Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/rZZuHAyxUO0CUliKTif5suuoLZ4.roa
File:                     rZZuHAyxUO0CUliKTif5suuoLZ4.roa (raw, json)
Hash identifier:          bgGNWZ5e7NBGkRuJgdl7k2f/Qarr0Nl/OLftJg6ubfk=
Subject key identifier:   AD:96:6E:1C:0C:B1:50:ED:02:52:58:8A:4E:27:F9:B2:EB:A8:2D:9E
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0CDE
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/rZZuHAyxUO0CUliKTif5suuoLZ4.roa
Signing time:             Mon 26 Aug 2024 05:27:03 +0000
ROA not before:           Mon 26 Aug 2024 05:27:03 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24158
IP address blocks:        115.80.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3294 (0xcde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Aug 26 05:27:03 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=AD966E1C0CB150ED0252588A4E27F9B2EBA82D9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:d5:76:e5:b2:26:0c:ad:60:09:ba:83:91:
                    49:6a:3a:31:63:aa:d6:ea:6f:0d:d0:f7:5d:eb:45:
                    5a:f7:b4:42:56:9c:af:5c:e9:7d:61:61:51:05:d7:
                    4c:23:2a:dc:99:32:ed:dc:02:6c:4a:42:2d:45:f8:
                    06:7e:f6:20:4e:fe:11:d2:27:f1:f5:29:7d:a4:6a:
                    16:b1:e0:73:ae:a7:98:a8:8c:2c:15:90:ff:26:2c:
                    16:ab:ed:8a:e1:be:e6:42:46:a5:ce:3d:3b:08:a2:
                    13:7e:8b:d3:b0:ac:31:64:71:9f:aa:8d:19:91:23:
                    b3:6a:c9:a1:29:9f:1e:87:ef:dc:89:f0:8b:b4:ba:
                    a8:5d:a4:af:c1:a1:6b:20:1d:ab:e2:91:c2:fc:e9:
                    70:c2:52:ec:d2:8c:a4:76:73:0e:8b:b4:51:03:27:
                    96:66:ef:86:7b:f5:97:ba:e6:b3:e1:18:50:77:b0:
                    56:60:55:c4:97:6c:bf:10:3f:cf:a7:94:c4:4e:94:
                    84:15:45:4d:20:4e:0f:50:2a:d8:4c:21:6c:1e:e5:
                    b6:97:e3:b5:83:fe:2b:6d:07:31:64:85:71:e0:46:
                    fc:01:04:9e:f5:4c:03:58:26:2a:c0:52:44:2d:db:
                    15:23:7c:23:67:b4:23:1f:0a:8d:bd:af:7e:e1:04:
                    11:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:96:6E:1C:0C:B1:50:ED:02:52:58:8A:4E:27:F9:B2:EB:A8:2D:9E
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/rZZuHAyxUO0CUliKTif5suuoLZ4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.80.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         4c:e8:30:65:0c:81:46:47:ef:1a:17:32:64:82:71:6e:e9:66:
         50:5d:b4:19:a7:f8:6f:5a:0f:ca:b6:f5:c3:60:69:95:04:2d:
         76:09:82:9a:04:54:9e:17:f0:a9:d7:e3:b8:8c:46:0b:cc:29:
         b5:e1:12:34:df:c1:4d:87:9e:db:af:8d:9f:8b:1f:e3:80:c7:
         15:49:69:fc:b6:2d:c9:4b:65:b3:0e:89:88:33:51:e9:15:fd:
         5c:ed:14:2d:9a:5a:2a:37:6c:3d:d6:dd:76:83:13:21:3c:ff:
         dd:56:f2:bc:6e:7e:a1:8b:9d:1c:b9:9b:57:c8:4a:be:3c:2f:
         2d:9e:61:12:1e:4b:05:87:37:8c:89:6f:dd:b8:2d:39:f2:36:
         e5:7d:53:08:6f:1a:94:4a:02:65:1e:24:1b:ec:a7:3d:94:c5:
         b9:9e:a4:6a:a3:17:b7:01:a4:da:a5:10:89:22:92:28:b3:0d:
         bb:6b:b4:e1:56:78:94:5c:16:40:38:7f:cc:19:a0:f5:46:08:
         74:68:29:29:7e:73:f1:a0:70:3c:df:eb:6b:f7:4e:76:aa:7f:
         86:a7:5d:28:fd:7f:51:ca:e5:25:cc:2f:83:e0:22:85:c7:77:
         25:ac:2c:39:99:7b:96:1d:24:a4:73:6e:06:bc:a8:c5:00:47:
         e5:cc:d6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:44 2024 by rpki-client on console-fra.rpki-client.org