Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CsZg1CB4pMpgd16B_zMgabcFJes.roa
File:                     CsZg1CB4pMpgd16B_zMgabcFJes.roa (raw, json)
Hash identifier:          /E/NN5OGYL3duGzgiNCOl6rz0wPMvToS1gYMNkL6sSg=
Subject key identifier:   0A:C6:60:D4:20:78:A4:CA:60:77:5E:81:FF:33:20:69:B7:05:25:EB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3253
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CsZg1CB4pMpgd16B_zMgabcFJes.roa
Signing time:             Mon 26 Aug 2024 05:31:32 +0000
ROA not before:           Mon 26 Aug 2024 05:31:32 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.194.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12883 (0x3253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:31:32 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0AC660D42078A4CA60775E81FF332069B70525EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2e:6d:f1:66:20:3a:66:d1:8f:ef:c7:6f:73:
                    d4:cb:df:e9:f5:3f:22:96:c3:9f:2b:3b:43:17:7d:
                    3f:df:47:11:79:a1:ff:49:a6:c2:32:0f:01:6f:8e:
                    e1:05:1a:a4:32:8c:3a:a5:9a:ce:cd:89:9a:e8:db:
                    cb:b2:56:c7:1c:ea:3c:8a:0a:15:9d:ed:92:65:90:
                    18:87:46:e4:76:f4:75:6d:bb:b1:13:e8:b8:ba:19:
                    ec:77:ea:66:ab:f4:c6:ce:5c:1f:c5:bb:19:b7:7a:
                    1e:ce:af:db:cc:3a:e1:34:b2:aa:47:a6:fe:27:dc:
                    25:af:a4:3a:88:6b:d8:52:db:cf:2b:c2:98:b8:78:
                    f2:8a:bc:1b:50:de:ab:75:8f:11:61:d7:12:41:46:
                    44:e8:94:dc:35:1a:2a:36:89:e2:aa:8a:14:8c:f3:
                    e7:31:50:fa:ec:4d:8a:f9:ac:3a:ac:92:49:8c:e2:
                    6e:ea:b5:8c:81:d0:fb:e1:76:94:e7:ca:39:d6:f9:
                    37:ea:82:e1:62:2c:24:ef:c0:be:05:d4:3b:88:e6:
                    9d:01:b3:da:ff:4b:aa:4a:78:da:11:f2:ac:27:29:
                    3c:9a:ef:1d:c0:9b:de:5f:0b:51:84:ff:a8:51:11:
                    cd:c7:54:9f:0b:9d:e7:4a:47:9f:a9:5f:43:07:73:
                    26:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C6:60:D4:20:78:A4:CA:60:77:5E:81:FF:33:20:69:B7:05:25:EB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CsZg1CB4pMpgd16B_zMgabcFJes.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:25:c3:88:97:31:89:46:0c:1f:60:b2:ea:2e:b8:36:05:bb:
         75:ff:fa:86:c3:62:d3:40:68:4c:71:b5:e1:c4:74:93:7f:c1:
         42:b5:fd:db:0e:fd:20:c0:8c:62:79:69:87:0d:3a:1b:73:28:
         bd:63:2d:d4:da:be:93:b3:e0:77:e8:30:05:eb:b1:b9:7d:56:
         18:82:4b:44:ad:3e:b2:56:df:3c:37:bb:21:12:b1:96:6a:5a:
         a7:df:93:fb:a9:e2:de:4d:0c:e9:c5:4b:ec:19:00:43:db:20:
         a5:30:b5:27:bc:c8:71:88:73:cc:32:b1:84:e6:51:f1:93:14:
         8f:c3:78:56:e6:b5:72:46:86:52:fc:70:91:2c:cd:b8:3f:8c:
         db:6f:1f:e7:86:9e:af:ca:83:34:a0:5e:61:ce:e5:3c:8e:a1:
         6d:d1:29:65:e3:67:e8:dc:f8:c7:e9:49:c1:77:8b:f8:58:23:
         d6:63:93:e7:90:6d:70:8a:5f:37:12:6b:28:c8:3d:1a:9d:2a:
         f9:7f:d0:1d:4e:fb:11:99:e2:00:4d:33:51:ff:35:02:28:04:
         21:9e:3c:63:cb:bf:95:eb:b6:5c:21:ea:53:70:3c:9b:7f:46:
         9b:e9:c1:4d:8f:f7:18:d7:76:6a:f1:53:d7:c8:a2:63:5b:c1:
         34:f9:5e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:55 2024 by rpki-client on console-fra.rpki-client.org