Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C0_52l6Unws9P172fjv7gu8ZqPc.roa
File:                     C0_52l6Unws9P172fjv7gu8ZqPc.roa (raw, json)
Hash identifier:          H1IJLsWFsegOM2H0R4dYHJeAl/rr9A7OqfgrELQJsSY=
Subject key identifier:   0B:4F:F9:DA:5E:94:9F:0B:3D:3F:5E:F6:7E:3B:FB:82:EF:19:A8:F7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       35C9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C0_52l6Unws9P172fjv7gu8ZqPc.roa
Signing time:             Mon 10 Feb 2025 13:53:41 +0000
ROA not before:           Mon 10 Feb 2025 13:53:41 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.193.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13769 (0x35c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:53:41 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0B4FF9DA5E949F0B3D3F5EF67E3BFB82EF19A8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:9b:71:0f:9d:47:1a:6b:c3:ca:77:b4:f6:
                    76:a6:01:67:74:a6:5e:d3:10:46:3d:ac:ed:34:7f:
                    d4:07:91:00:a7:01:8c:61:a8:01:3b:c5:e2:27:eb:
                    f6:e7:ee:65:a3:ec:20:ab:18:55:59:bb:f9:78:24:
                    68:38:6f:f7:a2:13:01:32:dc:7a:9d:13:6b:9a:94:
                    16:61:c9:8c:01:92:70:ea:f2:e2:89:6b:82:af:37:
                    04:06:8c:d1:0a:e9:15:29:6b:e0:f0:90:4c:47:61:
                    d1:64:9b:95:52:ec:cb:16:74:03:25:ba:fa:f0:85:
                    e8:3a:3f:29:8e:44:93:9a:ec:85:59:99:80:85:98:
                    90:a7:85:ac:be:75:ef:9a:0d:ec:20:1b:f0:99:a0:
                    55:ab:77:9c:e9:cc:29:d3:0c:6c:9f:7b:83:aa:36:
                    91:5f:c8:9c:a8:af:92:83:d8:4b:c0:10:7b:a9:f2:
                    3c:21:8f:75:48:1f:9f:e1:75:15:e4:c6:8c:62:c9:
                    cb:94:85:59:cc:53:b4:6d:af:8b:91:0e:81:60:36:
                    ed:0b:a6:43:2d:62:8f:43:75:7c:22:a1:59:aa:6e:
                    d8:1a:8d:50:d5:a7:2a:df:8c:d3:18:41:65:91:3e:
                    f5:bc:b9:4a:ba:6d:f2:4b:99:d3:41:23:c6:08:aa:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4F:F9:DA:5E:94:9F:0B:3D:3F:5E:F6:7E:3B:FB:82:EF:19:A8:F7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C0_52l6Unws9P172fjv7gu8ZqPc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:7b:c4:ae:c8:01:de:cb:f8:0e:12:53:de:17:e1:d3:20:54:
         cf:f7:b4:80:e9:cc:78:a3:5d:30:77:cb:21:70:0d:c9:b4:d2:
         88:88:63:6b:3a:6a:f5:b4:d3:3a:00:fd:57:53:1c:27:51:58:
         cf:e4:02:e1:f9:be:1b:a7:4c:d7:7e:03:fe:c6:96:5b:c3:c6:
         ff:de:7b:64:96:2b:5d:47:b7:1f:d6:50:d4:8b:01:82:55:10:
         91:2f:ad:1c:01:5d:15:08:dd:b0:e0:be:90:8b:f4:57:02:38:
         a1:c8:2f:da:17:a4:ff:14:42:2d:9d:8b:88:ac:a0:53:db:93:
         78:b1:fa:09:6f:40:60:b6:36:be:af:1a:83:df:fe:2e:0c:13:
         d0:dd:87:05:09:6d:7f:81:df:3e:2f:19:33:fe:8e:37:23:c2:
         2a:09:44:35:ae:7e:d2:92:e4:6a:ef:17:64:17:51:06:c9:06:
         f0:f8:2b:86:61:ab:72:0c:0e:e3:dc:17:9f:de:68:68:2c:3d:
         69:cc:c4:c7:3c:3d:b2:70:3d:74:38:8a:2d:2a:44:af:e5:b4:
         90:78:4f:8f:02:3a:45:09:6a:58:d1:38:1a:72:5c:2c:80:df:
         33:66:9b:d3:98:ce:79:7b:e8:96:7c:ba:2d:40:63:c1:e7:42:
         ef:16:e3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:32 2025 by rpki-client