Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PlsmbcVD5_mSzmAr__4Mbk08H2o.roa
File:                     PlsmbcVD5_mSzmAr__4Mbk08H2o.roa (raw, json)
Hash identifier:          I5YpnnPIo5BPUwwJ59Lq7wDFKR9Nds3C7Fh8IQb1dTo=
Subject key identifier:   3E:5B:26:6D:C5:43:E7:F9:92:CE:60:2B:FF:FE:0C:6E:4D:3C:1F:6A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2FD0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PlsmbcVD5_mSzmAr__4Mbk08H2o.roa
Signing time:             Mon 26 Aug 2024 05:28:52 +0000
ROA not before:           Mon 26 Aug 2024 05:28:52 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        106.1.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12240 (0x2fd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:28:52 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=3E5B266DC543E7F992CE602BFFFE0C6E4D3C1F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ac:dc:f7:e2:c9:0e:ca:40:bb:31:8a:23:6b:
                    fb:ab:0f:28:48:78:53:fa:7d:80:7c:ea:bb:4f:4c:
                    ee:4b:14:62:a3:f8:35:d7:76:d9:3c:f8:ba:ee:23:
                    d4:b6:69:39:f4:1e:c6:8b:c1:44:fe:96:8d:95:30:
                    12:ca:22:f3:48:17:8a:e4:37:fe:14:23:b6:f0:7f:
                    b8:c4:46:5a:54:6b:18:cb:fe:55:0a:a9:7c:2d:62:
                    d3:c2:3d:11:6a:d2:f5:bd:01:00:eb:c9:35:3f:1b:
                    5b:54:92:32:5c:63:0b:33:3f:48:e1:a5:7d:4e:38:
                    ad:b9:0b:f3:b1:43:4a:f4:74:7c:b0:70:c7:09:1c:
                    7a:4f:77:10:d1:6b:e9:2d:a6:65:a9:bf:0d:3c:03:
                    42:bd:f9:86:27:c2:8f:0a:7a:7e:a3:82:7b:d9:a6:
                    76:a3:e8:c3:eb:b0:bb:f8:f7:02:95:06:be:29:4c:
                    f4:76:39:03:fc:58:ab:40:96:1f:96:c7:1d:bc:62:
                    e9:27:4a:16:10:d4:70:8a:1b:f7:86:f0:46:90:fa:
                    8f:04:f6:77:6b:9a:b4:3d:bc:19:bd:06:e4:0d:eb:
                    6d:7b:5e:68:af:85:54:5b:ac:91:14:a4:06:0f:1d:
                    9a:5b:3a:81:32:fa:bc:84:e0:94:9d:ad:21:70:51:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5B:26:6D:C5:43:E7:F9:92:CE:60:2B:FF:FE:0C:6E:4D:3C:1F:6A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PlsmbcVD5_mSzmAr__4Mbk08H2o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:f9:a1:74:1b:e8:24:39:b5:dc:48:f4:22:ad:f1:48:f3:5d:
         28:da:11:fa:90:ba:3e:58:85:56:90:2c:9c:f9:43:2b:2b:1b:
         be:df:e6:b6:b6:75:52:33:10:1a:c6:f2:a2:5d:b4:8f:52:c4:
         d7:68:b9:61:0c:7a:c7:3d:0f:02:49:7e:2f:b0:ca:11:3a:09:
         e4:11:58:28:3e:a6:8f:62:23:f1:3b:cf:35:0c:e7:37:27:1e:
         c7:f2:d0:55:67:01:e9:11:4d:ec:d4:68:3c:9e:f2:3a:a0:79:
         de:31:48:a1:3f:e8:18:40:f3:06:0a:1b:0d:b5:d0:c4:30:6a:
         52:ea:5f:fe:f5:47:18:e0:f3:b0:42:8a:21:f6:76:5a:a8:ef:
         3e:a0:9b:15:cd:68:bd:7e:46:07:c7:53:fe:48:09:67:fe:0f:
         a5:09:08:18:15:24:90:de:d6:d9:27:43:8a:2a:0d:c6:de:d9:
         3c:ce:f1:42:eb:29:03:91:06:c1:a2:9d:ec:60:9f:49:0c:ef:
         27:4c:84:e2:4b:7e:12:5d:e5:b9:d1:4b:08:97:b3:e0:ff:ae:
         69:0f:7e:d5:ab:f9:e2:fe:23:52:6f:6a:f8:b3:aa:70:19:af:
         5c:b5:23:36:d8:26:7b:5d:1e:89:1b:49:9a:75:3b:1d:94:e8:
         da:4f:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:48 2024 by rpki-client on console-fra.rpki-client.org