Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZfV8QQDBjqrS_LARDF7qvTX3wFo.roa
File:                     ZfV8QQDBjqrS_LARDF7qvTX3wFo.roa (raw, json)
Hash identifier:          m446WOQohSaI2XcX8zq5iQrc0NNzSh11fMM/pBT2kUY=
Subject key identifier:   65:F5:7C:41:00:C1:8E:AA:D2:FC:B0:11:0C:5E:EA:BD:35:F7:C0:5A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       283B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZfV8QQDBjqrS_LARDF7qvTX3wFo.roa
Signing time:             Fri 01 Sep 2023 10:05:06 +0000
ROA not before:           Fri 01 Sep 2023 10:05:06 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        123.193.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10299 (0x283b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:06 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=65F57C4100C18EAAD2FCB0110C5EEABD35F7C05A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:ee:fa:6a:70:5e:90:c9:2f:3f:93:1a:3d:
                    3d:bc:37:9a:ef:11:27:2b:82:ab:47:32:f4:e9:09:
                    24:8d:a4:d6:f1:7c:ec:fc:2d:08:45:18:71:84:7a:
                    26:2c:2e:1e:19:7e:cd:98:bb:f5:02:6e:de:f8:aa:
                    71:d7:e2:40:26:82:60:05:e7:50:5c:10:af:b9:8b:
                    5f:30:6b:e7:88:db:f8:52:37:60:8e:73:5c:a3:ce:
                    60:26:15:25:a4:dc:29:b7:e6:37:ce:6b:29:3a:2a:
                    d9:a1:ae:24:99:bf:ab:c2:0d:78:4b:60:4e:07:e1:
                    e0:d9:78:44:71:88:20:8e:9e:c8:b0:97:b2:7f:da:
                    e1:1e:9c:da:f3:db:a0:f2:2d:42:48:f1:d9:7d:51:
                    a1:3f:3c:6c:e7:92:f2:9b:5c:2c:03:fa:57:25:c2:
                    fc:21:56:fc:67:37:2d:fe:31:91:9e:90:b4:c3:22:
                    0d:72:64:f2:3a:9f:41:d4:14:a3:38:04:4f:ef:c1:
                    63:c2:85:32:df:49:62:30:4a:c3:50:20:ec:4c:22:
                    6e:29:11:6f:36:17:93:9d:de:ca:b1:bb:63:09:4e:
                    c7:f4:72:a7:11:8f:c0:85:fa:8f:c3:82:ee:bf:1c:
                    c0:f0:90:c8:45:96:f1:c1:14:0b:50:4c:37:cf:ed:
                    41:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F5:7C:41:00:C1:8E:AA:D2:FC:B0:11:0C:5E:EA:BD:35:F7:C0:5A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZfV8QQDBjqrS_LARDF7qvTX3wFo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:7a:a6:ab:cc:98:57:e7:9d:74:a5:ef:01:9b:73:ab:b6:1a:
         0b:e0:f5:30:97:6c:9b:6f:b1:de:43:fc:a6:1c:e8:aa:8f:39:
         62:a1:6b:41:39:26:ab:37:ea:23:70:db:de:52:c5:b7:f0:70:
         a6:38:11:03:a1:ea:bb:cd:ba:10:4f:53:b3:a5:c0:4e:2b:43:
         ff:a1:0b:07:3b:49:49:1c:23:76:ad:2f:25:9c:c9:38:8d:28:
         31:ed:6a:fc:93:ad:6c:db:42:fc:6a:17:b1:e3:62:0c:68:9a:
         38:cd:3c:f0:f5:00:82:18:83:68:17:11:96:38:a3:0d:be:b1:
         ea:3a:71:93:81:07:60:0c:58:56:2a:d3:fd:7c:f3:1c:e6:39:
         96:11:19:54:5c:e0:0b:1f:15:c8:23:13:4e:28:c8:d1:68:97:
         32:30:35:56:61:24:32:42:50:29:3d:ae:53:6d:52:c6:7e:ce:
         3f:b7:ba:60:71:61:b9:6f:07:ac:62:96:67:7a:14:61:17:2c:
         a2:2d:53:fe:a8:4c:4e:9d:15:ce:dd:67:79:c6:57:c2:11:31:
         1d:11:b4:f8:61:4d:d8:62:6e:df:d7:92:94:8d:a9:82:48:bc:
         6c:43:f2:0f:bc:70:01:f8:ce:be:73:b3:c0:46:11:e3:e1:16:
         41:fc:49:d0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKDswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY1RjU3QzQxMDBDMThF
QUFEMkZDQjAxMTBDNUVFQUJEMzVGN0MwNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0Eu76anBekMkvP5MaPT28N5rvEScrgqtHMvTpCSSNpNbxfOz8
LQhFGHGEeiYsLh4Zfs2Yu/UCbt74qnHX4kAmgmAF51BcEK+5i18wa+eI2/hSN2CO
c1yjzmAmFSWk3Cm35jfOayk6KtmhriSZv6vCDXhLYE4H4eDZeERxiCCOnsiwl7J/
2uEenNrz26DyLUJI8dl9UaE/PGznkvKbXCwD+lclwvwhVvxnNy3+MZGekLTDIg1y
ZPI6n0HUFKM4BE/vwWPChTLfSWIwSsNQIOxMIm4pEW82F5Od3sqxu2MJTsf0cqcR
j8CF+o/Dgu6/HMDwkMhFlvHBFAtQTDfP7UHnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZfV8QQDBjqrS/LARDF7qvTX3wFowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pmVjhRUURCanFyU19MQVJE
RjdxdlRYM3dGby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
weAwDQYJKoZIhvcNAQELBQADggEBAGJ6pqvMmFfnnXSl7wGbc6u2Ggvg9TCXbJtv
sd5D/KYc6KqPOWKha0E5Jqs36iNw295SxbfwcKY4EQOh6rvNuhBPU7OlwE4rQ/+h
Cwc7SUkcI3atLyWcyTiNKDHtavyTrWzbQvxqF7HjYgxomjjNPPD1AIIYg2gXEZY4
ow2+seo6cZOBB2AMWFYq0/188xzmOZYRGVRc4AsfFcgjE04oyNFolzIwNVZhJDJC
UCk9rlNtUsZ+zj+3umBxYblvB6xilmd6FGEXLKItU/6oTE6dFc7dZ3nGV8IRMR0R
tPhhTdhibt/XkpSNqYJIvGxD8g+8cAH4zr5zs8BGEePhFkH8SdA=
-----END CERTIFICATE-----
Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org