Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-uuA18LQpHu6BDtFUGIUelANfJ4.roa
File:                     -uuA18LQpHu6BDtFUGIUelANfJ4.roa (raw, json)
Hash identifier:          9bfdSLmqO5U0ncWgY0TS7CYiYJworAs1P4VPzLDlEdI=
Subject key identifier:   FA:EB:80:D7:C2:D0:A4:7B:BA:04:3B:45:50:62:14:7A:50:0D:7C:9E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       28E2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-uuA18LQpHu6BDtFUGIUelANfJ4.roa
Signing time:             Fri 01 Sep 2023 10:05:52 +0000
ROA not before:           Fri 01 Sep 2023 10:05:52 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.177.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10466 (0x28e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:52 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=FAEB80D7C2D0A47BBA043B455062147A500D7C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5b:aa:54:ef:cd:74:83:dd:d0:50:2f:fb:d2:
                    c3:b2:1d:13:0c:c0:e9:62:d6:a1:1e:e0:d3:e8:d0:
                    d6:ea:07:d9:b4:e2:02:99:66:66:82:2e:d7:8b:a7:
                    ed:24:1b:3e:5e:a2:29:61:98:b6:87:15:aa:30:b0:
                    9d:9d:4b:bb:23:21:a0:3a:5c:0b:4e:d8:5d:f6:d1:
                    8d:15:26:d2:46:8c:06:da:25:68:8d:b9:5f:44:8e:
                    99:78:e7:de:6e:24:56:29:85:d4:46:30:a8:d9:58:
                    e7:df:40:95:5f:04:40:e3:82:fe:b2:78:fe:f0:7b:
                    8f:1c:90:b1:22:4c:ad:d5:c5:46:ff:ef:3f:9f:66:
                    c4:ba:2f:41:57:d9:ec:c5:17:98:15:82:29:29:da:
                    10:b6:a7:2f:0f:15:55:11:2d:9d:12:b8:14:c4:a7:
                    a5:45:49:95:20:ab:20:a6:91:b9:48:98:8a:17:5b:
                    50:29:2a:5c:b7:07:7a:d7:10:e5:66:3d:24:25:62:
                    f3:d6:1f:68:b4:9d:22:5f:84:2a:15:5d:03:76:e5:
                    13:5e:ea:45:94:bc:3b:6e:a4:f2:b6:76:ef:c6:8f:
                    4e:a9:dd:d9:d4:05:c8:42:a7:f7:ff:85:9d:f2:1b:
                    40:83:ea:13:81:5e:d7:e2:07:bb:a2:b9:5a:0f:41:
                    8e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EB:80:D7:C2:D0:A4:7B:BA:04:3B:45:50:62:14:7A:50:0D:7C:9E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-uuA18LQpHu6BDtFUGIUelANfJ4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:be:61:ac:90:6c:ae:41:cf:05:ed:47:a3:54:1b:fa:5a:bb:
         3b:c1:5c:ab:1d:c1:65:60:85:1f:78:c2:83:1a:93:18:56:a4:
         92:d3:7d:96:43:a3:dc:2f:f0:54:16:85:54:7e:99:27:7d:f8:
         33:27:4c:a9:78:92:3f:4f:64:1f:c1:d4:ac:47:26:d4:74:83:
         1a:64:0c:5a:c6:79:24:99:e5:38:71:7e:1f:d3:43:2c:43:a4:
         00:27:1c:a0:42:9f:4a:90:11:25:20:1a:41:ff:d7:54:11:bc:
         2a:0b:c1:e0:c5:f3:1f:e9:0d:0f:2c:00:ca:8f:c9:cd:e4:cc:
         3c:ad:46:b0:30:cf:cf:ed:e2:dc:19:64:bd:ce:a1:05:fb:0b:
         e5:4e:a8:b5:71:f4:65:7a:8a:b5:35:c3:87:25:c1:9c:0c:af:
         18:ab:e2:b7:13:f4:40:96:c6:d7:b7:d8:52:31:e2:12:39:de:
         ff:a4:38:18:66:d9:cc:c3:50:42:80:f9:21:f8:43:de:65:ea:
         5d:36:da:3e:d7:95:5f:34:00:a8:d5:f6:02:65:fa:3d:d7:a5:
         d0:b7:44:25:2b:1b:b5:74:b7:b8:96:b0:f6:fe:9b:6f:64:46:
         34:f2:70:10:9b:74:45:2b:6a:52:3d:34:09:2f:a5:c6:34:df:
         15:6f:48:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:09:03 2024 by rpki-client on console-ams.rpki-client.org