Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/74jkYMLYEm4CnE0Oh_vAglKssdE.roa
File:                     74jkYMLYEm4CnE0Oh_vAglKssdE.roa (raw, json)
Hash identifier:          yWzLc1dmXBn/bip5ERM6nKkHRAsm++kttqykzGz1b44=
Subject key identifier:   EF:88:E4:60:C2:D8:12:6E:02:9C:4D:0E:87:FB:C0:82:52:AC:B1:D1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       30C2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/74jkYMLYEm4CnE0Oh_vAglKssdE.roa
Signing time:             Mon 26 Aug 2024 05:29:47 +0000
ROA not before:           Mon 26 Aug 2024 05:29:47 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        211.76.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12482 (0x30c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:29:47 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=EF88E460C2D8126E029C4D0E87FBC08252ACB1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:d0:f8:3e:d2:16:a8:2d:9f:45:cb:b3:c3:
                    38:af:85:c3:5f:cc:e1:6f:e3:78:10:4f:28:bb:81:
                    c2:20:9c:18:47:df:be:8f:82:a6:c6:97:7d:ff:32:
                    0d:69:fa:29:92:2f:2a:b1:59:97:45:ad:ad:e2:bd:
                    30:45:0c:1d:e3:64:28:a6:1f:e7:78:f1:87:5f:79:
                    6b:58:3e:05:7c:11:e1:de:7b:ea:06:1c:02:25:fe:
                    07:7f:bd:62:82:8b:5c:0f:c1:d5:c2:0d:1c:3b:02:
                    af:a1:a4:65:8c:8f:28:df:2e:20:82:ff:40:73:2b:
                    77:c1:5e:21:b7:73:9a:03:47:38:38:2a:a0:b3:b1:
                    b9:ca:0c:24:78:47:81:6d:fc:78:15:15:f8:ef:6f:
                    ea:6c:3b:a4:59:be:b1:77:82:6c:90:84:53:c0:a7:
                    ec:14:ef:be:cd:f4:28:c3:a2:c7:61:99:95:ac:43:
                    e0:6e:ba:5e:84:79:c4:49:05:0c:21:4d:54:c1:7b:
                    f5:e5:6c:95:f3:be:7e:90:36:80:94:0c:c6:1f:c9:
                    1a:0f:fa:ff:57:2e:33:27:0d:e6:91:74:fb:a3:fd:
                    e2:09:e3:5f:d6:e1:d4:e0:f0:c1:e4:74:57:54:ef:
                    99:3d:34:f0:c5:98:8f:00:6f:ff:ea:f4:11:e3:e4:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:88:E4:60:C2:D8:12:6E:02:9C:4D:0E:87:FB:C0:82:52:AC:B1:D1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/74jkYMLYEm4CnE0Oh_vAglKssdE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:a3:4e:30:60:31:71:cf:e9:e2:c3:e8:3c:ed:79:92:59:86:
         5f:3b:00:dd:05:6d:8c:0a:27:d4:e7:b4:1b:97:38:0e:31:89:
         c9:4a:f5:f4:c1:1c:ca:1b:b5:c6:01:52:74:4d:40:8d:30:f4:
         ba:7b:fb:af:bd:e3:4d:af:71:0e:37:3c:b8:6a:34:8c:d7:46:
         9b:f9:3f:e6:b9:a4:13:5f:5a:b3:f3:8d:f7:c1:a9:58:15:8f:
         c2:d2:db:d1:da:8f:e6:bc:1b:1a:b4:70:99:9e:36:6b:0a:11:
         bf:d3:73:45:f6:22:21:c9:60:65:48:0b:42:8b:e6:0e:2a:92:
         3f:d1:3e:69:7c:8a:5f:fe:d5:c5:f1:0f:12:32:45:15:78:c0:
         a9:51:4d:1e:be:9f:24:da:ee:6d:6d:fa:48:2e:f7:d1:b8:09:
         b6:18:f5:7a:89:4a:1c:12:30:21:26:73:b5:8c:27:bd:40:1d:
         9c:2e:ec:9b:42:4b:16:ed:6a:5a:1c:50:f7:98:8c:41:f9:e0:
         cf:4e:5d:d0:f0:1d:8b:3c:9e:cf:fa:2d:21:31:d1:d8:e1:34:
         55:62:40:4b:e9:ba:dc:3d:cb:04:bf:8e:cb:6e:da:e8:60:a7:
         7d:c1:b5:d9:3f:ad:b1:36:a9:6d:47:f4:fb:42:80:30:e3:c1:
         f7:f9:3b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:36 2024 by rpki-client on console-ams.rpki-client.org