Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Myap-u_QwV0Q5VIVv7mxNiFC7a8.roa
File:                     Myap-u_QwV0Q5VIVv7mxNiFC7a8.roa (raw, json)
Hash identifier:          9zlCDjIpzZEAkuCoAWSAlFvNaYcSdUoe381gjfRB4Ls=
Subject key identifier:   33:26:A9:FA:EF:D0:C1:5D:10:E5:52:15:BF:B9:B1:36:21:42:ED:AF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       312F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Myap-u_QwV0Q5VIVv7mxNiFC7a8.roa
Signing time:             Mon 26 Aug 2024 05:30:12 +0000
ROA not before:           Mon 26 Aug 2024 05:30:12 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        211.76.124.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 00:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12591 (0x312f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:12 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=3326A9FAEFD0C15D10E55215BFB9B1362142EDAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:4d:0f:36:91:26:42:43:65:ea:b7:5b:ec:
                    6b:50:21:d2:9b:bb:b6:84:1a:cc:c0:20:9b:fd:cb:
                    9c:6d:e8:f1:25:97:56:82:0f:2e:23:1f:f3:83:19:
                    9b:b0:49:81:ad:b1:0b:f9:a0:f1:9b:e7:b3:62:b7:
                    c7:44:e7:a7:cb:c5:d0:b4:6a:a7:54:ea:d4:5a:cc:
                    f1:a6:fc:d7:fb:fb:68:c7:6e:19:ab:6c:6d:30:9d:
                    5d:63:9e:39:7a:43:78:0c:63:67:30:df:d1:30:57:
                    12:a1:73:14:55:ae:27:c9:7b:51:ce:62:2d:c4:eb:
                    ad:70:70:30:0b:99:37:9a:0c:db:35:cc:4a:67:02:
                    d4:10:e1:bf:ff:00:fc:44:4e:2e:ae:26:46:c3:23:
                    03:e0:fc:1f:8b:23:33:04:dd:a3:c6:6a:bb:09:84:
                    1b:c4:5a:30:81:e4:ac:43:a8:81:7c:31:3c:b3:44:
                    2a:2e:bb:79:47:ab:9c:62:1a:3e:d4:d2:6a:70:bb:
                    97:41:ad:ab:6c:21:aa:81:05:07:8c:b0:c6:12:74:
                    55:aa:57:ed:70:c6:3b:93:a5:5c:0c:3d:1b:63:7e:
                    f8:73:4e:c0:99:93:6b:62:5d:a1:de:e4:81:fe:a4:
                    de:70:87:b3:e0:e8:fd:5a:ac:37:bd:66:e6:84:93:
                    57:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:26:A9:FA:EF:D0:C1:5D:10:E5:52:15:BF:B9:B1:36:21:42:ED:AF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Myap-u_QwV0Q5VIVv7mxNiFC7a8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.124.0/25

    Signature Algorithm: sha256WithRSAEncryption
         ac:c4:71:0e:06:f1:8c:07:9c:ae:3a:e9:c3:22:d5:9e:b8:a6:
         b0:b3:7f:cc:15:f6:c2:b6:22:da:c0:4c:23:cd:54:4d:67:1d:
         a2:27:5a:ea:a2:cb:c1:c6:a0:1e:0a:b9:54:9c:bd:41:e1:fe:
         ba:b7:87:b0:69:35:1e:9b:c7:6a:4b:2b:de:9b:07:3d:34:80:
         d1:ba:5d:15:e2:08:0d:bc:fb:2c:9c:47:38:94:5c:86:44:29:
         16:fb:f1:8a:9e:f8:0f:b7:12:2e:d5:3c:c2:d5:b2:62:9a:8d:
         34:48:78:8d:df:28:df:d2:1c:cf:63:4f:ee:3b:5e:73:09:77:
         2a:13:28:0e:5e:6a:d8:ec:27:d1:3b:a5:a0:08:3b:8c:3e:8c:
         c9:69:a4:08:ec:0b:ae:f9:3f:73:32:e8:76:20:6e:63:34:1d:
         6d:8b:a1:ff:3e:72:0d:3f:61:29:30:90:3e:df:5b:36:66:e0:
         37:fd:67:76:d5:db:3d:6e:fa:c1:c8:ed:27:81:3c:9f:36:f7:
         70:97:a2:44:fd:99:43:68:eb:16:81:8b:bd:31:c2:f4:16:12:
         ff:bd:45:52:34:a1:f6:ea:e6:16:95:72:90:00:fc:77:67:b4:
         29:72:02:30:ac:51:42:d6:62:e4:10:cc:7c:eb:17:b3:c8:9b:
         bf:49:78:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org