Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IMRUFs5bwkzGA4skI1WBILoczb8.roa
File:                     IMRUFs5bwkzGA4skI1WBILoczb8.roa (raw, json)
Hash identifier:          5Ng/s6krr3EyHEIZm8UH3JCD7Kvz9C7Bmv75gmAnwWc=
Subject key identifier:   20:C4:54:16:CE:5B:C2:4C:C6:03:8B:24:23:55:81:20:BA:1C:CD:BF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       30D3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IMRUFs5bwkzGA4skI1WBILoczb8.roa
Signing time:             Mon 26 Aug 2024 05:29:51 +0000
ROA not before:           Mon 26 Aug 2024 05:29:51 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18429
IP address blocks:        118.232.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Nov 2024 07:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12499 (0x30d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:29:51 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=20C45416CE5BC24CC6038B2423558120BA1CCDBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e2:48:10:45:61:28:69:9a:20:77:76:9d:0b:
                    4a:40:31:6c:d2:22:94:75:04:3e:5f:92:b0:6e:f3:
                    13:69:94:dc:29:45:f0:4d:9a:7b:cb:36:65:56:42:
                    bd:f6:87:41:c0:1a:59:72:05:bb:77:a7:1e:ba:3c:
                    03:fe:01:3a:9f:e1:72:61:1e:25:06:ae:74:dd:75:
                    60:0b:6e:94:b6:c5:dc:f2:bf:41:09:0d:9a:40:33:
                    2c:6d:a8:a6:de:f2:7c:5a:b3:25:f9:27:ec:f1:ce:
                    2f:b6:61:91:33:fb:99:cb:61:b5:63:3d:12:59:d8:
                    66:4f:87:f1:7e:c7:c3:f1:bb:48:74:44:f9:2f:74:
                    51:d7:67:74:45:0f:d8:9d:61:75:cd:b5:6b:c9:ac:
                    38:14:06:48:e4:ef:5f:6d:23:54:ea:25:f3:a8:65:
                    1c:0c:7b:50:a8:2e:22:76:6d:f7:96:08:46:a2:8d:
                    a2:d6:a0:15:3f:41:3f:ba:57:13:83:71:80:a5:88:
                    d3:f1:07:d0:9b:7c:09:42:6b:88:68:99:2f:ad:5e:
                    57:36:85:c5:36:8b:20:ed:3d:0a:19:2f:75:ec:c0:
                    fa:d0:a6:e8:53:1b:ce:c1:f2:15:dc:ea:27:86:ca:
                    dc:19:80:b8:99:34:29:8b:c3:92:df:97:40:e5:65:
                    06:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C4:54:16:CE:5B:C2:4C:C6:03:8B:24:23:55:81:20:BA:1C:CD:BF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IMRUFs5bwkzGA4skI1WBILoczb8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:ca:e2:cb:a8:9d:fa:42:8f:8e:98:37:87:cf:86:62:8d:d3:
         65:e9:78:97:dc:16:96:f1:03:1b:f6:ef:67:e4:28:94:f8:ca:
         95:83:38:ae:51:4a:38:6e:6c:8f:f1:c4:05:44:d6:57:a9:e0:
         9b:c6:46:e5:41:76:15:55:17:a7:d5:e2:17:c6:90:e8:2f:c3:
         f3:ff:2d:67:89:dc:16:08:96:78:86:4e:ab:78:32:3c:9c:7a:
         7b:ff:c5:de:67:16:17:80:ae:cf:ce:28:5a:85:5b:6f:50:e0:
         aa:1c:ff:b9:c5:ab:14:a7:c2:ac:34:34:8d:a2:d0:13:bd:3b:
         42:bc:77:ca:2b:bc:d6:93:c5:31:da:48:82:37:77:b7:7d:98:
         db:90:87:f2:7c:9a:47:8f:42:e2:6d:90:e1:45:04:92:0b:53:
         bc:6f:32:1c:85:e5:e6:bc:3d:b2:71:55:95:f2:96:80:28:c8:
         7d:be:92:ae:3c:40:07:42:9f:60:3b:13:df:98:19:91:51:14:
         4e:bd:26:62:79:5b:92:29:6b:7f:2f:dc:81:ef:15:0b:1c:ca:
         3d:16:c1:3b:99:0b:17:4f:ce:b7:77:af:da:fe:df:fd:48:b5:
         7b:90:f0:f3:9f:10:04:97:12:b9:05:56:53:88:98:cb:89:28:
         17:fd:36:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 06:09:26 2024 by rpki-client on console-ams.rpki-client.org