Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZNCEPZh_7xdKbnrg_0JE2cKkZm4.roa
File:                     ZNCEPZh_7xdKbnrg_0JE2cKkZm4.roa (raw, json)
Hash identifier:          r0ysTeR2TL9A7l7ZSDzEzSaLl/ZKIUZGPGthMbwcft0=
Subject key identifier:   64:D0:84:3D:98:7F:EF:17:4A:6E:7A:E0:FF:42:44:D9:C2:A4:66:6E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       32FD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZNCEPZh_7xdKbnrg_0JE2cKkZm4.roa
Signing time:             Mon 26 Aug 2024 05:32:12 +0000
ROA not before:           Mon 26 Aug 2024 05:32:12 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9924
IP address blocks:        123.195.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13053 (0x32fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:32:12 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=64D0843D987FEF174A6E7AE0FF4244D9C2A4666E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:8c:c3:09:a5:07:e1:dd:fb:a7:a5:4a:6c:
                    ec:d3:8c:c3:c5:2a:2d:6a:85:74:f6:67:03:c4:13:
                    0c:b0:69:a5:78:d9:b8:68:23:3d:8b:c8:a9:19:ad:
                    82:90:ac:cd:8a:e3:d8:75:3d:8c:36:cc:ff:51:1c:
                    46:96:06:32:46:31:41:d7:48:d3:80:b7:34:d6:3c:
                    5f:c7:ab:cb:b6:d9:8c:2c:14:90:35:f1:98:76:38:
                    f0:ab:84:fc:37:b3:4a:b2:d0:c9:f8:2f:03:45:0f:
                    31:40:38:d1:2c:4d:43:b1:2a:0b:3d:e0:58:35:40:
                    cf:3a:72:fa:a3:01:12:f2:6d:ba:4e:73:b6:59:87:
                    f3:b2:08:55:73:55:ec:a4:24:74:95:44:87:bd:00:
                    f3:09:eb:64:c8:c1:83:09:66:52:2c:de:da:a1:08:
                    b4:e5:ac:e3:cb:08:2f:7d:68:25:75:9d:88:e4:64:
                    18:f2:a8:30:da:fb:73:fa:b3:1e:9e:1f:1c:14:c9:
                    61:50:c0:8c:41:f2:bb:6a:ac:6c:d8:a4:00:79:9b:
                    a2:37:13:2c:04:cf:88:9e:e1:1d:ac:ca:f6:53:99:
                    59:37:5a:8e:be:11:14:08:cb:f7:ae:cd:c6:0d:d0:
                    3d:16:7a:63:27:a0:51:d2:c5:13:b6:58:02:be:58:
                    70:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D0:84:3D:98:7F:EF:17:4A:6E:7A:E0:FF:42:44:D9:C2:A4:66:6E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZNCEPZh_7xdKbnrg_0JE2cKkZm4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:2a:37:cc:94:c4:24:ab:fc:8e:e2:65:94:4c:22:18:87:9b:
         01:02:a8:43:28:0a:7a:c5:7c:4c:a4:b1:b8:2a:9c:10:d5:bd:
         b1:b6:b0:79:3d:ff:db:93:63:48:ae:bd:88:af:ee:dc:4c:0d:
         cb:dd:1e:37:ac:0a:84:14:a9:cc:fd:f9:66:01:bb:c2:1d:1c:
         d2:5f:c5:c1:e4:9e:df:21:2e:36:28:94:2a:2e:98:ac:7e:f6:
         6f:d0:59:ce:17:16:1e:f4:71:58:85:57:72:62:87:2d:08:28:
         eb:a2:9d:e4:08:d4:c4:8a:ad:86:b8:b8:ff:fc:3a:b7:68:9f:
         51:33:c4:1d:76:a5:67:ed:ce:f7:fb:11:c4:d5:3f:2a:99:29:
         85:a7:8f:06:bf:2e:94:4d:00:ed:5f:d1:c7:c6:71:ca:b0:92:
         08:43:cd:e4:fa:68:de:04:ad:34:0c:ca:df:df:45:88:30:ac:
         92:61:83:34:3c:26:b6:35:cc:23:6d:8b:e5:e6:7f:8d:5a:9f:
         67:28:c5:f7:2c:8a:38:21:2b:17:b5:68:d8:fd:09:1c:b5:7c:
         72:ce:46:d2:8d:78:18:6d:96:2a:83:d2:d1:43:95:25:18:48:
         09:6a:70:a1:3a:35:ab:4a:66:7f:fb:a0:95:85:97:a2:15:32:
         fe:87:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:38 2024 by rpki-client on console-ams.rpki-client.org