Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Igngg5mqEMXwNbL8BQuHWtcUms.roa
File:                     9Igngg5mqEMXwNbL8BQuHWtcUms.roa (raw, json)
Hash identifier:          GeI2jtuQsfql6UoKqQiXx8aIbRfHRGXl9lm3S1w5q9Y=
Subject key identifier:   F4:88:27:82:0E:66:A8:43:17:C0:D6:CB:F0:14:2E:1D:6B:5C:52:6B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Igngg5mqEMXwNbL8BQuHWtcUms.roa
Signing time:             Mon 26 Aug 2024 05:28:42 +0000
ROA not before:           Mon 26 Aug 2024 05:28:42 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9924
IP address blocks:        123.194.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12194 (0x2fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:28:42 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F48827820E66A84317C0D6CBF0142E1D6B5C526B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b4:0e:f9:ac:b3:02:73:e3:54:60:8c:39:68:
                    83:a3:9a:96:b7:35:06:80:bd:a4:41:bb:8c:de:e3:
                    67:bd:3a:d9:ab:85:92:0c:a2:1c:a8:3c:48:7f:53:
                    bd:59:6d:98:96:a8:99:78:3b:ca:48:cd:15:b2:5e:
                    95:bf:43:a0:a0:5f:26:f4:02:1c:5f:0b:6b:34:02:
                    9f:b3:9b:3c:0f:05:9f:b6:74:3e:e3:42:1a:e7:4b:
                    12:c8:fe:07:87:27:84:53:4a:e2:a6:66:ce:e9:43:
                    9f:e1:67:b2:b8:d0:e7:08:91:7d:e1:97:3c:12:9c:
                    e1:51:e9:52:f7:cc:2e:50:01:a3:0e:7f:6b:7b:bf:
                    6e:3a:ba:e2:1e:7e:1d:42:7e:7c:4e:1a:31:1f:e3:
                    87:11:40:17:a0:9d:b7:3c:cf:ab:4f:b9:ab:9c:00:
                    0b:83:1c:75:53:ac:13:c8:8a:4c:29:85:3d:61:c1:
                    f6:7c:1d:07:9b:d1:05:eb:23:4f:ec:7e:fe:37:9f:
                    8f:3e:6a:4d:1d:88:25:10:c7:95:7d:c8:cd:23:3f:
                    c1:58:0a:6f:36:74:1d:5c:3b:cf:a7:cb:ec:fb:c5:
                    15:77:eb:8d:fd:d3:50:74:b7:ce:a5:5d:38:0c:6a:
                    c4:b8:51:fa:12:2a:af:6d:5c:c1:f8:e1:a9:33:10:
                    60:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:88:27:82:0E:66:A8:43:17:C0:D6:CB:F0:14:2E:1D:6B:5C:52:6B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Igngg5mqEMXwNbL8BQuHWtcUms.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         78:54:cf:ec:6e:2a:65:94:e7:4d:1c:cc:9f:8c:24:6c:2b:f6:
         25:5b:34:cf:74:ff:79:38:17:d3:5f:1a:4b:31:50:2a:75:86:
         67:60:92:f8:05:76:6e:8a:ae:36:5f:da:07:b8:b5:b1:e4:0f:
         02:c2:33:20:be:ba:08:15:2e:b5:c2:e2:cb:f0:75:b4:38:e3:
         4b:c3:15:1d:6e:4a:f0:8c:df:6c:f5:94:d7:09:c9:18:22:4d:
         b8:b8:b7:0b:a2:87:ab:49:84:a7:2d:0d:19:d3:bf:21:bd:2d:
         06:51:a3:c9:01:19:7e:75:f7:df:5e:6d:30:1a:b8:07:3a:b0:
         a6:c0:0a:73:79:3f:ce:71:a7:01:82:a6:ea:f6:e4:31:ba:7f:
         90:cf:0b:fa:46:d7:19:b1:e2:35:84:f1:01:8a:6f:e2:60:d4:
         32:e1:d3:7c:00:93:e5:5c:ab:96:c7:68:2b:cb:45:cc:31:b6:
         2d:89:f8:9c:ae:2a:15:9c:70:a1:0c:e2:f5:a4:e1:6a:fb:b8:
         e2:24:76:67:62:29:54:2f:64:97:fa:49:79:35:fe:38:7f:97:
         af:8b:9a:80:63:6b:53:ad:cf:9e:35:10:94:03:33:9b:62:5e:
         bd:67:3f:09:03:d0:38:80:ed:bc:cd:89:f8:4d:3e:9c:23:af:
         55:60:9f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:36 2024 by rpki-client on console-ams.rpki-client.org