Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_hO-oZXr0lxTuxNna0xk-1N9-Vc.roa
File:                     _hO-oZXr0lxTuxNna0xk-1N9-Vc.roa (raw, json)
Hash identifier:          Na/loD9ir9KFmXH8bAJ0MgvsOtdqLrviMR4gTO0QdQ8=
Subject key identifier:   FE:13:BE:A1:95:EB:D2:5C:53:BB:13:67:6B:4C:64:FB:53:7D:F9:57
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2FEB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_hO-oZXr0lxTuxNna0xk-1N9-Vc.roa
Signing time:             Mon 26 Aug 2024 05:28:59 +0000
ROA not before:           Mon 26 Aug 2024 05:28:59 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 00:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12267 (0x2feb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:28:59 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=FE13BEA195EBD25C53BB13676B4C64FB537DF957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:66:40:bf:cd:5c:bf:3a:20:e3:f9:88:cc:
                    c1:8f:55:5a:8b:b6:e9:fa:05:fd:a6:67:aa:1e:b8:
                    c4:ff:ae:e7:ab:30:bc:36:df:70:70:28:46:5a:6a:
                    ec:cd:0d:b7:b2:fd:7b:ee:82:7f:32:56:0b:8b:b4:
                    e1:44:f4:69:4d:a3:89:0b:ca:b8:a3:fe:ef:0b:40:
                    4d:ec:71:f6:24:89:4b:8f:53:53:13:31:32:44:d7:
                    70:5b:b0:0b:c0:1b:09:27:6b:86:89:af:ad:2b:08:
                    d9:84:2e:d2:a3:f7:ab:63:c8:34:9f:d8:af:bc:23:
                    f1:c4:44:e6:bc:86:50:81:d1:8f:8e:d3:9a:cb:af:
                    fd:54:32:6a:2f:cd:88:0c:9e:d3:3e:7d:ba:3c:c7:
                    e6:e7:a8:4f:8c:d4:6d:70:aa:21:73:2e:c7:2f:4a:
                    55:3c:5d:c8:d3:6c:4d:b3:29:f9:19:1d:7d:ea:ed:
                    19:88:89:3e:7a:16:4b:e4:43:9c:6a:92:ff:27:33:
                    2e:5b:95:02:e0:9a:7c:8a:eb:c5:69:7c:3a:1d:6d:
                    47:bf:19:c9:ea:f6:e1:84:ef:5b:7a:54:a2:3e:65:
                    48:da:84:7d:04:48:7e:82:19:5b:8c:4f:8f:1d:e5:
                    f4:2f:a1:1d:08:da:3c:5f:e9:c2:95:ac:4f:3d:60:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:13:BE:A1:95:EB:D2:5C:53:BB:13:67:6B:4C:64:FB:53:7D:F9:57
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_hO-oZXr0lxTuxNna0xk-1N9-Vc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:23:c3:0d:f0:fd:7c:db:2e:74:f6:cb:75:9e:d2:8e:c4:78:
         97:6f:90:bd:f2:72:68:78:69:30:1e:44:a5:91:7b:ec:c5:ec:
         89:f8:b0:07:c5:ed:0b:56:df:d8:d6:01:76:44:bb:ca:01:2c:
         ad:71:68:97:80:23:e6:94:ab:85:31:7a:aa:de:20:74:b2:e2:
         9a:eb:08:60:a4:b0:7b:af:c4:d8:a6:8e:5e:7d:f5:11:9d:86:
         e6:7b:a9:98:bc:f0:73:31:17:7e:80:0d:a5:9c:58:90:78:39:
         9a:08:11:40:d7:49:eb:40:1d:4a:ac:c1:93:39:de:b0:e2:1b:
         8c:03:13:6a:1e:15:2b:a8:b0:33:0c:e4:f7:a3:fe:4c:ce:f5:
         9e:3c:db:c5:b3:53:c5:bd:44:0d:d7:9a:06:f8:57:54:9e:9e:
         f9:15:11:52:f6:61:5a:e7:8d:04:4e:e0:fd:0c:b9:45:78:c6:
         b2:79:a1:29:43:42:25:31:e6:2c:1e:8f:28:2f:1e:24:e2:5c:
         53:8f:7b:33:2a:6b:37:85:6b:0a:d9:41:ab:80:6a:61:b2:99:
         fb:03:9b:87:27:0e:e2:4d:15:0f:74:bc:61:a6:a8:2c:3a:e5:
         ba:8a:86:71:a5:fb:5b:c8:cc:9a:f4:41:a9:f6:56:d8:d4:51:
         f1:f1:74:f7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICL+swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTI4NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZFMTNCRUExOTVFQkQy
NUM1M0JCMTM2NzZCNEM2NEZCNTM3REY5NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwxGZAv81cvzog4/mIzMGPVVqLtun6Bf2mZ6oeuMT/ruerMLw2
33BwKEZaauzNDbey/Xvugn8yVguLtOFE9GlNo4kLyrij/u8LQE3scfYkiUuPU1MT
MTJE13BbsAvAGwkna4aJr60rCNmELtKj96tjyDSf2K+8I/HEROa8hlCB0Y+O05rL
r/1UMmovzYgMntM+fbo8x+bnqE+M1G1wqiFzLscvSlU8XcjTbE2zKfkZHX3q7RmI
iT56FkvkQ5xqkv8nMy5blQLgmnyK68VpfDodbUe/Gcnq9uGE71t6VKI+ZUjahH0E
SH6CGVuMT48d5fQvoR0I2jxf6cKVrE89YAidAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/hO+oZXr0lxTuxNna0xk+1N9+VcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19oTy1vWlhyMGx4VHV4Tm5h
MHhrLTFOOS1WYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sRwwDQYJKoZIhvcNAQELBQADggEBAIojww3w/XzbLnT2y3We0o7EeJdvkL3ycmh4
aTAeRKWRe+zF7In4sAfF7QtW39jWAXZEu8oBLK1xaJeAI+aUq4UxeqreIHSy4prr
CGCksHuvxNimjl599RGdhuZ7qZi88HMxF36ADaWcWJB4OZoIEUDXSetAHUqswZM5
3rDiG4wDE2oeFSuosDMM5Pej/kzO9Z4828WzU8W9RA3Xmgb4V1SenvkVEVL2YVrn
jQRO4P0MuUV4xrJ5oSlDQiUx5iwejygvHiTiXFOPezMqazeFawrZQauAamGymfsD
m4cnDuJNFQ90vGGmqCw65bqKhnGl+1vIzJr0Qan2VtjUUfHxdPc=
-----END CERTIFICATE-----
Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org