Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Z14qo2pqvASTwsyuISBNDqAkpcc.roa
File:                     Z14qo2pqvASTwsyuISBNDqAkpcc.roa (raw, json)
Hash identifier:          /IPVZdi4G/utJWUg7or5KGI3sDUBroTk5dRx2bETaCc=
Subject key identifier:   67:5E:2A:A3:6A:6A:BC:04:93:C2:CC:AE:21:20:4D:0E:A0:24:A5:C7
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0CE4
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Z14qo2pqvASTwsyuISBNDqAkpcc.roa
Signing time:             Mon 26 Aug 2024 05:27:05 +0000
ROA not before:           Mon 26 Aug 2024 05:27:05 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24158
IP address blocks:        2402:7500:faff::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3300 (0xce4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Aug 26 05:27:05 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=675E2AA36A6ABC0493C2CCAE21204D0EA024A5C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:93:e6:5c:4b:ad:dc:13:01:4d:3f:5f:83:
                    fa:5d:be:6e:e8:90:f7:db:8e:d0:aa:20:30:88:08:
                    4e:51:8e:21:47:bf:fd:ac:84:3e:bc:09:7b:8a:13:
                    fd:0b:0a:04:94:75:7e:f3:47:87:66:35:0a:18:de:
                    fc:5b:0b:e7:67:e5:20:86:3e:a7:42:69:e6:a7:96:
                    2d:7e:55:f2:63:6f:54:40:13:b7:09:59:e0:4c:fa:
                    22:5f:5d:ad:70:d8:30:72:d1:fb:c8:7a:a7:b5:43:
                    f6:69:0e:ea:7f:5f:7f:2d:d1:a2:fe:80:11:e1:1f:
                    e9:27:56:01:ec:9e:98:61:b9:d7:dc:4e:7d:d1:a4:
                    90:61:55:b5:c9:18:ac:81:16:07:3c:cb:1b:72:a2:
                    a9:2c:ec:79:a4:e5:b2:08:20:cc:ac:7e:47:4b:f0:
                    b9:10:f3:fe:59:9a:b3:22:d5:77:d7:4a:1a:7e:4c:
                    34:ac:d3:21:b1:3f:f3:fb:0e:f6:cd:4a:39:28:63:
                    83:4d:8e:c5:54:6c:f2:b7:fa:84:6d:75:36:1c:55:
                    68:1e:9e:ff:ac:13:7c:ba:27:bd:f7:74:bc:26:07:
                    e4:91:cc:3d:88:1e:8b:f7:95:26:45:3c:d9:54:4c:
                    aa:08:0c:6a:13:21:26:ce:67:25:02:6f:e8:c5:78:
                    1e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5E:2A:A3:6A:6A:BC:04:93:C2:CC:AE:21:20:4D:0E:A0:24:A5:C7
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Z14qo2pqvASTwsyuISBNDqAkpcc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7500:faff::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:ae:01:0b:bc:c9:1b:e3:a6:3c:25:5c:ef:f7:5f:6b:09:54:
         fd:1e:a8:01:0b:78:c6:70:bf:e0:c5:bf:02:10:5c:a5:8b:b3:
         f8:59:ef:5e:8b:a5:8b:71:19:2e:f1:33:f9:f6:e1:02:18:ec:
         6f:33:5b:6e:fb:c5:e9:9c:e1:6a:37:93:0a:e6:a7:98:e2:bb:
         81:02:32:48:61:62:1b:df:ec:66:a1:07:19:ba:d1:4a:ab:51:
         57:2b:e2:da:77:67:a5:a3:46:e4:68:ba:22:61:2e:d6:b0:6a:
         4e:76:30:96:d4:19:3b:49:59:99:73:c1:49:33:fb:84:96:ec:
         5a:5f:e0:f0:48:18:d8:d2:51:4a:09:6e:ce:f2:36:e5:5f:07:
         c5:20:a3:3b:82:bc:61:ca:00:25:fb:47:34:69:cb:b3:d7:c2:
         16:0e:b7:5b:f2:ad:3f:4d:2f:64:bd:40:9a:7a:47:55:26:7a:
         2c:89:3a:ec:a1:5e:93:b4:84:fb:5d:92:c2:15:23:81:30:9b:
         03:10:92:04:6a:84:1b:71:26:da:55:e2:c5:6e:f8:45:f4:f3:
         55:f1:4e:ab:4c:c9:0e:3d:85:00:7a:fd:b2:d2:46:36:27:aa:
         4f:60:06:1b:91:a6:4b:56:f6:08:a4:da:96:76:97:9b:35:d9:
         99:80:a8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org