Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AJqRS6oIieYU1Rr81aIgveE0Cto.roa
File:                     AJqRS6oIieYU1Rr81aIgveE0Cto.roa (raw, json)
Hash identifier:          7DNd88smGQ1bpasURTLFCYdiL3rER93m6RIJZyKJYLY=
Subject key identifier:   00:9A:91:4B:AA:08:89:E6:14:D5:1A:FC:D5:A2:20:BD:E1:34:0A:DA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2A42
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AJqRS6oIieYU1Rr81aIgveE0Cto.roa
Signing time:             Fri 01 Sep 2023 10:07:41 +0000
ROA not before:           Fri 01 Sep 2023 10:07:41 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.177.220.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10818 (0x2a42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:41 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=009A914BAA0889E614D51AFCD5A220BDE1340ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:4c:1a:08:45:5e:8f:72:70:86:59:77:14:
                    49:03:2f:44:70:bc:26:eb:30:04:73:4d:72:7f:54:
                    96:92:3c:df:93:4c:2d:53:76:dd:1c:69:a6:7e:2c:
                    cc:ad:62:00:49:b4:7c:df:90:12:11:56:c2:e9:9e:
                    32:9c:99:b0:c1:b7:08:8b:60:b8:90:af:ff:c9:96:
                    8b:58:9c:2f:2c:a9:77:0c:14:49:81:dc:0e:c4:89:
                    73:86:d4:93:ac:bf:9c:56:e1:4a:01:d6:73:1a:39:
                    d8:76:02:57:58:f5:6d:28:36:2d:af:52:06:71:43:
                    19:01:59:9e:77:45:eb:a7:76:bc:f7:ec:94:33:87:
                    2b:88:b6:6f:61:ed:57:3c:10:9c:80:46:1e:8e:19:
                    1f:0d:f8:87:84:e8:60:ab:f5:3c:1b:11:c5:cc:e0:
                    db:ab:d5:fc:80:68:a1:df:24:2f:20:ac:18:cf:5e:
                    39:d5:aa:f1:62:0a:c0:4f:5d:1b:ff:84:a1:f7:2d:
                    f6:74:31:5f:41:f1:22:75:b8:8d:62:d8:9b:e9:5a:
                    41:55:0b:3e:78:9c:b7:b1:09:db:f5:f9:81:36:8e:
                    db:06:a4:fc:c7:a7:7f:47:94:ae:76:8c:c6:53:13:
                    9b:f9:c3:27:67:a3:1f:88:07:93:c0:18:71:cd:f7:
                    d5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9A:91:4B:AA:08:89:E6:14:D5:1A:FC:D5:A2:20:BD:E1:34:0A:DA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AJqRS6oIieYU1Rr81aIgveE0Cto.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:42:9d:8e:bf:7b:38:35:87:ea:b3:9d:50:96:65:d6:a4:5e:
         65:00:b7:54:44:dd:26:4c:31:8b:08:bd:0a:5e:1a:6d:bf:b5:
         d6:a2:1f:50:4a:44:f2:af:81:2c:df:2f:fc:b6:6a:04:b6:07:
         03:e3:a9:0d:76:05:95:c7:c0:9d:aa:5f:c5:7e:04:37:f6:36:
         9a:dc:84:ec:21:8f:8c:6e:a2:ed:6f:80:78:80:8a:da:f7:c4:
         66:d9:4d:f6:b7:74:0d:da:ca:24:0b:ee:29:ad:33:ba:9e:ac:
         a7:91:59:88:bf:01:b2:d3:21:64:8f:07:b4:8e:3e:d3:37:4d:
         15:e2:8d:bd:f2:17:13:d9:7c:07:0e:18:4f:d0:92:a6:45:5d:
         99:40:3a:8e:d4:f1:7d:1f:4b:59:13:ff:c9:b4:1b:7d:07:8a:
         15:30:2c:bc:e6:00:6d:60:0c:00:ac:27:b7:b1:d1:c6:02:55:
         c3:55:53:fb:01:cc:2e:ca:43:65:82:0e:8e:fb:50:49:4c:d0:
         a9:c2:72:28:44:7f:6b:ad:c2:9e:45:08:55:d8:90:6e:76:35:
         d6:3a:37:2a:03:69:4f:21:02:cb:a0:13:b1:e7:73:2e:7f:aa:
         fd:cd:20:6f:5c:62:72:42:19:41:7b:09:cc:28:18:69:fe:7e:
         71:1a:81:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org