Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FutGuuG6ezTgkrLWmgTj7svsgPo.roa
File:                     FutGuuG6ezTgkrLWmgTj7svsgPo.roa (raw, json)
Hash identifier:          m6kkxHvi+FOv7CO3bhPXtdGgq3R9ETBLNsi9dcs0gq4=
Subject key identifier:   16:EB:46:BA:E1:BA:7B:34:E0:92:B2:D6:9A:04:E3:EE:CB:EC:80:FA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       315F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FutGuuG6ezTgkrLWmgTj7svsgPo.roa
Signing time:             Mon 26 Aug 2024 05:30:24 +0000
ROA not before:           Mon 26 Aug 2024 05:30:24 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        118.233.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12639 (0x315f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:24 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=16EB46BAE1BA7B34E092B2D69A04E3EECBEC80FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:9e:b0:29:18:8e:e7:7e:9d:b1:68:2e:83:
                    c1:24:84:17:2d:3c:d6:eb:a5:43:c2:a3:c2:f5:8f:
                    97:f2:8a:78:2d:31:91:a1:75:f5:1e:f7:70:25:4b:
                    d4:56:de:d6:0d:6e:f3:ff:f1:ab:5a:ca:1d:58:e7:
                    0b:8b:02:c7:5a:54:4a:e4:6b:ec:f0:01:60:00:de:
                    5b:1d:24:ee:d2:60:00:aa:24:d0:6f:3f:01:88:15:
                    4f:4a:6c:0d:92:f4:96:86:63:c3:b4:8f:bc:63:e6:
                    54:5c:72:f7:6f:e6:1b:62:f6:38:6e:07:30:b8:86:
                    c7:e2:9a:72:a6:31:b6:fc:6d:d7:74:df:bb:45:7d:
                    98:30:ee:ea:4e:21:5d:71:95:fb:a6:28:08:eb:84:
                    8c:48:b0:c5:d6:02:22:80:75:2e:2d:90:bd:79:3f:
                    d8:20:3b:ff:aa:77:e0:62:dc:1f:9c:3c:0a:83:42:
                    f9:73:9a:c8:72:25:1f:24:ab:ee:8d:95:98:48:8f:
                    43:f0:ed:33:a8:4c:a4:59:33:ee:7d:13:38:a4:43:
                    0f:0c:e6:eb:60:fd:a7:dd:75:c9:38:7d:bf:55:15:
                    7f:31:6c:bb:6c:88:17:3f:e8:6f:72:fc:4d:a8:6b:
                    9d:1e:0e:84:f5:a3:31:37:33:16:25:09:5d:f1:07:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EB:46:BA:E1:BA:7B:34:E0:92:B2:D6:9A:04:E3:EE:CB:EC:80:FA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FutGuuG6ezTgkrLWmgTj7svsgPo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:54:2a:7b:9b:cd:85:2d:e9:70:f4:6c:2b:3f:c5:13:36:5e:
         a0:30:88:1d:9c:e0:a6:37:55:0a:50:f7:eb:23:cb:e4:6e:55:
         a1:44:bc:cd:b4:af:cf:67:e0:b8:87:a2:16:9b:bb:f9:5a:1f:
         1d:fb:80:b1:0d:a5:4a:17:1d:79:57:0e:6c:64:2d:d4:6b:ee:
         85:02:9d:5d:84:b0:0d:7f:8b:1b:4d:4d:56:60:7a:97:b1:6b:
         09:ac:f1:ab:bf:b8:9a:85:aa:21:80:5a:31:11:4c:9d:73:0d:
         8b:c8:63:73:b3:f1:4f:85:56:70:e1:5f:e3:e5:20:02:9d:7f:
         9e:93:06:a0:1a:7f:3c:98:6f:8a:3c:07:2c:a4:79:b2:62:e9:
         b4:81:8e:29:5c:01:ed:43:c2:9a:9b:f5:bb:c9:9a:50:f3:f1:
         e2:1e:14:16:1c:d7:8f:12:2a:da:f9:af:89:55:31:6f:3a:93:
         36:0e:d9:84:da:dd:d3:e9:59:51:8f:86:1b:92:57:99:28:4a:
         14:66:78:c4:2c:e9:fd:4e:d3:6f:d2:b2:f0:f5:72:5b:7f:56:
         51:b4:87:4d:79:10:51:4a:17:33:74:7a:aa:21:f1:9f:0c:f9:
         4f:81:e6:a2:82:9f:8e:a9:9d:e8:87:16:be:93:69:f7:bd:de:
         55:f8:be:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:29:51 2024 by rpki-client on console-fra.rpki-client.org