Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8V6OM09eNiSyENkh4_pdqfqSkHY.roa
File:                     8V6OM09eNiSyENkh4_pdqfqSkHY.roa (raw, json)
Hash identifier:          +7+k9RMnwJ2TBQaBBggCf7aovpKCVcvtHgWiCv7Mhnc=
Subject key identifier:   F1:5E:8E:33:4F:5E:36:24:B2:10:D9:21:E3:FA:5D:A9:FA:92:90:76
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3101
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8V6OM09eNiSyENkh4_pdqfqSkHY.roa
Signing time:             Mon 26 Aug 2024 05:30:01 +0000
ROA not before:           Mon 26 Aug 2024 05:30:01 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.195.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 00:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12545 (0x3101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:01 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F15E8E334F5E3624B210D921E3FA5DA9FA929076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:89:bd:e3:a0:01:ed:89:48:8b:f1:06:d7:
                    04:dc:7b:0b:b6:7d:52:ec:6b:87:6d:96:30:ff:6f:
                    ca:ed:b4:7f:75:3b:18:fc:45:7a:3d:c7:9d:01:d9:
                    a3:c6:d4:29:3d:99:78:6e:d0:ee:74:8d:a1:91:e9:
                    a0:19:8b:de:83:e4:ef:0b:18:9d:3c:4b:e1:3d:14:
                    bd:48:36:08:36:f5:78:4f:d4:28:4b:20:a3:88:72:
                    a3:1d:83:4c:7d:f6:6c:af:5f:47:2e:33:6e:c6:b7:
                    8c:a3:fa:dd:c7:ea:9d:b9:7a:3c:96:2d:2f:b9:2b:
                    6a:cf:b1:71:2f:0b:e3:6e:f4:80:e8:ab:c6:f9:b0:
                    22:b7:c8:08:09:bf:cf:2a:16:24:5d:68:9a:32:ae:
                    68:86:69:77:53:af:d9:90:05:cd:72:69:f1:56:1c:
                    15:2a:f4:ba:c2:82:af:2f:08:3d:9a:91:4c:7c:a6:
                    96:b4:1b:d5:89:f4:a3:87:9b:0c:48:63:27:0b:89:
                    af:b4:f3:85:84:99:10:6b:5e:df:08:66:f6:f3:91:
                    9d:8a:70:58:22:3e:e6:dc:48:63:fd:12:98:e0:7f:
                    ca:9a:19:49:5e:12:34:0c:00:35:39:d7:bd:2c:94:
                    e5:93:cf:cd:bd:ce:f0:f7:e9:1b:a3:8a:6e:32:57:
                    44:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5E:8E:33:4F:5E:36:24:B2:10:D9:21:E3:FA:5D:A9:FA:92:90:76
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8V6OM09eNiSyENkh4_pdqfqSkHY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:db:13:24:a1:30:aa:19:ec:57:82:b9:54:83:d6:92:ca:96:
         b8:4a:b0:87:74:1d:e2:72:11:13:d6:71:b6:19:a6:aa:93:88:
         51:c5:63:d8:9a:41:fd:cd:bb:83:97:93:2a:e5:b6:22:e1:fe:
         de:cd:0e:f9:a8:15:55:5b:db:40:50:10:db:2f:e7:61:76:87:
         58:ac:04:3d:6d:f8:c0:1b:43:56:d3:04:07:f7:57:3f:78:6e:
         62:9e:bd:05:7b:61:5d:b1:0c:eb:bc:54:42:8e:a1:d8:cb:0d:
         c7:99:6e:f4:8b:7f:68:f9:76:23:9f:7e:19:fc:9c:d6:da:50:
         98:f4:d3:d7:a0:db:9c:b7:f0:d2:a6:7c:85:5f:63:92:51:80:
         8e:3a:73:70:07:73:5c:7e:22:ee:4d:a3:9c:86:5d:c2:ed:93:
         48:53:b5:86:99:75:6b:dd:0a:ec:8c:33:49:09:f5:f1:32:70:
         e1:c7:54:da:c2:c6:5a:b7:45:bf:55:83:bd:3b:56:70:b9:f2:
         03:e6:9d:9f:94:9b:af:71:6a:02:b0:0f:1c:23:12:a7:44:86:
         0f:58:0c:e2:38:e4:a1:da:c1:86:6a:03:21:71:a3:3d:38:0c:
         3e:73:8b:2d:f4:46:7f:17:1c:9c:64:b6:9b:55:45:47:23:2b:
         fb:7a:13:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org