Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_g5TLtmk05IrbyDN0wxxJE9iJFE.roa
File:                     _g5TLtmk05IrbyDN0wxxJE9iJFE.roa (raw, json)
Hash identifier:          XkpHEG/TasQ+VhuRLElexPNpU/ShHJDK0MRGMatpaCs=
Subject key identifier:   FE:0E:53:2E:D9:A4:D3:92:2B:6F:20:CD:D3:0C:71:24:4F:62:24:51
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2FF2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_g5TLtmk05IrbyDN0wxxJE9iJFE.roa
Signing time:             Mon 26 Aug 2024 05:29:00 +0000
ROA not before:           Mon 26 Aug 2024 05:29:00 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.192.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12274 (0x2ff2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:29:00 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=FE0E532ED9A4D3922B6F20CDD30C71244F622451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b2:62:66:19:96:fc:0c:20:ad:aa:1e:4e:8d:
                    60:59:87:0e:69:f2:68:10:b0:0e:df:52:f0:16:62:
                    c8:8f:ce:e0:23:7b:ac:e2:c5:73:c2:ed:ff:a5:87:
                    d1:b5:19:fc:ff:54:f6:bb:f5:30:37:4f:ad:41:8b:
                    84:d6:ff:7a:02:22:9d:0b:9c:5e:ca:e9:16:0f:33:
                    89:1d:ae:79:a7:fb:ef:8d:b7:ff:f3:95:e9:d0:35:
                    02:6c:41:18:98:98:86:88:cc:91:19:6a:1d:8f:ea:
                    45:5e:4c:a3:d1:ae:12:f0:6f:3b:de:cd:39:6a:e7:
                    d4:61:8b:e1:e2:85:da:59:3d:33:db:0b:7c:45:8c:
                    da:79:e9:0a:2a:1d:84:d1:05:8f:20:df:ae:7e:12:
                    8d:9d:87:10:b6:95:49:cf:92:17:61:97:f9:f0:6a:
                    e2:86:4c:09:f7:ab:ec:9d:10:30:5c:53:fe:e2:91:
                    fc:f7:9e:24:a0:8d:a4:4e:09:b8:93:3a:f0:4e:31:
                    8c:23:18:df:99:6f:4a:a7:b3:6b:84:86:e7:e8:61:
                    1e:4c:ff:09:b6:4d:c9:88:7e:6f:17:74:e9:f8:7d:
                    68:e7:f1:31:98:aa:a0:1f:51:a4:15:cf:fd:ff:04:
                    dd:bb:23:61:a0:25:22:cd:e5:29:50:e8:17:2f:ef:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0E:53:2E:D9:A4:D3:92:2B:6F:20:CD:D3:0C:71:24:4F:62:24:51
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_g5TLtmk05IrbyDN0wxxJE9iJFE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:f3:f8:3b:5a:9d:ad:e6:0c:a1:5e:e3:61:98:67:fe:c9:c8:
         67:56:27:f7:1f:01:30:95:9b:95:5b:68:bf:05:56:55:5a:12:
         5e:65:2f:16:88:0b:11:62:cc:0e:55:71:78:a6:f3:79:ab:f0:
         44:be:3b:55:b9:f2:03:7a:22:09:11:61:29:5b:9f:20:b2:8e:
         cd:cf:a5:ae:ad:22:fd:94:ea:21:32:a8:59:e9:e4:f2:39:fc:
         e9:ac:f6:dc:20:72:55:c5:f7:23:87:75:4c:9c:31:c5:68:e3:
         ef:84:d6:df:fd:82:90:b2:4c:1e:97:ca:db:01:af:cd:d9:4c:
         f2:f3:de:dd:d8:fd:b8:09:69:20:15:e0:99:81:0f:b5:94:c7:
         b7:4a:cd:14:53:3e:08:1c:56:cf:68:9e:90:0b:86:d7:a8:fb:
         d1:5d:40:22:05:26:b9:4c:d8:00:df:ef:30:82:20:a8:6e:d2:
         72:da:3c:cd:81:5f:13:b9:80:13:83:8e:b5:02:cc:5e:60:18:
         70:cd:97:88:57:d4:1c:3b:4e:9e:2a:d3:1c:71:f2:90:1e:14:
         b4:ed:bc:99:3b:16:bd:41:d3:2a:d7:13:1a:39:24:e1:97:70:
         f6:5d:8f:39:a7:1e:64:47:23:97:65:ed:ca:ba:fd:09:4c:b4:
         3c:0e:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org