Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ap6_xOHshXEV_gSIMt7WChcTAkM.roa
File:                     ap6_xOHshXEV_gSIMt7WChcTAkM.roa (raw, json)
Hash identifier:          ABfeGozRG8/4mC/4NULMD4zvXxbJ0IVrRgG5CDiWcRw=
Subject key identifier:   6A:9E:BF:C4:E1:EC:85:71:15:FE:04:88:32:DE:D6:0A:17:13:02:43
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2AC8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ap6_xOHshXEV_gSIMt7WChcTAkM.roa
Signing time:             Fri 01 Sep 2023 10:08:17 +0000
ROA not before:           Fri 01 Sep 2023 10:08:17 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        106.1.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10952 (0x2ac8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:08:17 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6A9EBFC4E1EC857115FE048832DED60A17130243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0a:ed:4d:44:8d:81:28:c2:75:1d:6b:81:79:
                    14:cc:b2:d0:3e:f1:97:64:99:82:0a:23:fe:d3:f8:
                    97:72:5c:1e:fc:63:18:9d:46:f2:4d:38:fc:50:e9:
                    bb:08:14:97:b3:54:27:e2:35:c2:d0:c7:fd:06:b6:
                    80:35:e6:fa:92:bb:68:72:ad:7a:12:ac:70:9b:59:
                    b7:e4:16:d7:99:16:5b:39:d3:52:7b:a1:84:6f:f6:
                    bc:7a:4b:cc:d4:32:f7:60:c3:5c:6d:fe:8a:a3:bc:
                    20:1b:a5:7c:7e:29:9d:28:ce:15:5b:e9:d7:1f:d0:
                    a0:9e:55:77:a5:93:74:33:45:89:1b:1c:f4:3c:59:
                    95:f3:e8:55:39:87:c1:ff:fb:3f:84:da:aa:c8:c6:
                    97:03:f9:91:e3:47:6b:82:35:8c:0f:f5:9d:c2:81:
                    be:67:2f:d0:c6:4f:3d:a2:53:d4:13:f0:96:1a:61:
                    21:c7:39:2a:23:07:ca:24:5d:be:22:f0:f0:9a:09:
                    fb:b3:51:bd:6f:a9:f4:94:70:e0:b8:d5:30:3f:30:
                    34:e1:57:3a:33:51:5b:0f:f8:c4:5f:2b:ae:47:99:
                    83:4a:da:46:e3:4b:67:87:a8:2f:3f:bd:44:d2:bc:
                    b5:24:1a:92:55:16:e1:cb:71:d3:ac:d6:41:39:0a:
                    13:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9E:BF:C4:E1:EC:85:71:15:FE:04:88:32:DE:D6:0A:17:13:02:43
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ap6_xOHshXEV_gSIMt7WChcTAkM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:1f:f9:01:d3:64:17:ff:ac:a6:33:fe:3e:85:6b:36:cc:49:
         1b:2f:1d:18:f4:ac:b7:8c:4d:80:e7:21:8d:91:03:24:94:12:
         49:71:69:56:5f:ae:f5:c6:12:c1:c0:2f:e1:8a:96:52:92:45:
         45:eb:93:ee:ea:fa:a1:38:37:d3:15:ea:18:1b:cb:eb:11:fd:
         c8:01:ca:85:84:33:7d:8d:0a:4b:6d:3f:08:8c:b6:be:12:45:
         13:11:00:55:cb:b5:e6:ab:a7:60:25:42:2e:39:dd:a2:c5:68:
         e3:b8:ea:9a:22:ae:20:69:90:fd:1c:0c:19:1b:31:9b:4c:f4:
         85:3a:f7:21:4b:17:7c:83:69:15:6c:a1:8e:88:cc:0d:f6:a5:
         4a:46:86:83:f0:ae:f4:f2:87:46:2a:3d:71:07:a7:7a:82:39:
         df:1d:3b:24:7b:7d:f2:1b:de:fd:22:29:2d:13:48:ca:1a:ac:
         9b:4f:3f:1a:48:e2:c7:cc:e0:4d:35:7f:b4:8a:e7:44:fe:47:
         4a:d5:9f:fa:ef:9b:09:0f:cc:80:99:b6:0f:78:7e:e8:3f:35:
         e2:b4:27:84:96:83:37:ff:44:74:95:3d:fa:7b:19:74:02:cc:
         de:06:1e:64:9a:99:dd:78:c8:7a:2f:fa:75:d8:40:3d:62:72:
         b9:65:9a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org