Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PAdx-x0rMTAbSCxjSrZnoZ6Xwyc.roa
File:                     PAdx-x0rMTAbSCxjSrZnoZ6Xwyc.roa (raw, json)
Hash identifier:          0vl+A+xxuV8fQmJWPoIwe7ck377G9tI3w42Uo0/D7cQ=
Subject key identifier:   3C:07:71:FB:1D:2B:31:30:1B:48:2C:63:4A:B6:67:A1:9E:97:C3:27
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3136
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PAdx-x0rMTAbSCxjSrZnoZ6Xwyc.roa
Signing time:             Mon 26 Aug 2024 05:30:13 +0000
ROA not before:           Mon 26 Aug 2024 05:30:13 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        106.1.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12598 (0x3136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:13 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=3C0771FB1D2B31301B482C634AB667A19E97C327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:84:3b:7a:ae:49:b3:cf:8b:47:6a:31:ea:e0:
                    27:30:b8:73:0e:5c:fc:2f:4d:64:f8:da:94:f3:07:
                    8d:2a:b1:29:38:3f:58:95:1c:e2:ff:83:53:84:2e:
                    45:32:24:86:1d:36:f1:2a:3b:e2:75:8c:86:18:58:
                    4d:74:5d:e0:5a:5d:ec:c6:14:ae:3a:67:bf:6f:3c:
                    e6:77:d2:ae:dc:1a:d4:be:ec:88:76:f8:70:68:e2:
                    8b:e6:0b:84:a8:a5:1f:01:99:54:b3:31:b6:14:b4:
                    42:6c:ec:da:49:35:45:08:4e:2f:ed:e4:93:82:70:
                    ef:0d:06:23:fa:e4:92:98:80:61:e6:d0:d0:41:76:
                    ff:61:8c:0b:db:84:d9:da:d3:58:4c:e0:90:66:5c:
                    4c:d5:5d:69:ca:95:bf:04:4d:42:c3:e9:b8:11:93:
                    26:23:a9:db:96:df:ad:16:15:95:4c:d4:b5:cc:cb:
                    49:f4:dd:d3:56:16:13:e5:e1:6b:37:e0:b4:b7:0b:
                    13:04:eb:df:36:7d:54:9d:d3:09:b5:c4:6f:8b:06:
                    0f:23:c4:cf:0a:5a:36:2b:42:ec:58:30:24:07:9d:
                    b2:c1:d7:9b:05:e3:f3:35:8a:6a:aa:68:3d:dd:21:
                    64:b4:48:36:e9:3a:20:ee:c3:2f:3b:97:8d:db:9a:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:07:71:FB:1D:2B:31:30:1B:48:2C:63:4A:B6:67:A1:9E:97:C3:27
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PAdx-x0rMTAbSCxjSrZnoZ6Xwyc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:b1:9a:a0:f3:a8:b2:9f:de:10:60:3a:0d:f2:d3:23:e2:59:
         28:ef:b6:9c:25:36:84:05:c9:d5:7d:82:68:ba:30:48:a6:c5:
         d2:e6:e6:c7:5b:a2:76:49:b9:ff:60:2a:68:67:e2:e4:bf:e7:
         7d:28:cb:fc:09:53:0f:23:25:5e:3e:84:74:6c:84:ba:ae:44:
         77:ff:0b:a6:5c:53:e2:36:1e:41:e7:26:e5:8d:f1:b0:8a:c1:
         12:e1:6a:06:ba:94:d7:68:c0:cd:32:53:43:a5:7d:b6:ea:ab:
         5c:4a:a7:4b:f1:a9:12:53:b1:87:f1:6c:bf:ad:e7:43:9a:0a:
         ec:f9:bf:28:0b:ab:0f:c8:4a:eb:a0:61:f5:55:59:7e:92:4d:
         41:3b:98:b3:35:73:74:be:66:c5:f0:df:02:59:0c:f0:7f:4e:
         c6:05:f7:9e:1b:28:32:da:da:38:2d:13:69:f3:c4:11:68:2b:
         d8:61:8c:40:a1:7e:99:c0:cc:b6:36:c4:ae:9a:cc:3c:09:ef:
         b6:d9:58:ab:21:78:68:8d:bc:50:41:5f:dc:66:14:97:c2:ff:
         81:f4:cf:52:fb:1a:c2:a1:1c:a8:3b:67:8a:08:6c:1e:92:d4:
         47:48:99:d0:2b:f6:f2:f1:47:b8:f2:ad:79:f9:81:4a:75:fe:
         b8:0b:29:3c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMTYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMwMTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNDMDc3MUZCMUQyQjMx
MzAxQjQ4MkM2MzRBQjY2N0ExOUU5N0MzMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRhDt6rkmzz4tHajHq4CcwuHMOXPwvTWT42pTzB40qsSk4P1iV
HOL/g1OELkUyJIYdNvEqO+J1jIYYWE10XeBaXezGFK46Z79vPOZ30q7cGtS+7Ih2
+HBo4ovmC4SopR8BmVSzMbYUtEJs7NpJNUUITi/t5JOCcO8NBiP65JKYgGHm0NBB
dv9hjAvbhNna01hM4JBmXEzVXWnKlb8ETULD6bgRkyYjqduW360WFZVM1LXMy0n0
3dNWFhPl4Ws34LS3CxME6982fVSd0wm1xG+LBg8jxM8KWjYrQuxYMCQHnbLB15sF
4/M1imqqaD3dIWS0SDbpOiDuwy87l43bmj5RAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPAdx+x0rMTAbSCxjSrZnoZ6XwycwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BBZHgteDByTVRBYlNDeGpT
clpub1o2WHd5Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AXQwDQYJKoZIhvcNAQELBQADggEBAJCxmqDzqLKf3hBgOg3y0yPiWSjvtpwlNoQF
ydV9gmi6MEimxdLm5sdbonZJuf9gKmhn4uS/530oy/wJUw8jJV4+hHRshLquRHf/
C6ZcU+I2HkHnJuWN8bCKwRLhaga6lNdowM0yU0Olfbbqq1xKp0vxqRJTsYfxbL+t
50OaCuz5vygLqw/ISuugYfVVWX6STUE7mLM1c3S+ZsXw3wJZDPB/TsYF954bKDLa
2jgtE2nzxBFoK9hhjEChfpnAzLY2xK6azDwJ77bZWKsheGiNvFBBX9xmFJfC/4H0
z1L7GsKhHKg7Z4oIbB6S1EdImdAr9vLxR7jyrXn5gUp1/rgLKTw=
-----END CERTIFICATE-----
Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org