Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/xqdXEWD6F3qs1D3foODqch_sfds.roa
File:                     xqdXEWD6F3qs1D3foODqch_sfds.roa (raw, json)
Hash identifier:          n4e/o1fJXWKXYmAoXn18NOFsR3lCo21qJnZQ4oLkjrQ=
Subject key identifier:   C6:A7:57:11:60:FA:17:7A:AC:D4:3D:DF:A0:E0:EA:72:1F:EC:7D:DB
Certificate issuer:       /CN=4B46CE8F8031BAB75364DA5BD981E888504FB411
Certificate serial:       A0
Authority key identifier: 4B:46:CE:8F:80:31:BA:B7:53:64:DA:5B:D9:81:E8:88:50:4F:B4:11
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/xqdXEWD6F3qs1D3foODqch_sfds.roa
Signing time:             Thu 07 Nov 2024 14:35:38 +0000
ROA not before:           Thu 07 Nov 2024 14:35:38 +0000
ROA not after:            Wed 08 Oct 2025 15:30:28 +0000
asID:                     38047
IP address blocks:        160.187.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 18:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B46CE8F8031BAB75364DA5BD981E888504FB411
        Validity
            Not Before: Nov  7 14:35:38 2024 GMT
            Not After : Oct  8 15:30:28 2025 GMT
        Subject: CN=C6A7571160FA177AACD43DDFA0E0EA721FEC7DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:d4:7e:93:e3:ec:e7:ac:c9:e4:88:98:24:
                    58:92:1d:ad:1e:b5:49:95:41:c8:82:1a:13:71:a0:
                    12:bc:b1:15:09:55:98:d2:cb:ae:2b:f0:cb:92:c8:
                    bc:55:57:a4:31:66:1a:7a:ac:65:0e:ac:60:2c:be:
                    2c:bb:6c:55:5f:85:55:98:7e:b7:89:70:16:a8:18:
                    18:1c:31:19:d2:ca:9b:75:6c:70:23:68:c3:c0:ee:
                    3e:b7:dd:56:5a:31:5e:cb:6d:84:7a:3c:59:f7:d1:
                    c4:d0:89:37:10:65:d6:d5:d8:7f:ba:61:56:99:36:
                    1d:9c:7f:c7:d4:b5:b1:c0:37:be:82:77:39:08:dc:
                    38:5d:32:23:d2:7d:1c:58:8f:69:bf:a9:f8:06:98:
                    e6:53:f9:cf:39:40:76:0b:29:9b:37:ca:4f:6d:ce:
                    e7:1e:c7:dc:b1:7c:15:ff:e3:78:b0:5e:c7:6a:47:
                    33:23:d6:ac:c2:da:54:ca:61:c4:f7:7f:5d:cd:d9:
                    b7:33:3b:46:ea:8f:26:17:24:a1:d0:21:90:49:52:
                    23:e8:55:88:5d:73:8b:95:4d:15:1f:12:3f:b6:d1:
                    ff:34:01:75:02:ea:6d:53:80:1e:2b:b0:04:b4:14:
                    97:2f:73:46:9e:6e:d2:c7:94:74:ab:ae:8e:fe:db:
                    be:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A7:57:11:60:FA:17:7A:AC:D4:3D:DF:A0:E0:EA:72:1F:EC:7D:DB
            X509v3 Authority Key Identifier:
                keyid:4B:46:CE:8F:80:31:BA:B7:53:64:DA:5B:D9:81:E8:88:50:4F:B4:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/xqdXEWD6F3qs1D3foODqch_sfds.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:18:8b:69:97:be:71:31:33:28:02:57:d3:1a:bc:c0:66:5c:
         71:ba:e5:3e:c7:0a:72:3e:23:6c:f0:04:db:1d:12:6f:1e:c3:
         0f:42:ab:cd:98:7d:bc:25:5d:fd:e7:d1:e3:41:da:30:ef:ab:
         13:41:f1:2c:4b:c8:f9:5c:52:32:35:af:f5:22:96:f3:4d:8e:
         24:bd:ff:02:06:3c:4f:86:67:26:2e:ea:45:fa:33:cb:81:82:
         61:a4:93:d9:e4:a9:4e:7b:15:a7:6b:a8:56:5a:ae:5d:5c:1c:
         df:6f:87:2a:65:97:2e:9e:81:6b:7b:bd:25:7c:a9:b2:7a:76:
         08:d4:95:07:b5:3e:c9:91:d8:42:9f:43:85:8f:7e:5a:8d:41:
         97:3b:8e:84:f1:75:1d:57:49:2f:a4:2b:f1:4d:3f:1e:0b:5d:
         48:ce:d1:cb:ef:76:1d:7d:c6:f9:9a:a8:51:36:38:60:2f:83:
         a4:0f:94:6c:0b:0c:e7:07:57:c1:35:2c:c9:6d:3b:20:19:ea:
         b0:bc:55:6f:10:b8:4a:64:a6:10:b6:a6:96:39:f7:86:c3:e3:
         df:45:1b:60:5e:d9:74:e6:82:77:fe:a1:a1:9a:08:19:03:fa:
         83:c1:4c:6d:5c:d2:6e:63:23:34:00:1e:72:0c:d2:b4:77:25:
         c2:08:d2:6a
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEI0
NkNFOEY4MDMxQkFCNzUzNjREQTVCRDk4MUU4ODg1MDRGQjQxMTAeFw0yNDExMDcx
NDM1MzhaFw0yNTEwMDgxNTMwMjhaMDMxMTAvBgNVBAMTKEM2QTc1NzExNjBGQTE3
N0FBQ0Q0M0RERkEwRTBFQTcyMUZFQzdEREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7UdR+k+Ps56zJ5IiYJFiSHa0etUmVQciCGhNxoBK8sRUJVZjS
y64r8MuSyLxVV6QxZhp6rGUOrGAsviy7bFVfhVWYfreJcBaoGBgcMRnSypt1bHAj
aMPA7j633VZaMV7LbYR6PFn30cTQiTcQZdbV2H+6YVaZNh2cf8fUtbHAN76CdzkI
3DhdMiPSfRxYj2m/qfgGmOZT+c85QHYLKZs3yk9tzucex9yxfBX/43iwXsdqRzMj
1qzC2lTKYcT3f13N2bczO0bqjyYXJKHQIZBJUiPoVYhdc4uVTRUfEj+20f80AXUC
6m1TgB4rsAS0FJcvc0aebtLHlHSrro7+275nAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUxqdXEWD6F3qs1D3foODqch/sfdswHwYDVR0jBBgwFoAUS0bOj4AxurdTZNpb
2YHoiFBPtBEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
X05PMS9TMGJPajRBeHVyZFRaTnBiMllIb2lGQlB0QkUuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL1MwYk9qNEF4dXJkVFpOcGIyWUhvaUZCUHRCRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RBSVdBTl9OTzEveHFkWEVXRDZG
M3FzMUQzZm9PRHFjaF9zZmRzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAKC7yDANBgkqhkiG9w0BAQsFAAOCAQEAsRiLaZe+cTEzKAJX0xq8wGZc
cbrlPscKcj4jbPAE2x0Sbx7DD0KrzZh9vCVd/efR40HaMO+rE0HxLEvI+VxSMjWv
9SKW802OJL3/AgY8T4ZnJi7qRfozy4GCYaST2eSpTnsVp2uoVlquXVwc32+HKmWX
Lp6Ba3u9JXypsnp2CNSVB7U+yZHYQp9DhY9+Wo1BlzuOhPF1HVdJL6Qr8U0/Hgtd
SM7Ry+92HX3G+ZqoUTY4YC+DpA+UbAsM5wdXwTUsyW07IBnqsLxVbxC4SmSmELam
ljn3hsPj30UbYF7ZdOaCd/6hoZoIGQP6g8FMbVzSbmMjNAAecgzStHclwgjSag==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:40:11 2024 by rpki-client on console-fra.rpki-client.org