Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQAuB80rjMLdISkElLkeukXOpew.roa
File:                     RQAuB80rjMLdISkElLkeukXOpew.roa (raw, json)
Hash identifier:          97zKj6EWcceGvK5ZGxRuzlXpZ1SDciwgBnMi1kXMNYI=
Subject key identifier:   45:00:2E:07:CD:2B:8C:C2:DD:21:29:04:94:B9:1E:BA:45:CE:A5:EC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2FC9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQAuB80rjMLdISkElLkeukXOpew.roa
Signing time:             Mon 26 Aug 2024 05:28:51 +0000
ROA not before:           Mon 26 Aug 2024 05:28:51 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        106.1.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12233 (0x2fc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:28:51 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=45002E07CD2B8CC2DD21290494B91EBA45CEA5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:f9:20:b0:5d:b1:dd:41:31:c0:54:de:a0:
                    ea:ec:69:50:36:46:e4:d2:f3:f5:8d:08:d4:71:81:
                    84:ed:f4:8a:58:f1:4d:e4:8b:e1:19:bf:18:a4:44:
                    07:95:3a:46:f6:84:d1:b2:2d:87:5a:d7:02:36:6a:
                    b8:d3:6d:62:05:19:ea:67:db:1b:ba:78:aa:4e:d6:
                    bb:e0:14:f4:9c:e5:47:e4:8e:bd:20:1a:fa:26:3d:
                    aa:10:16:de:32:d9:ea:58:1e:9a:16:2a:dc:79:a5:
                    b0:dd:e2:b2:12:aa:01:0c:c1:44:07:79:e8:38:b2:
                    22:8b:ea:3a:05:66:f7:bc:a4:1d:d3:bf:ad:13:e5:
                    50:b3:fc:ea:de:ef:0d:ab:e7:58:62:79:44:9f:66:
                    a1:e7:b5:4c:cd:a4:f7:d3:75:f1:42:b3:1c:82:28:
                    a6:7d:57:a1:40:b1:1e:46:95:88:a2:79:91:73:40:
                    c5:2c:08:de:9e:fe:79:4a:6c:56:a9:ef:ec:d8:3a:
                    49:9e:98:12:75:4b:96:d1:2a:2a:ac:9d:b7:1d:94:
                    dd:10:de:3e:b3:56:d9:75:b5:a6:38:10:a7:4a:fb:
                    1f:b5:83:e2:a7:e6:d3:9e:19:ad:3f:c1:2a:95:07:
                    6f:f2:d5:d7:3e:94:83:00:63:dd:c8:e1:4c:69:b7:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:00:2E:07:CD:2B:8C:C2:DD:21:29:04:94:B9:1E:BA:45:CE:A5:EC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQAuB80rjMLdISkElLkeukXOpew.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:70:cd:ec:49:e8:d6:b8:6a:0e:41:07:9c:22:a3:a6:ac:09:
         0e:7c:25:fa:2b:5e:18:c9:36:d1:3b:03:38:9c:7e:09:e1:60:
         bb:d6:8c:65:5c:7f:3b:01:70:80:06:f6:bb:04:d9:ca:4c:d3:
         86:52:4a:a1:51:1e:27:5a:d8:5d:26:46:e6:6c:65:0f:16:5a:
         91:d4:fc:6b:59:27:26:10:af:02:54:ee:f0:47:29:63:1b:34:
         f7:6e:18:9d:e9:bb:af:08:bc:53:19:2d:23:bf:ad:e4:2f:9d:
         7a:66:d0:fb:90:66:7c:60:56:57:30:9f:a9:23:00:9b:5a:16:
         a1:07:7c:c3:7f:71:37:2f:f0:22:31:e4:fd:6d:3d:ec:cc:ff:
         12:6e:17:30:be:8b:bf:72:94:e7:c4:b4:bb:06:96:11:46:97:
         bf:1d:4a:f6:e2:cd:c8:9f:af:24:68:d0:77:39:51:9e:f7:87:
         10:ec:7d:09:f5:ee:1c:0c:69:c4:e8:5a:fc:4c:bc:d9:0d:f7:
         f3:4b:92:6a:40:ef:86:c3:60:34:9d:7b:ff:b0:7a:25:09:a0:
         09:e9:89:48:1d:5c:03:cd:7d:0f:f7:2b:cb:26:b6:30:53:11:
         03:9f:8e:41:56:5b:ea:40:ec:ae:51:95:e1:a5:f5:bb:1a:b6:
         0a:a2:34:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org