Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J-22wcXkqj-deJdBJxXnSq9IApw.roa
File:                     J-22wcXkqj-deJdBJxXnSq9IApw.roa (raw, json)
Hash identifier:          ozD4dp7umLCEtUEowkAqzN/kdYliDXpiXxKSqY4pURo=
Subject key identifier:   27:ED:B6:C1:C5:E4:AA:3F:9D:78:97:41:27:15:E7:4A:AF:48:02:9C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       300F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J-22wcXkqj-deJdBJxXnSq9IApw.roa
Signing time:             Mon 26 Aug 2024 05:29:06 +0000
ROA not before:           Mon 26 Aug 2024 05:29:06 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.192.120.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 00:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12303 (0x300f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:29:06 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=27EDB6C1C5E4AA3F9D7897412715E74AAF48029C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:b7:1e:8e:44:26:86:e5:cd:a4:b4:78:89:
                    73:d8:f2:38:7f:5a:4d:69:8e:63:05:4c:b7:b0:17:
                    34:c8:f8:60:a5:ce:9c:9d:db:da:f6:07:57:aa:dd:
                    c8:5d:bd:2b:d2:88:3a:bb:0f:04:82:49:fe:35:37:
                    97:b6:73:76:cc:e6:10:fc:11:7f:8a:84:3a:22:8d:
                    87:b1:d0:6a:a4:7a:f3:6f:3d:46:35:4d:3e:08:69:
                    0b:82:b9:ee:92:3a:57:c2:4e:ed:3e:fb:7d:a8:f3:
                    37:c5:5e:78:93:63:d2:e5:c5:e3:9a:9d:2e:26:2b:
                    6a:41:e7:5c:60:5c:63:5c:fe:57:34:74:3e:e7:fa:
                    aa:51:15:65:8f:7e:ed:bd:e2:2d:c1:f9:b0:61:a8:
                    e3:41:ac:f0:d8:24:df:ff:4e:cf:ca:19:62:fb:c8:
                    51:6e:ca:fa:54:d0:39:27:6b:dc:ae:b9:e7:98:37:
                    77:80:69:b9:7e:ea:b7:94:55:96:cc:64:bc:01:57:
                    29:ee:96:6e:bc:62:28:13:0a:4d:ba:7e:60:b0:85:
                    f9:61:b1:cc:2f:8a:eb:89:39:30:11:82:79:d6:c6:
                    92:18:e2:05:c9:11:7e:1b:3b:13:f4:4b:0c:fa:ae:
                    83:e2:0b:c1:71:be:7d:cd:cd:df:29:da:0d:ed:aa:
                    c6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:ED:B6:C1:C5:E4:AA:3F:9D:78:97:41:27:15:E7:4A:AF:48:02:9C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J-22wcXkqj-deJdBJxXnSq9IApw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:38:c5:0a:a5:46:ae:99:00:93:f1:1c:4e:31:fb:49:8a:d6:
         25:26:f4:1d:aa:28:ef:52:0a:ab:da:8b:35:81:56:c7:54:bc:
         dd:12:03:1f:3d:b1:ab:7a:33:fd:a0:73:a9:da:37:f2:1f:d0:
         90:0d:38:54:2c:2f:27:19:74:f9:aa:96:89:d9:1f:78:1a:f2:
         1c:d6:f0:3b:85:56:61:46:48:06:4e:7f:cb:24:40:5d:2b:dc:
         cc:3f:ed:47:d2:6f:c9:c6:e0:50:92:54:64:5f:03:5c:fa:40:
         4d:96:4d:0c:5c:6d:d6:41:cf:47:f4:9d:82:be:65:ef:c3:9b:
         76:d3:b9:f5:a6:fa:5b:2a:38:96:4c:15:9d:88:d3:d4:2e:63:
         31:5e:58:0e:51:32:ff:51:5e:7b:f4:75:6a:da:70:b1:eb:af:
         41:23:9a:a7:1e:50:57:31:42:0d:fa:0a:14:3e:19:d0:07:8e:
         8f:2b:fe:c2:3e:1a:b9:84:4b:54:eb:9f:ae:44:c4:45:18:86:
         f8:b2:54:48:9e:ea:af:6d:0c:3e:d4:e8:01:67:87:e9:e8:36:
         66:45:be:f1:e7:09:4d:eb:22:3c:68:c5:f3:d3:5a:f9:46:f3:
         0a:f3:37:7d:73:dc:71:99:4a:0d:f1:5d:b9:31:2c:35:09:9d:
         47:9e:9d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org