Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C_5NbTX3Ph3XA5hw73oJK7maz9s.roa
File:                     C_5NbTX3Ph3XA5hw73oJK7maz9s.roa (raw, json)
Hash identifier:          PPu4ClGMASdyQWtDLtCcYi0Sp0dGCMqxeFbZFoblBqk=
Subject key identifier:   0B:FE:4D:6D:35:F7:3E:1D:D7:03:98:70:EF:7A:09:2B:B9:9A:CF:DB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       31A4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C_5NbTX3Ph3XA5hw73oJK7maz9s.roa
Signing time:             Mon 26 Aug 2024 05:30:47 +0000
ROA not before:           Mon 26 Aug 2024 05:30:47 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.195.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 00:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12708 (0x31a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:47 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0BFE4D6D35F73E1DD7039870EF7A092BB99ACFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:39:0f:64:90:25:a8:e3:7f:89:de:e8:40:
                    76:8c:0f:3d:57:1a:9e:54:f1:aa:d6:b4:a2:2a:d7:
                    27:67:19:db:ff:da:8f:15:c1:00:dc:40:ea:a8:81:
                    85:bc:bc:dd:9f:cb:7f:fc:87:7b:1a:82:76:fc:f3:
                    71:1a:5e:55:0d:9f:51:51:cf:41:84:90:1f:56:40:
                    57:12:67:eb:3b:35:7d:6f:11:13:e3:d1:fe:91:19:
                    3c:1a:a0:6c:10:c8:7a:79:c5:fd:0d:c4:fa:2b:2c:
                    d7:6a:eb:ab:d2:4f:69:28:bf:36:e3:fd:d6:2d:57:
                    61:e8:83:aa:cf:63:bc:23:d2:0d:0b:7f:2c:be:35:
                    c9:c4:10:9c:83:66:fd:5e:74:5d:23:e2:ce:df:7e:
                    63:05:f6:48:be:2b:b0:48:36:a7:98:b0:57:ed:d4:
                    a5:36:05:1d:c6:00:43:99:3b:24:78:ee:25:29:bf:
                    de:46:59:1b:ec:b1:52:01:77:6b:7c:76:50:19:2f:
                    0b:7a:91:15:82:02:f6:fc:48:db:8f:5c:48:02:f2:
                    75:e6:6f:70:95:71:41:d1:db:d5:d9:92:bf:f5:d7:
                    70:1d:a1:7a:e8:89:d5:40:f1:c5:c2:ea:e6:70:f3:
                    ae:96:b7:86:e2:3d:60:a2:b1:50:f3:98:2b:61:d2:
                    f4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FE:4D:6D:35:F7:3E:1D:D7:03:98:70:EF:7A:09:2B:B9:9A:CF:DB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C_5NbTX3Ph3XA5hw73oJK7maz9s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:62:a5:6a:54:86:f0:6c:bd:dd:cc:c4:e0:c0:89:72:70:3e:
         45:54:75:73:92:6b:ff:6a:bc:76:57:c9:73:39:8a:f0:24:bd:
         9e:ae:e3:a6:d3:6f:09:80:fb:09:14:f8:3c:e8:a1:91:f5:18:
         98:5b:a7:ec:81:e5:55:ce:42:2a:85:4d:e3:b7:f3:4b:e9:3d:
         19:aa:27:48:38:d8:31:8a:84:a2:03:ac:7d:38:85:f7:04:38:
         cc:d2:84:4c:d2:48:5f:f7:62:3f:79:79:4a:a5:bb:02:91:a7:
         35:80:51:34:61:18:93:d0:3d:dc:e1:d5:0d:3c:b6:37:ab:87:
         90:ed:51:4c:7c:c6:9f:9a:ae:bd:fd:e3:f2:f2:95:0b:1b:8e:
         39:6b:a6:be:9b:cd:c8:b3:ee:05:b2:c7:9e:a3:de:f2:e3:ce:
         0c:7e:68:a9:ca:df:2a:f1:12:6c:45:56:8c:bc:1a:80:45:9f:
         2c:ed:24:4e:2e:65:95:24:a6:e4:2d:e8:d0:70:56:97:86:98:
         af:9c:55:64:b7:1a:ae:d1:5b:5f:51:02:2a:8e:a7:ab:bf:0f:
         46:1b:b9:b6:20:b5:52:a3:8c:a2:28:3a:cc:10:16:04:d8:d8:
         f0:4b:29:e9:f6:09:7c:be:c7:04:2a:df:99:de:08:95:96:81:
         5b:13:fd:d5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMwNDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBCRkU0RDZEMzVGNzNF
MURENzAzOTg3MEVGN0EwOTJCQjk5QUNGREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuPjkPZJAlqON/id7oQHaMDz1XGp5U8arWtKIq1ydnGdv/2o8V
wQDcQOqogYW8vN2fy3/8h3sagnb883EaXlUNn1FRz0GEkB9WQFcSZ+s7NX1vERPj
0f6RGTwaoGwQyHp5xf0NxPorLNdq66vST2kovzbj/dYtV2Hog6rPY7wj0g0Lfyy+
NcnEEJyDZv1edF0j4s7ffmMF9ki+K7BINqeYsFft1KU2BR3GAEOZOyR47iUpv95G
WRvssVIBd2t8dlAZLwt6kRWCAvb8SNuPXEgC8nXmb3CVcUHR29XZkr/113AdoXro
idVA8cXC6uZw866Wt4biPWCisVDzmCth0vRTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUC/5NbTX3Ph3XA5hw73oJK7maz9swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NfNU5iVFgzUGgzWEE1aHc3
M29KSzdtYXo5cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wxQwDQYJKoZIhvcNAQELBQADggEBAJBipWpUhvBsvd3MxODAiXJwPkVUdXOSa/9q
vHZXyXM5ivAkvZ6u46bTbwmA+wkU+DzooZH1GJhbp+yB5VXOQiqFTeO380vpPRmq
J0g42DGKhKIDrH04hfcEOMzShEzSSF/3Yj95eUqluwKRpzWAUTRhGJPQPdzh1Q08
tjerh5DtUUx8xp+arr394/LylQsbjjlrpr6bzciz7gWyx56j3vLjzgx+aKnK3yrx
EmxFVoy8GoBFnyztJE4uZZUkpuQt6NBwVpeGmK+cVWS3Gq7RW19RAiqOp6u/D0Yb
ubYgtVKjjKIoOswQFgTY2PBLKen2CXy+xwQq35neCJWWgVsT/dU=
-----END CERTIFICATE-----
Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org