Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Md_DxgNMydbBNgs_TiteCBPlVsk.roa
File:                     Md_DxgNMydbBNgs_TiteCBPlVsk.roa (raw, json)
Hash identifier:          HJaq586TVz8+QfzdLEMMNfIk0bQpmbWEOTN8Q7Ken0o=
Subject key identifier:   31:DF:C3:C6:03:4C:C9:D6:C1:36:0B:3F:4E:2B:5E:08:13:E5:56:C9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3153
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Md_DxgNMydbBNgs_TiteCBPlVsk.roa
Signing time:             Mon 26 Aug 2024 05:30:21 +0000
ROA not before:           Mon 26 Aug 2024 05:30:21 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12627 (0x3153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:21 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=31DFC3C6034CC9D6C1360B3F4E2B5E0813E556C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9a:f3:38:83:f6:1a:bb:19:d0:a9:ea:6b:37:
                    e3:cd:40:5e:a6:23:12:45:02:10:29:c7:d2:df:98:
                    58:d1:15:74:dd:fd:94:45:bc:c0:b3:5f:fc:31:e9:
                    92:c7:41:ae:e9:2c:32:45:94:e1:6f:19:38:8f:c3:
                    c3:71:3d:53:d9:d9:21:c7:18:a5:83:50:6d:8a:8e:
                    b8:a1:08:bc:02:7f:a0:88:9f:c5:03:8c:04:6f:94:
                    7a:72:a7:9d:2d:5c:3d:22:29:e6:93:a0:b1:aa:c8:
                    b1:b6:cd:25:41:ab:c7:7b:ad:b3:81:05:9b:05:03:
                    d7:cb:72:68:32:43:ec:12:5f:35:50:94:ef:69:29:
                    5b:d9:bd:36:93:30:dc:c0:54:46:66:9f:b8:21:49:
                    f6:4e:fd:8f:da:ff:2f:c7:41:83:71:88:e2:9b:a0:
                    eb:33:d1:d6:22:d7:a7:a7:f3:40:4d:ff:1a:91:46:
                    57:13:29:cf:97:71:cd:d2:96:99:4f:52:39:e5:a9:
                    0a:8c:0e:2f:b1:ff:19:30:3d:d3:73:16:e5:59:de:
                    e8:37:4e:c2:46:5b:05:bc:e0:85:05:88:1c:f0:13:
                    a1:53:5b:60:33:78:d0:02:e7:25:dc:6c:d0:a8:6c:
                    f8:e5:8d:20:71:e3:d3:47:82:5c:f6:ad:42:45:01:
                    de:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DF:C3:C6:03:4C:C9:D6:C1:36:0B:3F:4E:2B:5E:08:13:E5:56:C9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Md_DxgNMydbBNgs_TiteCBPlVsk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:fd:40:8e:57:f5:e3:2f:a2:7c:4d:c5:36:dc:36:e9:e3:d8:
         8c:d7:05:87:d3:d5:b0:97:7c:21:9c:c7:32:49:35:a5:aa:ff:
         70:be:1f:e1:50:5d:c4:7e:26:9c:2f:72:41:d8:77:cf:0d:74:
         7c:7c:b6:d3:b2:ad:de:a6:51:d1:72:4f:32:a1:44:31:70:1b:
         8c:d8:0b:ac:d0:cc:e1:2b:3b:6e:3f:2b:e8:bc:8d:fc:e3:c7:
         ea:3c:23:a1:ef:7a:c9:3c:9a:30:04:6f:13:ae:c4:6b:b9:89:
         64:22:49:2b:5d:fd:87:6b:05:1d:75:26:ac:a1:7d:26:a1:fc:
         69:3b:e4:ac:19:7b:4f:f7:83:5f:69:48:8d:11:42:25:42:9f:
         72:8b:0e:78:ea:e8:e7:87:6d:09:bc:65:02:78:26:cd:63:fd:
         f1:57:00:e5:d2:52:61:7f:d7:f9:1b:00:44:95:ae:26:76:f7:
         58:d6:47:f3:25:8f:29:cc:db:b0:36:b5:35:da:53:6b:d0:72:
         36:80:d8:f3:31:a7:31:f0:f7:10:8f:2f:21:88:d4:b7:19:25:
         11:38:55:53:b3:a7:96:48:fb:54:af:42:42:44:8f:dc:22:06:
         8a:70:71:ef:11:de:b1:11:60:c8:fb:98:dc:99:11:f3:fd:4b:
         83:c3:79:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org