Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NtGj_n42wHNP8bLRbfoFvKScLfs.roa
File:                     NtGj_n42wHNP8bLRbfoFvKScLfs.roa (raw, json)
Hash identifier:          huM9Ww1IQz2qhkp8WQKxndqH/zLGxZIos+z4Yly2SP4=
Subject key identifier:   36:D1:A3:FE:7E:36:C0:73:4F:F1:B2:D1:6D:FA:05:BC:A4:9C:2D:FB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2820
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NtGj_n42wHNP8bLRbfoFvKScLfs.roa
Signing time:             Fri 01 Sep 2023 10:04:58 +0000
ROA not before:           Fri 01 Sep 2023 10:04:58 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        123.195.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10272 (0x2820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:04:58 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=36D1A3FE7E36C0734FF1B2D16DFA05BCA49C2DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0f:0a:be:35:ff:46:98:35:e9:8f:44:e1:45:
                    80:55:45:be:2c:6e:99:9a:3f:76:1f:ec:cb:db:7c:
                    c8:76:d2:12:3d:61:12:7e:3c:5c:f7:7e:ca:aa:31:
                    41:89:34:78:10:8f:2c:0e:97:2e:a4:f1:ce:ea:aa:
                    60:be:42:0a:7a:d6:f1:b9:58:b9:6c:13:23:98:97:
                    b9:f9:10:d5:8c:ab:c1:be:46:5a:1d:34:9f:4e:0b:
                    d0:3c:49:7e:cd:b4:0d:0e:65:af:25:5e:47:79:d9:
                    80:57:f2:ad:b9:25:22:da:55:b0:dd:7f:df:bc:fc:
                    9a:a2:d4:5f:bc:6b:3b:e9:23:9f:50:e5:0c:ee:ef:
                    cd:29:02:b6:7a:87:03:0f:12:fc:9b:2d:16:ab:ad:
                    78:32:4a:57:14:d0:e6:68:85:2a:b4:4a:08:80:6b:
                    2d:44:c5:c8:f4:4c:3c:9b:a4:98:c4:6c:98:ea:ba:
                    7d:77:63:1e:ec:90:ff:ad:41:04:7d:f3:7e:d6:41:
                    44:c2:ad:87:8e:48:42:38:ad:08:dd:02:f6:8e:1a:
                    0b:78:8c:a7:6b:94:b5:b0:7d:27:ba:86:89:26:9f:
                    a2:18:51:e0:2f:64:cf:04:b1:f3:54:75:14:63:d7:
                    a7:38:52:00:74:dc:03:ef:df:2c:52:43:b0:84:0f:
                    5a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D1:A3:FE:7E:36:C0:73:4F:F1:B2:D1:6D:FA:05:BC:A4:9C:2D:FB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NtGj_n42wHNP8bLRbfoFvKScLfs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:54:42:e1:ea:42:47:82:e1:32:35:6b:20:32:2b:92:23:bf:
         2b:35:da:ca:c9:01:7c:d9:54:48:3c:24:d6:98:57:3f:d8:e7:
         db:5b:86:7b:63:6c:9f:cb:19:ee:0f:43:76:66:6a:c5:19:d2:
         72:c3:16:55:07:0a:5a:b4:85:59:20:dc:e8:42:64:3c:de:14:
         40:5d:ca:a1:83:29:f8:26:ee:8c:c7:e8:1c:b2:f6:51:ac:6c:
         47:d1:a0:b1:04:cd:25:30:0d:56:87:a4:28:e9:82:4b:b3:eb:
         ac:01:21:cf:49:7a:38:d4:55:0c:78:f6:3e:47:e9:be:7e:d0:
         04:7f:6e:0a:fa:27:e5:11:5e:bd:3f:ac:b9:98:8c:c5:01:f0:
         c4:a6:69:f5:0e:88:6e:16:4a:1a:42:65:8f:f5:ff:f5:fb:99:
         43:30:c4:a0:0f:c9:47:83:99:f9:9f:76:1f:3d:40:8b:3a:c9:
         15:2f:8a:69:2a:48:1c:f5:c4:0e:df:16:9e:38:8b:52:a8:8d:
         47:05:55:49:d6:b9:b5:36:ff:0c:78:26:40:a6:8b:92:2b:aa:
         75:9a:69:4b:c2:34:bf:1b:74:59:88:fd:e0:13:69:db:eb:8e:
         c9:aa:3f:c7:31:32:5a:f5:cf:c8:12:67:87:2c:46:3b:a3:7e:
         d1:4d:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org