Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_JjkSenrn5uSO_1dstnJRQsK1Nw.roa
File:                     _JjkSenrn5uSO_1dstnJRQsK1Nw.roa (raw, json)
Hash identifier:          tsdekpVjiP/VGaTt4xNa/PuFfuxkZhh1p5YnWhRQ3Aw=
Subject key identifier:   FC:98:E4:49:E9:EB:9F:9B:92:3B:FD:5D:B2:D9:C9:45:0B:0A:D4:DC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       283D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_JjkSenrn5uSO_1dstnJRQsK1Nw.roa
Signing time:             Fri 01 Sep 2023 10:05:06 +0000
ROA not before:           Fri 01 Sep 2023 10:05:06 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.195.9.64/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10301 (0x283d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:06 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=FC98E449E9EB9F9B923BFD5DB2D9C9450B0AD4DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:74:f4:2a:e6:6b:25:b8:34:66:97:46:a0:20:
                    4b:32:ad:74:61:bd:a4:c1:93:08:f5:83:93:13:1f:
                    ed:0f:6f:43:a7:bc:e0:db:2e:6b:3d:fc:3d:14:24:
                    f1:9d:16:2c:5b:96:79:17:7d:9d:a7:d3:eb:87:bd:
                    83:cf:83:c9:e8:25:82:18:e1:fa:c3:4d:40:7b:ad:
                    1e:46:37:7f:3c:aa:f5:3c:e3:1f:52:2b:4c:01:d0:
                    f0:2e:29:f9:4a:7a:fb:d3:81:cb:0d:89:5a:31:47:
                    29:94:5c:52:07:95:9c:10:9b:91:af:ac:9f:7d:ea:
                    9b:8c:7d:5d:ae:eb:01:12:39:81:d2:fe:6c:93:89:
                    5c:3e:06:b0:eb:a5:4b:f7:8e:66:24:9e:a6:c6:18:
                    07:d7:a0:27:b2:f2:80:0c:61:05:8c:c4:8d:47:49:
                    2d:78:86:fc:c5:5a:a2:7c:92:fd:e2:cf:59:8f:98:
                    8b:8e:23:92:c6:49:a5:04:ff:b5:6d:5d:83:85:80:
                    18:c1:6d:14:2f:8d:39:4f:99:63:79:37:99:22:3d:
                    28:d3:b7:34:54:aa:9d:b7:fe:ae:30:01:e7:85:aa:
                    9c:09:03:54:67:06:20:01:3b:e3:c2:96:f2:8a:6f:
                    68:a2:88:a4:ed:e3:dc:da:59:14:19:cb:7f:9f:da:
                    4c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:98:E4:49:E9:EB:9F:9B:92:3B:FD:5D:B2:D9:C9:45:0B:0A:D4:DC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_JjkSenrn5uSO_1dstnJRQsK1Nw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.9.64/26

    Signature Algorithm: sha256WithRSAEncryption
         61:99:f9:96:9f:ce:f2:d6:c5:1f:64:21:e2:70:d7:c1:91:d5:
         c8:56:20:2c:4d:80:a2:63:7d:b6:c1:f3:90:0d:d3:c2:5b:67:
         48:49:91:89:98:ab:9f:41:f4:fe:69:13:b3:7d:1d:52:0b:64:
         2e:ae:f7:91:e5:67:f4:40:c2:20:70:83:3b:0d:99:8b:22:94:
         c3:96:45:8a:0d:27:e7:28:14:27:3c:db:23:45:53:7e:92:5c:
         96:37:05:9f:22:2b:c5:45:07:58:32:0e:1c:7b:6c:19:73:33:
         6f:84:db:45:6f:aa:93:d8:6d:e2:5b:03:80:cf:08:37:1d:ab:
         b1:c6:94:40:74:3f:5b:9e:26:03:2c:d2:7f:96:48:e6:af:c8:
         a5:af:24:33:2b:e4:fb:30:b7:28:13:1a:5e:9d:52:d8:9c:1a:
         15:35:95:d0:4d:12:43:92:4d:ad:19:6e:98:d2:05:ff:a6:73:
         4e:81:50:16:e3:f1:e7:db:e4:07:e0:10:3b:4d:37:5d:35:2e:
         b7:5a:9c:00:b6:73:f9:40:be:4f:4a:83:27:4b:ed:1a:d3:ea:
         f0:7d:dd:40:10:3a:d8:c4:c6:df:4f:fe:63:29:fb:34:e9:ab:
         0f:69:61:82:b4:48:59:45:d5:83:0c:56:69:ae:e8:94:14:2b:
         7d:c2:19:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org