Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/f_Pki4y8yAu_LstnrZ9jyPI-ozg.roa
File:                     f_Pki4y8yAu_LstnrZ9jyPI-ozg.roa (raw, json)
Hash identifier:          ldhZKmEXuijnTTEJmVJXoDLPXZbOxNR2eV08TEcYBkA=
Subject key identifier:   7F:F3:E4:8B:8C:BC:C8:0B:BF:2E:CB:67:AD:9F:63:C8:F2:3E:A3:38
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0CEC
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/f_Pki4y8yAu_LstnrZ9jyPI-ozg.roa
Signing time:             Mon 26 Aug 2024 05:27:06 +0000
ROA not before:           Mon 26 Aug 2024 05:27:06 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24158
IP address blocks:        180.204.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3308 (0xcec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Aug 26 05:27:06 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=7FF3E48B8CBCC80BBF2ECB67AD9F63C8F23EA338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:22:84:e3:f7:db:ca:ef:a4:21:9e:ac:87:
                    ab:1c:a5:15:1d:cf:ae:ef:a3:81:18:04:05:c1:dd:
                    bd:e1:77:c1:b0:5c:9a:6d:45:46:d8:98:13:2c:6e:
                    33:a5:ee:e6:c4:aa:a9:e5:03:39:e2:33:9d:4c:52:
                    0f:a9:0c:92:c9:b2:77:3c:96:0d:94:4e:88:74:4d:
                    f4:5e:da:f9:10:fa:a9:c2:6a:79:18:a0:1e:6b:a8:
                    5f:eb:eb:e4:4a:80:82:75:e4:9f:15:b7:fd:d6:3d:
                    af:1e:90:d0:c7:c8:87:ea:d9:e9:cd:93:a5:13:69:
                    ca:be:0d:03:d1:a8:08:20:e1:14:ed:25:78:51:99:
                    36:a2:38:ac:8f:51:42:f9:0c:5c:f8:c3:d9:11:f0:
                    eb:9a:13:77:28:b9:89:f7:b0:38:10:d3:0c:64:65:
                    27:f8:64:a4:06:e3:99:a1:07:52:01:9d:93:f9:ad:
                    1a:64:1f:21:bb:54:2d:d8:02:0f:36:c3:2c:d7:d1:
                    00:4d:db:78:33:86:47:71:37:09:1c:f8:33:66:33:
                    c4:e3:b4:de:06:88:1c:79:ff:15:08:6f:64:51:d4:
                    b9:42:30:9a:52:65:de:d0:eb:8c:f5:84:60:67:62:
                    27:3b:7f:5e:48:7d:da:a3:0d:1b:4e:93:9c:15:cc:
                    fa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F3:E4:8B:8C:BC:C8:0B:BF:2E:CB:67:AD:9F:63:C8:F2:3E:A3:38
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/f_Pki4y8yAu_LstnrZ9jyPI-ozg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.204.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3d:11:11:5b:87:24:30:b2:a9:1f:cb:11:de:ad:bb:0d:6b:f4:
         98:6f:4f:8e:99:bb:f9:4f:ed:4d:81:4b:71:5d:f7:bc:f8:fa:
         ee:1b:04:dd:5c:40:aa:51:09:29:81:80:92:57:16:7f:56:8d:
         79:5a:22:ef:f6:0b:e5:68:dc:ef:7d:18:14:e5:40:2b:54:f6:
         12:c0:31:10:be:60:03:bc:9d:2d:ca:bf:67:13:63:b1:e2:b0:
         ae:0f:48:ac:7d:ec:62:a2:54:fc:f7:7d:b8:46:18:15:ae:cb:
         ad:fd:c8:14:30:35:c5:b2:53:77:9f:b4:83:e0:3d:0b:fe:96:
         5a:de:26:06:4b:26:69:6b:e8:75:29:6e:5c:04:57:26:87:49:
         6a:71:35:95:30:64:c2:95:05:c9:b7:a5:00:36:d2:5a:59:c2:
         9f:a1:20:33:a5:9c:9f:4d:1d:31:a8:1c:30:0e:0e:59:47:27:
         ac:af:a0:53:c7:c7:1a:c1:8e:82:41:02:ed:07:58:6b:a6:48:
         04:de:db:ab:a1:99:6f:d1:5d:6f:01:5b:1a:e9:58:58:8b:2c:
         a5:f2:56:fe:d9:81:1c:db:85:90:ff:50:7b:cd:f5:25:a0:19:
         34:60:70:b3:74:c1:0b:1f:e8:82:47:7c:af:0c:68:6d:48:50:
         82:b9:09:0a
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNDA4MjYw
NTI3MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdGRjNFNDhCOENCQ0M4
MEJCRjJFQ0I2N0FEOUY2M0M4RjIzRUEzMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC14CKE4/fbyu+kIZ6sh6scpRUdz67vo4EYBAXB3b3hd8GwXJpt
RUbYmBMsbjOl7ubEqqnlAzniM51MUg+pDJLJsnc8lg2UToh0TfRe2vkQ+qnCankY
oB5rqF/r6+RKgIJ15J8Vt/3WPa8ekNDHyIfq2enNk6UTacq+DQPRqAgg4RTtJXhR
mTaiOKyPUUL5DFz4w9kR8OuaE3couYn3sDgQ0wxkZSf4ZKQG45mhB1IBnZP5rRpk
HyG7VC3YAg82wyzX0QBN23gzhkdxNwkc+DNmM8TjtN4GiBx5/xUIb2RR1LlCMJpS
Zd7Q64z1hGBnYic7f15IfdqjDRtOk5wVzPo/AgMBAAGjggH5MIIB9TAdBgNVHQ4E
FgQUf/Pki4y8yAu/LstnrZ9jyPI+ozgwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL2ZfUGtp
NHk4eUF1X0xzdG5yWjlqeVBJLW96Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzAN
MAsEAgABMAUDAwK0zDANBgkqhkiG9w0BAQsFAAOCAQEAPRERW4ckMLKpH8sR3q27
DWv0mG9Pjpm7+U/tTYFLcV33vPj67hsE3VxAqlEJKYGAklcWf1aNeVoi7/YL5Wjc
730YFOVAK1T2EsAxEL5gA7ydLcq/ZxNjseKwrg9IrH3sYqJU/Pd9uEYYFa7Lrf3I
FDA1xbJTd5+0g+A9C/6WWt4mBksmaWvodSluXARXJodJanE1lTBkwpUFybelADbS
WlnCn6EgM6Wcn00dMagcMA4OWUcnrK+gU8fHGsGOgkEC7QdYa6ZIBN7bq6GZb9Fd
bwFbGulYWIsspfJW/tmBHNuFkP9Qe831JaAZNGBws3TBCx/ogkd8rwxobUhQgrkJ
Cg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org