Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ALYdcqCn2zX1jgzzdpkddfOY0uA.roa
File:                     ALYdcqCn2zX1jgzzdpkddfOY0uA.roa (raw, json)
Hash identifier:          YEXXAV0w5ZVe6CqBwkgbSF/j1dpzdWox+rFipuonILs=
Subject key identifier:   00:B6:1D:72:A0:A7:DB:35:F5:8E:0C:F3:76:99:1D:75:F3:98:D2:E0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3125
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ALYdcqCn2zX1jgzzdpkddfOY0uA.roa
Signing time:             Mon 26 Aug 2024 05:30:09 +0000
ROA not before:           Mon 26 Aug 2024 05:30:09 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12581 (0x3125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:09 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=00B61D72A0A7DB35F58E0CF376991D75F398D2E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:fe:75:92:7e:df:1a:77:38:3d:1c:99:6a:
                    bb:64:95:79:67:5e:78:b2:d9:eb:ea:d3:f3:c7:4a:
                    33:9b:78:b3:36:e0:29:3e:bb:92:ad:65:48:b9:22:
                    91:e6:cc:ea:e4:13:31:5c:70:9c:2b:19:96:5a:61:
                    e9:cd:af:fe:c1:dd:a9:f1:a2:c3:7e:21:2e:72:65:
                    ea:85:ac:b1:67:49:5e:d3:92:c7:28:05:bb:d3:fa:
                    18:2b:bf:19:71:1e:f0:8c:5f:97:ae:10:3a:c8:ed:
                    0a:06:ac:78:f7:b5:a5:47:97:3b:3b:97:bb:b2:bd:
                    53:01:0b:87:ee:66:9d:59:d4:ac:a2:60:49:62:89:
                    0a:0a:74:c2:48:e1:d8:d6:2e:80:0a:41:ca:fc:7e:
                    9f:e9:e5:68:9b:a9:79:31:4e:b1:2a:51:69:0a:80:
                    da:06:b1:4e:5b:9c:24:98:39:a9:0c:dc:46:5c:b7:
                    bb:54:16:3e:13:ed:5f:ee:3a:a2:15:b9:c0:dd:85:
                    ac:01:0f:a8:ba:52:c7:00:30:31:22:a0:b8:42:c3:
                    13:6a:bd:1b:b7:02:53:fc:e4:ff:dd:6d:22:b5:be:
                    39:c9:11:1d:c8:0b:f0:ec:e9:f8:94:9f:38:68:9a:
                    72:1a:96:78:f2:e1:ef:c4:00:5f:2e:83:fd:05:40:
                    3f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B6:1D:72:A0:A7:DB:35:F5:8E:0C:F3:76:99:1D:75:F3:98:D2:E0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ALYdcqCn2zX1jgzzdpkddfOY0uA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:0d:23:a9:da:b7:60:56:5f:03:20:e1:cd:4e:81:ab:4d:ad:
         4b:6d:84:b4:12:05:05:fd:0f:7e:7a:a1:9f:57:47:fd:3c:a9:
         c5:9c:da:62:a3:48:9a:a6:c4:87:14:e9:87:62:5a:4c:1f:98:
         5f:4a:5e:2b:a6:f8:48:1a:e9:21:69:58:cb:b9:d7:9f:08:be:
         81:5f:f4:d9:2a:19:75:21:56:d5:32:db:ce:1c:69:35:d9:5d:
         bd:ae:59:90:ca:08:0d:d3:cd:23:bf:e8:1e:f4:60:66:5f:ff:
         62:9e:fb:8b:50:da:7a:96:9d:d0:e6:72:8e:51:55:69:f7:3c:
         23:27:cc:a3:ba:97:62:30:78:d1:ed:27:e7:43:a4:ad:22:5e:
         14:90:71:dc:3d:14:73:bb:81:5d:29:d9:e6:71:54:18:5a:d3:
         68:1f:2e:fb:4b:d2:aa:56:a8:61:c3:9d:e2:8c:8f:4e:ce:ee:
         79:b1:7c:02:19:29:ee:2b:03:9a:66:fd:e6:24:c2:b2:5b:e3:
         dc:b5:8a:3e:c5:a3:d5:48:1f:04:fa:c6:5d:1e:e5:ef:01:5b:
         d5:e6:e5:cb:bc:9e:29:03:d9:87:6a:94:2d:37:da:b4:93:d1:
         e6:e5:01:89:7d:d6:f5:4d:7a:39:ba:dc:22:ff:3d:8c:df:f4:
         96:f5:e7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 03:11:37 2024 by rpki-client on console-fra.rpki-client.org