Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0edZutuIKRoHBsioxYHjPuvTgpE.roa
File:                     0edZutuIKRoHBsioxYHjPuvTgpE.roa (raw, json)
Hash identifier:          lXnqsJfS5M3jWtSeOWUPb6IxZclBNdRaZZCiCGJadgg=
Subject key identifier:   D1:E7:59:BA:DB:88:29:1A:07:06:C8:A8:C5:81:E3:3E:EB:D3:82:91
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       28B1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0edZutuIKRoHBsioxYHjPuvTgpE.roa
Signing time:             Fri 01 Sep 2023 10:05:40 +0000
ROA not before:           Fri 01 Sep 2023 10:05:40 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        123.193.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10417 (0x28b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:40 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=D1E759BADB88291A0706C8A8C581E33EEBD38291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:a7:3a:12:60:66:a6:cd:5c:21:ef:0c:67:
                    72:c2:c8:7b:4a:10:4c:a7:80:0a:4b:32:da:37:84:
                    74:5f:27:14:65:5a:05:b8:cf:b8:e6:38:61:d6:a6:
                    be:5c:19:de:06:4e:97:b8:55:b3:52:e3:89:34:a2:
                    b9:6e:70:89:79:b7:a4:e3:d5:25:48:19:00:9b:66:
                    b1:2f:7f:42:35:85:d9:2c:88:34:7d:00:66:d6:75:
                    1a:68:bf:a2:7a:5b:ef:a1:67:d0:19:2d:a3:4f:cd:
                    67:c5:cd:55:9a:e0:65:6e:7f:d7:d5:3c:ba:55:d4:
                    82:d3:1f:5e:c4:f8:af:34:79:ab:2a:15:f0:4b:3c:
                    ee:57:02:2b:fa:50:f6:b7:80:b3:93:1f:5f:6d:a5:
                    4b:c0:b4:00:6f:ea:27:78:5e:a6:99:86:f3:57:d3:
                    9d:f7:3c:b9:60:a2:16:79:60:57:1b:e3:94:8f:45:
                    ca:77:1f:87:b9:6b:75:62:d6:dc:5f:39:2a:bf:4b:
                    cb:78:0d:af:c2:43:c9:96:56:e2:b6:12:45:ef:23:
                    64:03:52:00:e7:93:22:41:99:ed:43:d3:6b:c4:36:
                    56:69:80:1d:10:f5:5b:f1:92:10:9d:7c:af:6e:87:
                    4d:20:7f:f6:ea:ee:79:69:2d:0f:20:a4:01:72:35:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E7:59:BA:DB:88:29:1A:07:06:C8:A8:C5:81:E3:3E:EB:D3:82:91
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0edZutuIKRoHBsioxYHjPuvTgpE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:69:8d:67:f0:09:9d:a7:bc:cf:d9:49:28:46:27:bf:ff:72:
         27:cd:0c:ef:23:ab:1b:0e:88:21:8a:19:f9:71:8c:97:36:51:
         8c:9d:1e:e8:8d:c8:bf:af:b9:d2:60:30:06:90:f5:85:9b:2b:
         4e:91:25:ce:4b:48:db:82:83:98:63:2c:a3:6e:49:dc:db:c7:
         83:a4:26:9f:57:27:b9:d8:55:26:80:55:29:89:40:a1:2f:0a:
         24:2e:50:7f:0c:ff:6f:66:99:ab:78:4e:23:ff:de:03:57:af:
         ae:79:a3:66:d3:84:43:10:3a:16:0f:9f:e7:4f:a9:eb:c5:87:
         24:20:db:b8:82:7d:74:6c:5a:66:8c:e6:2d:a9:8e:ee:f5:2b:
         69:f6:62:fc:b4:58:6b:f0:96:d6:5f:c5:4e:07:2a:58:04:f6:
         fb:a1:a8:91:29:a1:92:7b:03:73:38:8f:c0:c3:ed:88:92:5a:
         a5:14:21:71:b5:9b:1d:2f:ef:0c:b5:95:18:70:d8:ad:71:7e:
         f8:8c:56:01:56:ab:d4:81:9e:9a:de:f9:dd:35:d3:5c:ff:ae:
         d1:48:0a:21:5d:1c:db:05:f2:6d:ec:2a:d0:87:b9:81:17:52:
         54:ee:88:6e:a4:00:ad:9c:2f:a6:ad:a8:a8:e7:8e:43:9d:4a:
         99:2e:96:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:09:03 2024 by rpki-client on console-ams.rpki-client.org