Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U_LCagfJr0P0bbavtGUw948B-Uw.roa
File:                     U_LCagfJr0P0bbavtGUw948B-Uw.roa (raw, json)
Hash identifier:          81P5CqtG8T0qVvvebsjnrApN61UBwW229iOI0xlJ2TU=
Subject key identifier:   53:F2:C2:6A:07:C9:AF:43:F4:6D:B6:AF:B4:65:30:F7:8F:01:F9:4C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3060
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U_LCagfJr0P0bbavtGUw948B-Uw.roa
Signing time:             Mon 26 Aug 2024 05:29:24 +0000
ROA not before:           Mon 26 Aug 2024 05:29:24 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.194.216.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12384 (0x3060)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:29:24 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=53F2C26A07C9AF43F46DB6AFB46530F78F01F94C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2e:f2:c7:18:e4:92:3e:ff:38:2a:34:4f:55:
                    e6:fb:c6:e5:79:6c:3a:23:16:f8:dd:83:d0:b6:0a:
                    99:ab:54:fd:cd:de:df:fc:9e:3c:8a:a8:e2:34:1b:
                    eb:83:24:5a:35:a4:78:ef:b9:e1:b4:fc:32:61:7d:
                    94:a1:99:e6:18:95:d1:02:7c:5c:45:7d:fd:67:bd:
                    4c:6d:d7:10:b8:16:ac:7b:ea:31:fc:63:60:6f:e0:
                    86:36:24:2f:95:a2:f0:26:8a:3e:44:4b:c3:63:94:
                    65:5f:05:e0:56:cf:a9:83:bb:fc:b2:47:16:1d:c7:
                    6f:e5:7b:07:78:bb:6c:16:59:40:ff:65:f3:54:12:
                    0c:3d:76:f4:cd:a5:49:a5:64:e5:7a:e9:7c:68:67:
                    5e:72:0e:fd:53:11:82:04:a8:57:2a:35:25:a1:82:
                    79:f0:8b:64:99:80:3d:ff:72:6a:75:92:bd:0a:60:
                    f6:d3:1f:7d:6a:73:5b:be:78:45:81:0c:7a:f4:62:
                    08:f5:79:89:ad:15:61:e5:f7:e5:43:a8:a6:4b:48:
                    57:b4:22:05:e9:9b:6a:5b:ea:47:8c:c1:fb:d6:33:
                    27:d0:bd:f3:13:61:a3:ac:33:98:f3:5c:d2:16:dd:
                    fa:0f:b3:60:12:83:65:c3:14:85:b7:f3:69:02:ba:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F2:C2:6A:07:C9:AF:43:F4:6D:B6:AF:B4:65:30:F7:8F:01:F9:4C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U_LCagfJr0P0bbavtGUw948B-Uw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:22:a6:1f:01:98:de:d5:65:0a:23:71:d6:b3:8b:8e:9b:58:
         26:f0:e5:be:1e:95:95:b4:0d:d0:88:da:c7:91:31:56:e1:82:
         34:1f:0f:71:57:82:f9:46:04:ad:99:19:02:35:e5:8e:73:4d:
         b8:01:19:fc:4d:35:f2:d7:25:cf:f3:aa:e9:2b:4a:0d:5b:39:
         12:92:56:6d:96:79:a8:f0:60:07:27:9d:25:18:d2:fc:a6:1a:
         13:a4:78:28:8e:9c:8c:e1:a2:62:7f:f1:3b:e5:eb:2a:5b:29:
         ad:af:79:7e:bc:eb:19:3f:76:03:f8:fa:0d:17:0a:f5:96:66:
         fd:b5:a3:8f:74:8c:38:9c:cc:1d:e3:45:f8:f0:19:ef:b9:50:
         42:01:12:ff:7b:60:62:e8:f5:cb:1e:eb:e8:dd:fc:c5:e6:73:
         9e:af:4c:1c:38:aa:87:67:08:f0:10:fa:8e:99:aa:92:8b:7a:
         52:ee:de:70:03:38:b3:a3:9b:bd:e9:1f:15:8c:01:33:d5:af:
         b3:32:60:2f:84:48:2d:db:c7:13:ff:f0:b6:df:67:bd:ba:a3:
         76:0b:19:07:6b:6f:33:b6:ee:8c:67:a7:4e:c7:aa:11:dc:f5:
         81:0a:68:a3:86:7f:73:fa:69:c9:89:1e:ad:ca:55:23:3f:ce:
         05:77:45:a5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTI5MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUzRjJDMjZBMDdDOUFG
NDNGNDZEQjZBRkI0NjUzMEY3OEYwMUY5NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxLvLHGOSSPv84KjRPVeb7xuV5bDojFvjdg9C2CpmrVP3N3t/8
njyKqOI0G+uDJFo1pHjvueG0/DJhfZShmeYYldECfFxFff1nvUxt1xC4Fqx76jH8
Y2Bv4IY2JC+VovAmij5ES8NjlGVfBeBWz6mDu/yyRxYdx2/lewd4u2wWWUD/ZfNU
Egw9dvTNpUmlZOV66XxoZ15yDv1TEYIEqFcqNSWhgnnwi2SZgD3/cmp1kr0KYPbT
H31qc1u+eEWBDHr0Ygj1eYmtFWHl9+VDqKZLSFe0IgXpm2pb6keMwfvWMyfQvfMT
YaOsM5jzXNIW3foPs2ASg2XDFIW382kCun3VAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUU/LCagfJr0P0bbavtGUw948B+UwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1VfTENhZ2ZKcjBQMGJiYXZ0
R1V3OTQ4Qi1Vdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wtgwDQYJKoZIhvcNAQELBQADggEBAAAiph8BmN7VZQojcdazi46bWCbw5b4elZW0
DdCI2seRMVbhgjQfD3FXgvlGBK2ZGQI15Y5zTbgBGfxNNfLXJc/zqukrSg1bORKS
Vm2WeajwYAcnnSUY0vymGhOkeCiOnIzhomJ/8Tvl6ypbKa2veX686xk/dgP4+g0X
CvWWZv21o490jDiczB3jRfjwGe+5UEIBEv97YGLo9cse6+jd/MXmc56vTBw4qodn
CPAQ+o6ZqpKLelLu3nADOLOjm73pHxWMATPVr7MyYC+ESC3bxxP/8LbfZ726o3YL
GQdrbzO27oxnp07HqhHc9YEKaKOGf3P6acmJHq3KVSM/zgV3RaU=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:49 2024 by rpki-client on console-fra.rpki-client.org