Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yyi3-CiVNWdpFVMj7dqDpHyjoYY.roa
File:                     Yyi3-CiVNWdpFVMj7dqDpHyjoYY.roa (raw, json)
Hash identifier:          bUaEj8rsMrWnRBa43J7m2/P6Rs3eSo/b/9gCwPiaZtI=
Subject key identifier:   63:28:B7:F8:28:95:35:67:69:15:53:23:ED:DA:83:A4:7C:A3:A1:86
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       30A7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yyi3-CiVNWdpFVMj7dqDpHyjoYY.roa
Signing time:             Mon 26 Aug 2024 05:29:41 +0000
ROA not before:           Mon 26 Aug 2024 05:29:41 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.56.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12455 (0x30a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:29:41 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6328B7F82895356769155323EDDA83A47CA3A186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:65:d3:db:94:9c:69:5f:33:e9:a7:c7:dc:
                    0d:9c:19:68:a6:d3:1d:11:fc:99:e5:5b:a5:84:87:
                    83:d8:d4:2d:6b:de:f4:b5:67:8f:4b:07:fe:e7:d7:
                    55:1d:a1:97:97:e2:60:9b:a5:d0:0e:a0:cf:c3:3c:
                    c9:e8:5a:35:43:b4:a4:99:7e:a0:d8:c9:94:89:ec:
                    63:f5:cd:81:c3:d6:eb:8c:dc:c1:23:7e:ad:0e:f7:
                    c5:87:be:8d:ef:57:72:e0:6f:cd:e3:bb:5e:e9:e1:
                    b6:4c:bd:b8:3d:ef:a3:4f:a4:3a:39:43:e9:b3:88:
                    43:36:2e:1b:8b:de:ee:32:91:7c:66:8b:03:4b:08:
                    75:a2:25:40:5e:3d:85:3e:13:78:d1:c5:b7:f5:a3:
                    1b:f1:48:fd:f3:74:5c:3d:e6:43:e3:93:80:2a:46:
                    66:db:aa:60:ef:6a:2d:77:33:98:c4:ed:ff:16:bb:
                    e9:b9:da:d1:6d:4a:4e:70:3e:b1:ac:65:cc:95:28:
                    45:49:24:16:4c:00:8c:3f:ac:89:cd:04:f0:2a:61:
                    7a:05:16:19:68:dc:ea:32:11:9b:c1:b6:b0:ca:77:
                    b8:1f:e3:f9:ec:d4:83:51:74:de:02:a5:15:0e:e8:
                    5e:9f:91:cd:b8:c4:b4:45:b9:64:c9:9f:d7:d2:f2:
                    96:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:28:B7:F8:28:95:35:67:69:15:53:23:ED:DA:83:A4:7C:A3:A1:86
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yyi3-CiVNWdpFVMj7dqDpHyjoYY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:0e:9f:ee:06:b8:aa:82:fc:0b:3a:19:b7:09:b2:a0:61:d1:
         5f:22:57:7b:6f:7d:b8:a4:7d:06:3d:ec:e6:9b:94:17:44:66:
         75:0e:16:4f:3e:2e:b0:90:69:c5:c1:2f:bb:8d:fc:5c:3c:b6:
         4b:87:8f:30:c2:16:18:86:df:7a:83:8b:72:83:da:f8:6f:b3:
         1a:da:39:37:24:bb:3a:95:d1:ea:a1:f0:cd:24:e6:8a:1e:29:
         91:a4:55:9f:67:00:f0:dd:ab:bd:b1:b9:4d:c4:e4:81:31:5b:
         81:ca:6a:a1:ae:6f:5a:53:90:88:2f:c1:17:15:bd:c0:ac:d8:
         e3:ab:11:58:15:73:6d:8c:42:ad:9f:47:eb:69:55:05:81:26:
         b1:30:42:bc:63:de:2d:d9:81:e5:9b:ce:25:b9:f0:c7:24:40:
         2d:54:15:77:22:8a:80:a4:d9:c6:24:28:3c:dc:34:10:be:47:
         19:0c:8b:26:53:e6:88:b0:5b:75:8a:d8:fa:5d:80:04:c8:4c:
         bd:d5:9a:a2:4e:68:e1:ae:3c:18:c4:03:0f:83:82:0c:ee:8b:
         b8:df:96:5d:1e:74:e7:eb:5f:1c:25:f3:f0:f6:b3:6f:7b:7a:
         32:b3:d0:90:90:d0:aa:5e:07:1c:a0:b1:e8:a5:38:fe:01:14:
         b1:47:0f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org