Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FOIAdjnxKHYuu4xsWY_yJaf-7xc.roa
File:                     FOIAdjnxKHYuu4xsWY_yJaf-7xc.roa (raw, json)
Hash identifier:          ku8Aiyb0KkicpddK3bNK5mhd9z1r0WYgH5QGXVQx3sU=
Subject key identifier:   14:E2:00:76:39:F1:28:76:2E:BB:8C:6C:59:8F:F2:25:A7:FE:EF:17
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       32C7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FOIAdjnxKHYuu4xsWY_yJaf-7xc.roa
Signing time:             Mon 26 Aug 2024 05:32:00 +0000
ROA not before:           Mon 26 Aug 2024 05:32:00 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12999 (0x32c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:32:00 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=14E2007639F128762EBB8C6C598FF225A7FEEF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:a4:58:33:d1:33:0e:5b:75:b2:6e:38:a8:
                    39:13:56:6d:2f:91:6b:6b:29:12:f3:dc:e7:01:81:
                    78:95:86:e1:42:db:39:15:6d:9a:49:0e:9b:7d:c4:
                    06:98:ef:25:08:d8:de:54:58:e0:38:6f:5e:74:1a:
                    81:47:38:cc:c7:00:81:23:e2:a0:8f:89:a3:bd:f3:
                    ba:c5:51:9b:93:af:33:01:58:43:bc:ee:32:d8:e6:
                    d7:e4:95:0a:ce:e4:0a:8c:e6:e4:f3:5e:48:9e:c1:
                    af:4c:ba:ae:9c:a1:b0:ae:7e:79:4d:62:af:a5:8d:
                    30:9c:33:12:60:ab:80:1c:a7:85:de:fc:7e:7e:85:
                    a8:53:81:22:fa:a5:b3:86:4b:f3:dd:0c:23:a7:ad:
                    c9:29:13:62:64:7a:a2:50:4e:ca:16:d9:f4:64:87:
                    6c:e1:4f:35:b3:a9:6b:76:69:52:80:f2:e8:c9:13:
                    d0:eb:3e:9a:a7:fd:11:1f:bf:9f:80:5b:ba:9c:4e:
                    12:a0:d4:d1:70:ac:2b:85:4b:d4:05:82:8b:ac:4c:
                    81:8b:0f:c5:62:21:e0:b1:18:58:78:7c:42:de:64:
                    1d:26:78:f7:2c:a7:7f:30:df:96:f9:b1:af:9e:f4:
                    49:33:25:b0:d8:49:e4:9c:c8:f1:b3:7f:81:10:76:
                    8d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E2:00:76:39:F1:28:76:2E:BB:8C:6C:59:8F:F2:25:A7:FE:EF:17
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FOIAdjnxKHYuu4xsWY_yJaf-7xc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:58:ce:3f:d2:cb:30:a7:98:73:27:ee:8c:e0:28:f0:87:18:
         80:07:ee:41:57:77:61:d7:55:2e:30:db:eb:cc:85:e8:72:ca:
         76:3d:13:90:f1:c8:b3:e7:55:9d:6f:d5:0a:7c:ca:e8:7a:a6:
         d6:e3:5a:41:d8:28:59:c7:e3:d3:ce:cf:3b:eb:94:33:42:ad:
         c5:29:92:3a:ae:46:aa:9d:d7:85:a8:db:90:b7:24:0b:b4:db:
         e0:3a:f2:08:51:27:ec:70:ed:0d:88:a9:53:a4:97:a0:9e:22:
         30:b5:bd:78:f6:17:be:25:99:0e:79:a6:d8:d4:ee:b0:aa:69:
         6d:7c:9b:a6:08:cb:ca:17:1b:6d:74:1c:2d:a7:26:ec:77:dc:
         eb:a4:8f:be:f3:fc:fb:41:de:c5:d9:62:b9:e9:89:ef:81:f2:
         de:4d:4e:e4:cc:9c:3d:1e:31:fc:96:0a:61:49:42:77:0a:c3:
         41:83:a5:5c:6f:b0:70:c4:ba:20:f0:f2:51:21:b9:1d:17:53:
         d7:18:06:69:3f:55:d3:b0:98:e0:09:70:43:d0:af:32:fc:f5:
         53:55:a9:bc:35:a0:3f:7a:f2:de:15:c6:7f:09:e6:69:43:14:
         8d:26:ff:59:9a:ab:22:e8:9e:61:c0:a7:ec:af:55:73:e7:8e:
         1c:28:46:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:56 2024 by rpki-client on console-fra.rpki-client.org