Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/qxSRsbVHLkiIpcQ25jhqMxSn6gg.roa
File:                     qxSRsbVHLkiIpcQ25jhqMxSn6gg.roa (raw, json)
Hash identifier:          XReWDZI4RrlH8ILzIwtUxih7s/vdaHZNBlaJcmiTa7Y=
Subject key identifier:   AB:14:91:B1:B5:47:2E:48:88:A5:C4:36:E6:38:6A:33:14:A7:EA:08
Certificate issuer:       /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial:       0CC0
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/qxSRsbVHLkiIpcQ25jhqMxSn6gg.roa
Signing time:             Mon 26 Aug 2024 05:28:06 +0000
ROA not before:           Mon 26 Aug 2024 05:28:06 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18049
IP address blocks:        61.58.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3264 (0xcc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
        Validity
            Not Before: Aug 26 05:28:06 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=AB1491B1B5472E4888A5C436E6386A3314A7EA08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:3c:b6:39:77:98:98:0a:4c:59:19:9f:07:
                    eb:4f:eb:a2:6a:e6:7e:f6:8d:41:d6:96:94:25:f2:
                    d7:77:0c:a7:3c:52:dc:33:4a:e2:fd:88:b9:5d:b4:
                    12:8f:47:9e:ad:d8:4e:e1:80:8a:2a:7b:8a:9f:11:
                    39:65:e2:38:67:fe:41:6a:5c:d9:e5:cb:ba:e3:25:
                    98:85:6c:7c:6e:b8:d6:b2:7a:ac:46:9b:07:a0:11:
                    73:c7:34:4b:bd:7f:24:ba:62:23:35:05:e7:4b:13:
                    fd:07:33:d3:05:e1:2f:09:2a:80:7a:ca:9f:72:55:
                    7f:ce:eb:8b:4d:34:b0:65:71:b8:8b:fc:1f:ff:bb:
                    40:c2:0d:49:01:29:f4:20:ab:28:cc:c2:b8:50:06:
                    ee:58:2c:b3:a3:38:ca:c0:4a:f4:30:d1:a1:c9:6a:
                    be:bd:54:bd:e1:32:31:3f:72:a4:23:63:e3:2d:0e:
                    d5:7e:cf:5c:ad:f9:7f:8b:86:74:c6:47:1e:d7:8a:
                    a9:5e:dd:0d:af:1e:f7:ce:5f:64:ef:f6:d0:ad:b5:
                    95:86:e4:49:f8:46:e0:06:49:2c:08:81:61:62:a4:
                    84:e6:d1:c5:a7:c1:4e:fd:a6:c5:6a:a8:9e:01:4e:
                    fd:9b:78:24:ae:ce:7e:91:3a:aa:b2:43:3c:06:07:
                    52:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:14:91:B1:B5:47:2E:48:88:A5:C4:36:E6:38:6A:33:14:A7:EA:08
            X509v3 Authority Key Identifier:
                keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/qxSRsbVHLkiIpcQ25jhqMxSn6gg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:da:49:3d:b3:be:0c:fa:7e:26:47:56:ee:6f:17:9b:35:4b:
         75:c6:a5:94:ef:02:95:46:9d:85:90:37:12:b0:9f:b7:5b:42:
         21:fd:72:e4:50:0f:18:ad:f4:26:f1:9d:9f:95:e0:e3:31:7c:
         5c:24:95:a8:ea:79:a7:fc:33:04:e8:1b:a8:73:34:81:e2:a4:
         b3:74:40:90:ab:bf:ec:76:aa:a2:53:cc:86:d7:20:db:90:33:
         f5:b7:bc:10:4c:47:30:7c:70:58:66:41:6b:da:44:53:7d:d0:
         84:b7:3f:83:16:93:1a:0a:16:cc:1e:fa:a0:c6:6d:d2:83:96:
         88:ac:b9:77:2e:0f:e6:ba:c5:5b:c6:d2:97:ed:f2:7f:e5:0c:
         58:5f:36:9b:66:90:94:36:83:43:07:e4:ba:98:13:54:0f:39:
         f7:aa:9d:23:32:41:a1:33:ff:de:d9:67:f2:ca:7b:13:f9:4d:
         ee:ba:cd:5a:b5:cf:ea:0d:31:ff:2f:03:d7:08:42:7c:c2:9c:
         7c:ea:16:1f:0a:d4:eb:df:f8:77:89:3d:e5:77:cb:c5:a0:fe:
         29:43:40:54:c2:6e:58:98:7f:6e:8f:9c:49:27:b7:26:a8:fa:
         b5:e1:88:49:ad:39:c7:d1:2a:1e:6a:9c:ff:ac:9e:92:eb:cc:
         1f:42:31:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org