Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_wt-KbopcWz6OlSW4lI1m86-Br0.roa
File:                     _wt-KbopcWz6OlSW4lI1m86-Br0.roa (raw, json)
Hash identifier:          nCGHjNORdH3wN4N6KIsuBW1zxdv07bJSMGIQ1qJWwrw=
Subject key identifier:   FF:0B:7E:29:BA:29:71:6C:FA:3A:54:96:E2:52:35:9B:CE:BE:06:BD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       327B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_wt-KbopcWz6OlSW4lI1m86-Br0.roa
Signing time:             Mon 26 Aug 2024 05:31:42 +0000
ROA not before:           Mon 26 Aug 2024 05:31:42 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        106.1.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 00:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12923 (0x327b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:31:42 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=FF0B7E29BA29716CFA3A5496E252359BCEBE06BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a9:f5:55:04:89:ef:5a:fa:eb:48:5e:28:39:
                    6a:a9:24:39:44:eb:c0:83:23:b5:36:bc:01:b4:81:
                    9e:a5:c2:5f:00:68:88:0b:c2:3c:b5:67:fd:2d:82:
                    b1:17:bd:57:e5:39:67:e9:4c:de:46:42:2e:f5:64:
                    05:e3:98:15:c7:aa:20:77:75:4a:91:28:ee:ca:6a:
                    ff:cb:df:5e:71:12:0a:ce:b0:cb:bd:4b:b8:ae:d3:
                    45:53:1d:c9:e3:7d:bd:ab:22:d0:1a:24:70:07:39:
                    c9:f5:88:83:bd:a3:97:26:24:3e:4c:08:71:f7:09:
                    b3:d5:92:49:cd:73:8a:64:a7:fc:b8:cd:09:71:8f:
                    06:7b:74:6f:d8:09:ee:b6:10:09:76:56:f8:b2:70:
                    e9:82:a9:e8:88:6e:8d:aa:96:2b:96:88:41:74:c5:
                    00:ca:92:6f:e3:7b:d8:55:47:11:45:51:7c:49:64:
                    b4:58:e0:67:51:be:95:09:5d:44:db:ce:fc:99:ea:
                    c1:16:24:02:95:ef:ac:b8:88:56:a9:38:ae:b6:2a:
                    5f:a0:66:55:c0:44:73:34:62:0a:3a:ac:95:9e:a6:
                    91:ca:db:ad:15:8d:94:26:b4:79:71:8a:1b:fb:9d:
                    0c:22:c1:0e:00:9d:de:59:a2:3e:8b:9c:5f:60:39:
                    c7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0B:7E:29:BA:29:71:6C:FA:3A:54:96:E2:52:35:9B:CE:BE:06:BD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_wt-KbopcWz6OlSW4lI1m86-Br0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:83:ef:d9:06:df:30:f4:7d:2e:f7:e7:ce:d7:bf:33:c8:d6:
         9b:a7:1e:db:23:8e:47:74:15:2a:38:9f:c0:b6:44:45:0c:f5:
         81:bb:29:08:46:17:37:4b:68:9d:bf:db:f3:3a:37:e0:35:bc:
         f5:ec:d6:7b:b3:cb:39:d7:85:31:27:77:af:52:69:c7:18:a3:
         f7:0e:59:a4:e9:3c:c8:e6:c3:ac:59:12:ce:c6:18:95:6c:70:
         79:bf:06:eb:1f:cc:4e:1e:ba:39:79:d8:69:7f:a3:42:d2:e9:
         2f:44:61:d5:9e:32:87:fd:80:d5:c7:b8:71:94:2d:59:1c:01:
         94:76:1d:5b:46:df:a2:c3:c5:aa:1c:b8:64:dc:ab:6f:9e:45:
         5b:60:f7:81:68:e9:4b:a3:2d:3c:01:f8:f6:59:a7:da:11:ab:
         61:ae:b3:18:33:01:58:49:fc:db:6b:90:c7:53:f8:50:c2:d0:
         b6:25:ee:d0:59:74:a8:dc:a3:9b:73:0f:4d:c7:fb:f4:09:38:
         59:23:95:fd:7a:51:82:26:77:4a:b3:5e:39:c4:1c:fb:f5:23:
         fa:5f:6b:93:17:d1:7d:f5:12:a4:81:47:2f:3f:6e:bc:f2:7f:
         11:2d:8b:44:8f:a8:42:f0:4c:00:25:7b:91:e3:38:cb:cc:76:
         b1:60:06:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org