Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A6lPJhikt8Rpkdubmga5OP4-Tg8.roa
File:                     A6lPJhikt8Rpkdubmga5OP4-Tg8.roa (raw, json)
Hash identifier:          JzGQbngC568rCkMsj/fndCjaqImE/0pVkd3LeA3dceE=
Subject key identifier:   03:A9:4F:26:18:A4:B7:C4:69:91:DB:9B:9A:06:B9:38:FE:3E:4E:0F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       364F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A6lPJhikt8Rpkdubmga5OP4-Tg8.roa
Signing time:             Mon 10 Feb 2025 13:54:12 +0000
ROA not before:           Mon 10 Feb 2025 13:54:12 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        45.64.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13903 (0x364f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:54:12 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=03A94F2618A4B7C46991DB9B9A06B938FE3E4E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a0:bb:63:e4:3f:37:a4:78:20:73:a9:b8:45:
                    f1:63:7f:ee:7f:9a:61:38:a2:92:44:70:da:54:b2:
                    c6:27:41:70:2f:46:19:4a:ef:a9:a0:b5:6a:00:21:
                    99:2f:11:96:05:fa:b0:cd:e5:97:a1:41:75:ce:78:
                    69:44:eb:c9:4d:ef:8c:d3:3b:b6:d5:09:72:b3:ba:
                    e7:b4:2e:cc:9e:30:b3:fb:01:88:85:f9:3a:a6:8b:
                    1c:2e:61:90:da:9d:58:20:42:e1:5e:13:63:d3:f8:
                    2a:2c:e5:46:1d:0d:aa:b2:29:05:95:4a:11:99:d9:
                    70:4f:ba:35:ba:89:58:14:d7:44:5c:17:7d:3c:81:
                    c4:20:10:1d:dd:53:88:87:ac:f6:84:73:9c:d3:e2:
                    74:5b:c6:b4:13:a5:8a:75:9c:2c:a4:a3:27:15:dd:
                    80:58:95:8f:1f:9f:72:67:34:91:86:3d:3b:20:87:
                    11:3c:31:40:68:6f:4a:5c:0c:28:8b:e4:43:09:0a:
                    1b:ca:1e:a6:3f:63:05:57:71:ae:58:82:55:0b:2b:
                    61:9b:f4:34:c6:27:28:73:6a:ac:c6:66:2b:55:b7:
                    4b:b9:81:81:12:dc:c2:26:5a:4e:11:94:88:7a:f6:
                    3a:e4:eb:c4:96:ac:c3:ec:52:42:4e:7b:e3:ba:23:
                    18:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A9:4F:26:18:A4:B7:C4:69:91:DB:9B:9A:06:B9:38:FE:3E:4E:0F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A6lPJhikt8Rpkdubmga5OP4-Tg8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:d7:ff:a3:4a:82:52:14:31:48:16:44:5f:d9:65:1b:3d:ce:
         51:7f:35:b8:5b:c4:24:95:fd:4c:e6:69:dd:2b:51:06:40:21:
         8d:c2:13:2b:88:d8:e5:a5:95:0b:4f:e7:85:34:e1:74:9e:cd:
         a7:e7:3e:6e:44:2e:20:3d:ad:47:8d:dc:1c:c1:fb:78:e0:86:
         9e:3f:4c:51:cc:c9:2a:e0:c5:59:46:af:84:5b:bf:3f:c0:24:
         85:15:f3:15:ce:db:67:2c:ab:17:86:e6:65:fc:24:ea:ff:5f:
         da:a0:6f:de:7e:eb:1e:f2:08:55:4b:9a:2d:18:14:04:89:2c:
         43:a6:c7:22:90:52:24:da:6d:b5:52:91:9b:3d:77:f5:00:2e:
         30:66:e2:ce:b5:c5:a7:34:ec:c0:7e:61:4b:55:76:70:e4:ad:
         bf:22:34:6c:47:96:18:fb:ec:e6:88:a4:9d:ee:30:83:66:97:
         05:0a:c7:81:46:35:d3:83:e4:00:3b:06:c4:45:5c:4d:4e:95:
         5e:1f:50:13:f7:6f:69:6d:2b:3a:02:5e:fc:a4:c8:7b:32:b2:
         f6:31:2f:18:ef:a1:65:b5:7d:c5:6c:a5:17:54:a2:3f:3f:10:
         3d:89:5b:4d:fa:67:44:79:0a:b5:b3:4e:6b:92:85:db:29:9b:
         f4:2d:69:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:58 2025 by rpki-client