Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ISPelEE_gScNrLTc0hqHsF5uhds.roa
File:                     ISPelEE_gScNrLTc0hqHsF5uhds.roa (raw, json)
Hash identifier:          DsddtpzBnKLhvl40Y99UmWZbMPu3FrFnxC2r1+QhBhQ=
Subject key identifier:   21:23:DE:94:41:3F:81:27:0D:AC:B4:DC:D2:1A:87:B0:5E:6E:85:DB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       29F0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ISPelEE_gScNrLTc0hqHsF5uhds.roa
Signing time:             Fri 01 Sep 2023 10:07:17 +0000
ROA not before:           Fri 01 Sep 2023 10:07:17 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.194.204.64/27 maxlen: 27

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10736 (0x29f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:17 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=2123DE94413F81270DACB4DCD21A87B05E6E85DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:f2:82:7b:3f:b9:54:0d:59:fd:08:52:57:
                    bb:74:ca:1f:b4:b5:51:c3:44:08:af:d9:9c:4b:94:
                    ca:13:e7:67:29:b5:16:11:72:f7:96:8b:9a:30:41:
                    c3:05:38:0f:48:28:84:6e:4c:51:27:21:c5:bd:8a:
                    56:6b:01:9c:6e:05:d4:c0:cd:22:bb:22:f8:b1:80:
                    70:bf:ef:6b:61:e1:3e:0e:bd:3b:40:7c:6f:0f:00:
                    ac:10:cd:fb:e0:2f:3c:54:81:a0:b9:6c:2e:f4:f1:
                    7d:04:6a:02:f8:f0:34:a5:47:d7:b5:c3:63:df:13:
                    38:ec:7f:33:72:d3:70:64:7c:0d:3f:f0:15:25:03:
                    01:03:3f:83:5a:ee:52:f0:78:44:2e:fb:32:13:22:
                    2d:4b:7f:27:7e:e9:c5:17:a1:cf:ad:a7:bb:7a:21:
                    b6:b9:b5:58:c2:11:ae:15:83:e4:aa:df:fd:30:2b:
                    6c:f5:c7:41:a1:67:55:d3:05:62:56:17:e7:00:d0:
                    f8:08:a2:b1:b8:3e:09:e8:61:c6:54:39:0f:f3:09:
                    82:6c:89:80:be:36:8b:7b:ff:6f:18:51:b9:4f:3d:
                    1b:e9:c9:e7:93:9d:61:9c:f1:36:53:03:81:d7:74:
                    98:b1:41:27:fa:57:dc:70:4c:9b:f1:9c:c0:10:54:
                    9b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:23:DE:94:41:3F:81:27:0D:AC:B4:DC:D2:1A:87:B0:5E:6E:85:DB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ISPelEE_gScNrLTc0hqHsF5uhds.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.204.64/27

    Signature Algorithm: sha256WithRSAEncryption
         79:8d:e1:19:4b:e0:f5:6b:f5:29:05:d6:2f:89:53:08:c4:0a:
         1b:be:26:0c:08:f2:a5:f6:fe:5f:15:e9:3d:dd:86:04:d6:6e:
         4b:b8:b2:a9:85:69:33:c2:99:d6:80:e6:41:a8:9e:25:15:cd:
         ec:fe:12:b1:cb:42:89:5b:02:d0:15:40:3e:fe:c9:25:c8:d1:
         b1:90:b9:5f:71:b8:74:1f:d6:d6:fe:9f:b9:d2:c0:6a:1b:65:
         8d:52:e5:64:bb:03:ec:b6:71:6a:fd:d7:5f:89:bc:9b:92:0e:
         c2:de:c4:d6:fe:43:31:22:4e:8e:45:87:59:44:7d:e9:52:e7:
         df:08:72:c3:07:f6:bd:b8:f4:21:5c:ed:bb:92:82:c6:f8:ec:
         4b:cb:36:48:c1:ce:92:0b:ac:57:40:8e:58:78:f0:04:93:75:
         5b:23:22:64:dc:27:8a:74:58:0d:ba:f3:36:ab:28:1d:a7:fc:
         0a:c0:ad:1e:f9:e0:89:bc:16:0f:24:4b:5f:b3:c6:b9:32:2c:
         46:7d:af:9e:7c:b4:72:77:9a:79:3c:c6:fb:2b:bf:eb:41:46:
         83:98:69:e2:10:55:a6:c1:b6:3e:91:db:3f:39:92:f0:bb:02:
         22:4a:af:49:8a:61:fb:87:20:5e:9a:36:28:74:0f:43:84:c8:
         c4:69:11:ad
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICKfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIxMjNERTk0NDEzRjgx
MjcwREFDQjREQ0QyMUE4N0IwNUU2RTg1REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBafKCez+5VA1Z/QhSV7t0yh+0tVHDRAiv2ZxLlMoT52cptRYR
cveWi5owQcMFOA9IKIRuTFEnIcW9ilZrAZxuBdTAzSK7IvixgHC/72th4T4OvTtA
fG8PAKwQzfvgLzxUgaC5bC708X0EagL48DSlR9e1w2PfEzjsfzNy03BkfA0/8BUl
AwEDP4Na7lLweEQu+zITIi1Lfyd+6cUXoc+tp7t6Iba5tVjCEa4Vg+Sq3/0wK2z1
x0GhZ1XTBWJWF+cA0PgIorG4PgnoYcZUOQ/zCYJsiYC+Not7/28YUblPPRvpyeeT
nWGc8TZTA4HXdJixQSf6V9xwTJvxnMAQVJsJAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUISPelEE/gScNrLTc0hqHsF5uhdswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lTUGVsRUVfZ1NjTnJMVGMw
aHFIc0Y1dWhkcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQV7
wsxAMA0GCSqGSIb3DQEBCwUAA4IBAQB5jeEZS+D1a/UpBdYviVMIxAobviYMCPKl
9v5fFek93YYE1m5LuLKphWkzwpnWgOZBqJ4lFc3s/hKxy0KJWwLQFUA+/sklyNGx
kLlfcbh0H9bW/p+50sBqG2WNUuVkuwPstnFq/ddfibybkg7C3sTW/kMxIk6ORYdZ
RH3pUuffCHLDB/a9uPQhXO27koLG+OxLyzZIwc6SC6xXQI5YePAEk3VbIyJk3CeK
dFgNuvM2qygdp/wKwK0e+eCJvBYPJEtfs8a5MixGfa+efLRyd5p5PMb7K7/rQUaD
mGniEFWmwbY+kds/OZLwuwIiSq9JimH7hyBemjYodA9DhMjEaRGt
-----END CERTIFICATE-----
Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org