Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/oW3ZSL8tflLZ45cryCcVgI5Rj9M.roa
File:                     oW3ZSL8tflLZ45cryCcVgI5Rj9M.roa (raw, json)
Hash identifier:          C/TbAxBbt8x4ZbwJfyY8LxIY7Z9LW0jZmjOnS0dLwQw=
Subject key identifier:   A1:6D:D9:48:BF:2D:7E:52:D9:E3:97:2B:C8:27:15:80:8E:51:8F:D3
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0CD9
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/oW3ZSL8tflLZ45cryCcVgI5Rj9M.roa
Signing time:             Mon 26 Aug 2024 05:27:02 +0000
ROA not before:           Mon 26 Aug 2024 05:27:02 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24157
IP address blocks:        1.200.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3289 (0xcd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Aug 26 05:27:02 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=A16DD948BF2D7E52D9E3972BC82715808E518FD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:22:33:68:e8:9a:23:db:74:37:90:3d:be:fd:
                    ad:b2:db:62:d8:62:d8:47:59:9b:15:46:83:74:df:
                    35:11:ed:e3:44:e3:79:eb:7d:45:7f:71:62:26:fd:
                    14:16:dd:17:a8:27:07:5c:2a:ae:3a:c7:a2:71:be:
                    b0:8d:66:8f:a3:e0:12:31:0a:f7:1b:a1:e1:55:85:
                    11:3d:5f:2f:3d:d1:07:48:a3:fb:b5:41:75:c7:31:
                    82:a3:f2:35:a4:b0:75:e1:d4:f7:c3:3c:7d:bb:ca:
                    09:82:27:a3:da:37:d3:36:35:16:7e:31:00:ce:63:
                    72:2b:60:72:7f:d6:f8:2f:91:8a:80:34:a5:61:7b:
                    3e:73:0e:59:2a:c5:50:38:cc:c3:24:a3:e3:86:b6:
                    07:c9:b4:a1:18:d4:f2:1d:95:06:cb:07:6f:da:18:
                    cb:d6:2e:14:dc:01:e3:47:ae:d8:86:1a:34:5f:62:
                    2e:22:36:8b:75:d1:ac:1a:83:21:13:65:64:94:5e:
                    16:ce:4f:78:89:fb:c1:5d:9a:66:ad:95:e0:07:3e:
                    ba:00:dc:38:03:af:4e:f8:f1:c9:97:cb:44:67:5f:
                    b3:84:9b:df:bb:8a:95:ad:59:d8:80:b0:3b:50:27:
                    e0:e8:86:a5:f8:b0:98:b1:b5:2e:ea:d0:47:de:7c:
                    d0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6D:D9:48:BF:2D:7E:52:D9:E3:97:2B:C8:27:15:80:8E:51:8F:D3
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/oW3ZSL8tflLZ45cryCcVgI5Rj9M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.200.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:bc:40:7f:fa:51:a9:24:55:70:ed:df:4e:59:ba:5a:0e:4b:
         d2:20:27:5a:3f:d2:62:55:e9:8c:3f:1c:bd:02:29:65:1d:01:
         6d:ab:58:b0:2f:a8:2a:e6:f8:22:1f:2b:e0:4f:d4:38:f2:5e:
         a0:fe:c9:91:8f:04:61:b0:05:41:66:f2:68:8e:dd:b5:fa:06:
         b8:78:5c:6d:5a:a0:8f:3b:2d:77:e7:fa:db:19:9a:ac:d8:24:
         08:64:1a:04:ce:d5:b3:24:90:10:a8:3e:e1:7e:e4:fe:b6:de:
         11:54:c1:17:65:5b:e0:52:36:8c:30:42:af:8b:60:91:29:11:
         87:64:50:3f:1f:03:f4:bc:ec:62:5f:d3:b6:6d:df:20:4b:5e:
         52:6a:52:bd:48:55:0c:2a:a1:d1:ec:78:54:d8:a8:3f:ac:a4:
         7e:42:b6:cc:d9:e7:82:dc:68:8e:f8:40:05:91:1b:9f:63:f1:
         43:37:4f:ac:95:99:61:7d:1b:c5:5e:86:e8:21:14:2d:b4:c2:
         48:b8:3c:ed:2f:f1:b4:0b:4e:e6:2d:05:bf:eb:a5:63:1c:0b:
         89:25:74:bf:c3:af:e6:dd:a5:eb:40:7e:34:b1:93:8a:05:c3:
         01:5f:e9:e4:be:3a:e5:55:98:75:72:34:ff:5c:96:04:65:f6:
         b4:30:e8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org