Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yduln4n-aiYylzxQIbc7xpU2P2k.roa
File:                     Yduln4n-aiYylzxQIbc7xpU2P2k.roa (raw, json)
Hash identifier:          aQrBsyZVjzoInCR7euNStZqfw9rks15zBWXZfj7Wc7o=
Subject key identifier:   61:DB:A5:9F:89:FE:6A:26:32:97:3C:50:21:B7:3B:C6:95:36:3F:69
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       322C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yduln4n-aiYylzxQIbc7xpU2P2k.roa
Signing time:             Mon 26 Aug 2024 05:31:22 +0000
ROA not before:           Mon 26 Aug 2024 05:31:22 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        118.233.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12844 (0x322c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:31:22 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=61DBA59F89FE6A2632973C5021B73BC695363F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ff:79:30:d1:d0:7e:15:a8:47:d2:bf:45:14:
                    e1:55:a5:5a:a2:fb:3c:3a:f2:5d:57:4c:b5:5b:ba:
                    03:e6:1b:e4:5a:a8:02:ea:3d:18:f6:ab:9a:a5:ec:
                    9a:8b:e0:8b:ad:43:0f:ef:ca:99:61:9f:9e:0d:fc:
                    8d:ad:ae:a6:d7:28:3a:41:87:d3:2b:80:28:e2:ab:
                    19:55:ee:f3:23:d4:b9:31:9b:48:47:ca:77:a7:8e:
                    83:a2:2e:db:5c:24:43:8a:2a:47:a4:5b:49:d9:35:
                    e9:84:bc:cb:a5:98:2d:2f:d5:d0:d7:b7:d5:5e:b0:
                    0e:82:d8:76:d7:9b:8e:2a:4e:28:cd:46:13:23:18:
                    18:1a:bd:f2:09:ef:90:c2:22:ac:b0:42:df:27:eb:
                    9b:c6:5e:cb:54:0b:97:02:15:a2:d8:ac:2c:b4:35:
                    22:80:c4:f6:05:5c:96:70:4c:64:08:e6:6c:39:de:
                    95:6a:5f:4d:7a:74:76:69:52:ab:91:4b:67:29:d7:
                    87:19:f8:88:94:03:f7:ee:b4:a4:6d:c6:4d:6b:30:
                    f1:13:96:4f:4a:75:18:bc:33:63:07:19:fb:c0:f5:
                    db:39:81:0f:66:c3:d5:00:5b:fd:b0:c5:cb:3e:b0:
                    5e:f3:1b:4b:15:06:19:89:f6:47:b2:48:34:af:c5:
                    9b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DB:A5:9F:89:FE:6A:26:32:97:3C:50:21:B7:3B:C6:95:36:3F:69
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yduln4n-aiYylzxQIbc7xpU2P2k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:d2:87:19:66:b3:bc:13:c8:b1:cb:af:dc:b4:39:42:bd:25:
         81:bb:69:fe:bf:a6:fb:9a:ad:c9:0e:95:d8:07:4a:04:55:68:
         77:1e:02:4d:1f:c0:b6:a9:50:5d:b8:f6:c8:d6:00:95:6b:5f:
         8c:43:5b:69:33:e7:a3:84:23:4b:fd:36:89:10:21:34:65:11:
         fd:2d:f8:0a:04:d2:5c:15:aa:8a:67:0f:3c:26:89:42:d2:ec:
         dc:ec:a7:e3:aa:09:d1:e7:f3:e2:64:28:40:03:39:17:4e:e8:
         6b:db:09:ad:03:34:9a:98:68:42:22:ca:da:b9:e9:2f:6e:16:
         ea:4d:ca:c2:aa:64:87:ef:27:ea:ee:97:74:20:fb:39:fd:fd:
         fe:44:56:46:a6:8a:a5:30:29:e6:6c:df:ed:b9:7b:e4:5f:b4:
         b2:b9:4d:6d:c2:00:41:0a:4b:7f:f9:b2:94:ba:86:93:a4:1a:
         ed:91:be:92:fa:7b:6b:c4:b4:21:ae:c9:97:81:99:77:dd:72:
         f8:95:13:7e:c8:25:ab:63:28:bc:e1:13:46:f1:a6:2a:1a:d3:
         2e:ad:f3:89:b0:d9:f5:e7:ea:ac:18:ce:4c:a6:5d:a4:5b:f8:
         83:02:6a:0c:34:e0:59:6c:7e:7e:22:fd:cb:c2:ce:80:5e:89:
         93:69:13:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org