Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1ENRT6076EpmsrTeKIGKMlePvMo.roa
File:                     1ENRT6076EpmsrTeKIGKMlePvMo.roa (raw, json)
Hash identifier:          SMIUsdd156ezmfzacx2vQDhMnxsu8Kqhw9SplyPztLE=
Subject key identifier:   D4:43:51:4F:AD:3B:E8:4A:66:B2:B4:DE:28:81:8A:32:57:8F:BC:CA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       30E6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1ENRT6076EpmsrTeKIGKMlePvMo.roa
Signing time:             Mon 26 Aug 2024 05:29:56 +0000
ROA not before:           Mon 26 Aug 2024 05:29:56 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9924
IP address blocks:        118.232.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12518 (0x30e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:29:56 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D443514FAD3BE84A66B2B4DE28818A32578FBCCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:75:30:b9:30:9e:19:d1:d0:bd:13:a2:aa:
                    27:94:07:a4:c3:a0:cf:db:c9:e1:21:cd:09:b8:33:
                    27:30:3d:20:06:3f:25:04:cf:cb:26:15:f4:01:1f:
                    be:84:e3:8a:21:07:a8:a6:bb:b4:56:5d:c3:58:92:
                    25:8f:87:11:a3:a1:87:ac:62:b9:d6:0d:a5:5e:82:
                    3e:b7:20:4f:f2:25:d3:c1:c8:47:be:68:a6:81:8c:
                    e3:19:32:b7:87:b7:f6:e8:64:76:a0:8b:ae:dc:92:
                    a2:7c:15:3a:b8:f2:4a:09:83:9e:63:a7:f5:f1:e3:
                    c1:23:bd:32:14:f8:9c:75:09:00:91:83:dd:10:af:
                    03:07:9d:f6:1c:b3:2e:87:26:c3:c6:44:25:26:21:
                    e7:38:44:10:bc:c0:84:ee:7d:03:9b:b2:82:16:ff:
                    f7:9f:e7:35:dc:2a:f2:f9:65:40:ff:d5:f3:4e:33:
                    ac:cf:ca:00:b5:bf:f8:b3:0c:10:ea:3e:6d:bd:d1:
                    f0:48:fc:76:37:fa:c9:5d:bc:bc:60:41:5e:4f:dd:
                    35:4d:e6:8b:bb:38:0e:57:b5:83:7e:25:39:3e:9f:
                    67:60:b7:06:09:5a:87:40:ae:8b:50:d9:94:95:44:
                    3c:e7:53:5d:22:9d:a3:6d:60:78:cf:f0:1c:fb:32:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:43:51:4F:AD:3B:E8:4A:66:B2:B4:DE:28:81:8A:32:57:8F:BC:CA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1ENRT6076EpmsrTeKIGKMlePvMo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:cc:48:e0:7e:b5:6e:b0:95:1a:ba:ad:1d:1f:b0:32:a0:3b:
         e0:c3:50:37:b9:0f:55:5f:fb:fb:87:df:e4:60:70:ef:aa:be:
         3d:0f:82:61:a6:0f:7d:ae:db:af:75:d9:a1:16:8f:59:e6:51:
         d6:97:cc:2a:60:5a:56:c9:07:81:01:bb:a1:31:64:31:dc:13:
         8f:97:c2:34:a5:ce:ad:6d:1c:47:2d:85:20:04:ec:11:3e:a0:
         16:42:a0:14:cd:19:a6:07:75:3b:79:0a:c3:78:fc:f5:af:32:
         d9:e0:c4:05:1b:1a:6a:ec:5b:f7:66:47:57:02:0b:ed:f4:f0:
         70:9e:7f:9a:2c:6e:6a:70:9a:8a:c9:ed:36:fe:cf:97:38:01:
         58:66:95:28:5b:44:a5:ae:d1:89:e1:a2:8c:31:44:67:8a:49:
         51:43:1f:5b:4b:ec:27:52:a3:59:84:22:41:13:69:c3:df:08:
         51:27:5c:9d:4d:c7:5d:36:21:52:d8:8a:c7:57:24:c0:c4:7b:
         bc:7e:47:a6:f3:49:e4:b6:41:63:26:5b:e3:b4:35:65:fc:c3:
         53:fa:93:ce:33:27:60:c0:a8:4b:14:86:0e:78:b0:96:d5:9e:
         c9:65:6c:c5:b0:02:b7:9a:09:81:e2:da:f1:92:0d:4c:a4:e5:
         de:26:35:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:36 2024 by rpki-client on console-ams.rpki-client.org