Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VHU0bjNysRHuT0kQzWy3TcBBojc.roa
File:                     VHU0bjNysRHuT0kQzWy3TcBBojc.roa (raw, json)
Hash identifier:          AhjtcoV/BXqOgrLCR9RaiVgdka+q9k5xhlDfY0R1oa8=
Subject key identifier:   54:75:34:6E:33:72:B1:11:EE:4F:49:10:CD:6C:B7:4D:C0:41:A2:37
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       30C9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VHU0bjNysRHuT0kQzWy3TcBBojc.roa
Signing time:             Mon 26 Aug 2024 05:29:50 +0000
ROA not before:           Mon 26 Aug 2024 05:29:50 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.193.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12489 (0x30c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:29:50 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=5475346E3372B111EE4F4910CD6CB74DC041A237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f8:b1:e2:da:99:4b:a7:85:ac:ec:a4:a2:8d:
                    04:1f:75:b3:ba:83:7d:5a:57:94:4d:3f:df:24:ef:
                    4f:7d:be:bc:91:73:82:98:da:e7:d5:ef:37:3d:14:
                    b8:48:ca:75:de:ed:37:eb:58:7a:bd:a2:81:ff:ad:
                    ef:3b:62:76:77:36:7c:bc:a4:e7:66:e9:23:99:e4:
                    30:e4:0e:fe:e8:d5:fa:3e:4a:3c:8f:ab:0b:90:8d:
                    dd:b1:80:da:64:dd:64:b2:3f:87:3b:c3:d4:7e:fb:
                    3f:62:d8:1e:1e:52:96:09:ff:4d:b5:f9:54:79:7d:
                    dd:bc:84:f1:8d:33:44:53:ff:d4:93:33:a8:97:5b:
                    c7:2c:32:81:3c:23:25:d2:ac:dd:cd:83:1e:d2:61:
                    ca:94:c0:f3:4d:7a:d2:57:f8:fd:24:7f:e7:5b:45:
                    36:bc:24:3d:b1:a5:27:65:41:91:62:64:c9:3e:86:
                    ca:8e:9e:1b:23:0b:a3:f6:e1:25:b1:84:c8:0e:50:
                    77:41:a1:d2:ef:a5:b4:17:ff:8c:f9:ce:64:05:0c:
                    2f:e6:02:d2:13:39:fc:bf:2d:1c:c3:f3:a9:18:6e:
                    77:50:6d:54:85:c5:1b:b6:98:6d:df:14:10:1b:63:
                    28:3c:e5:bb:0b:9d:ec:57:2a:e1:fb:e3:3a:02:f5:
                    45:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:75:34:6E:33:72:B1:11:EE:4F:49:10:CD:6C:B7:4D:C0:41:A2:37
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VHU0bjNysRHuT0kQzWy3TcBBojc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:1d:8a:60:ce:59:dd:69:57:da:5a:25:5f:62:cd:5c:aa:3e:
         a7:bc:e3:30:d9:33:df:53:02:10:15:a7:89:94:ca:0d:5c:e2:
         77:17:7f:af:88:05:fa:78:d2:df:fb:a3:d0:39:4f:e3:a1:e4:
         ad:7d:1d:f9:cd:82:d4:11:8b:4f:85:96:a4:85:90:92:79:c5:
         e5:9f:73:70:4b:a6:c5:69:1f:3c:50:c1:fe:aa:df:ae:fd:7a:
         5a:63:ce:22:cc:48:f6:02:58:97:73:8a:80:e5:dc:48:97:2f:
         b5:9c:b4:a3:b4:91:34:f1:52:10:3f:96:88:b2:f9:ca:a4:f9:
         42:4a:8e:5f:04:2c:64:43:30:52:8b:56:53:3d:b3:69:91:e3:
         e2:2a:a1:cd:ab:89:55:f2:80:fa:60:1c:bd:26:fd:b2:7b:66:
         b7:51:02:b7:d9:34:47:68:f3:15:4e:5a:c4:68:c1:5c:79:3e:
         50:5c:d1:d9:5e:11:9c:bd:94:6c:b1:6f:1b:db:bd:30:8f:8e:
         cd:7d:b3:93:39:13:1d:32:fe:46:ac:9b:be:f1:39:aa:93:5a:
         54:63:c2:d7:01:cf:44:70:f4:dd:9e:d6:af:67:b9:6c:f5:3a:
         97:0b:c7:59:fe:54:60:8f:8a:9d:aa:54:b7:cb:03:79:f5:80:
         a7:d8:4f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:49 2024 by rpki-client on console-fra.rpki-client.org