwHwYDVR0jBBgwFoAUb4yS38eMv+jF79a6
WjehYoIh/+IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1BFVFcv
YjR5UzM4ZU12LWpGNzlhNldqZWhZb0loXy1JLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9iNHlTMzhlTXYtakY3OWE2V2plaFlvSWhfLUkuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TUEVUVy9TNndRZzRwYTN3WDJXV0VXYkM5
UHJKVFBLa00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3UE
MA0GCSqGSIb3DQEBCwUAA4IBAQCXWTR0i7IpnQ50ataUUzsW9eIFwJ5N8WwNAqn0
XBd84etVRYucmlUVDfHXXCdX0Y7lrKol/PT1TYOo+uOKN555ZJlGZzeHHJioD3Hi
NLEOvjDQCBzx0z3tjJcexUh3uF+yTL+eqoA9B6Y22L2n30cDospi5Fz5Tpd6GVev
yOujU/pxApBGqVp6Ohi/inCG3fw7c5JDkyHfwO6Phy65JNSi/7flr8wy5hyZFHM4
om6PGZzeIww9+R+u1UKNGP54FQYuuMFeqrR9dkq+f95JO26mUZvIHDcyzBR8xnWu
500rjjlaSU9H1RANC5uQSmxgBJ4rwZXl2yqzHDJrccDW5wIm
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:13:13 2024 by rpki-client on console-fra.rpki-client.org