Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/47qSs-ar8e9ZE9KEAQsIMgPbNqE.roa
File:                     47qSs-ar8e9ZE9KEAQsIMgPbNqE.roa (raw, json)
Hash identifier:          4Al3Karo7yc8IE+WswXAXTmtCMe76EEdAP1kbLYSnS4=
Subject key identifier:   E3:BA:92:B3:E6:AB:F1:EF:59:13:D2:84:01:0B:08:32:03:DB:36:A1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       314B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/47qSs-ar8e9ZE9KEAQsIMgPbNqE.roa
Signing time:             Mon 26 Aug 2024 05:30:19 +0000
ROA not before:           Mon 26 Aug 2024 05:30:19 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.194.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12619 (0x314b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:19 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E3BA92B3E6ABF1EF5913D284010B083203DB36A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bc:4d:37:cf:a3:e0:f9:94:fc:59:9a:2d:72:
                    1d:1d:85:61:4f:a0:78:ee:dd:66:26:4a:fd:25:24:
                    f3:1c:02:2d:bb:0a:10:f6:f9:69:b3:ce:1b:73:4f:
                    86:9d:66:82:3d:73:24:04:67:cc:fb:d8:9a:8e:11:
                    b4:10:19:f4:c1:c5:3e:0d:5c:6a:48:6b:19:a4:bd:
                    d2:51:a6:43:95:5d:90:67:18:6f:1b:77:83:f8:52:
                    f0:50:f0:59:58:4c:92:62:20:6b:4e:cb:fd:cd:f1:
                    b1:02:e4:0f:93:56:01:63:95:43:e1:0c:51:68:9d:
                    cf:55:32:8c:f3:a7:19:34:06:6f:4d:07:a3:61:3e:
                    72:2a:d7:0c:04:73:3b:94:13:fc:b7:8c:93:47:86:
                    55:73:3b:41:f2:dd:9d:b6:0d:c6:df:66:83:a0:bd:
                    b0:e9:cb:41:34:82:3c:57:18:a1:e6:56:ae:71:94:
                    c0:35:ef:a2:cd:86:dc:c5:c2:bc:a9:db:1b:3c:bf:
                    37:47:17:10:83:93:03:41:96:14:f2:61:e1:a0:4b:
                    1c:5b:ef:81:0f:74:33:d6:19:9a:20:ac:df:d9:32:
                    84:3c:e9:f5:a8:8e:cb:e8:98:f1:af:18:cb:7a:55:
                    7c:ce:ff:75:6a:1b:00:1e:89:b8:9a:07:dd:bc:84:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BA:92:B3:E6:AB:F1:EF:59:13:D2:84:01:0B:08:32:03:DB:36:A1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/47qSs-ar8e9ZE9KEAQsIMgPbNqE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:fb:fc:af:86:ff:c9:aa:39:d3:47:86:d8:7d:80:9a:18:b0:
         28:84:0d:34:71:2f:70:41:02:5d:07:b8:27:0c:23:bf:17:ff:
         0f:ca:eb:11:1e:4a:fa:34:97:b0:82:98:c7:cc:4a:f2:fe:07:
         7c:a8:06:b3:14:de:53:ed:6b:6f:a7:47:be:9e:80:a6:63:bd:
         17:78:2d:a5:ef:c4:d6:3c:de:79:55:bc:28:95:d0:81:75:81:
         47:92:e1:22:7c:59:72:19:b5:5a:d3:77:ca:77:e6:95:c3:e7:
         3a:ca:47:83:d2:5a:70:03:97:cf:33:90:11:58:75:07:83:a3:
         25:fe:d4:8b:2d:d0:56:3c:41:af:a7:34:f1:23:81:77:74:1b:
         5c:79:bb:68:c5:cc:9a:b7:4f:db:8c:1e:5e:80:23:4d:61:1a:
         9d:7d:49:3f:26:a6:d8:4e:10:e4:74:7e:aa:9a:13:80:14:ff:
         48:71:41:6f:79:53:62:7f:09:81:f3:9c:fc:f4:8c:da:d3:ce:
         5c:ef:e0:82:c1:d3:5c:0d:56:5b:66:d1:27:75:b2:14:2d:10:
         83:96:7e:2e:58:02:dd:92:40:c2:6e:46:e2:0e:4d:8e:1a:f3:
         1b:0b:3d:f8:35:d4:be:56:66:71:bb:64:36:51:0a:af:6d:bb:
         19:0d:21:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:55 2024 by rpki-client on console-fra.rpki-client.org