Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bqigTmeG1DELXLc_b_EvdXPv4go.roa
File:                     bqigTmeG1DELXLc_b_EvdXPv4go.roa (raw, json)
Hash identifier:          O3ULWcmITZeP2MrNcpwwE9OAHpvCMUeCggRi9dN7ZT4=
Subject key identifier:   6E:A8:A0:4E:67:86:D4:31:0B:5C:B7:3F:6F:F1:2F:75:73:EF:E2:0A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3005
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bqigTmeG1DELXLc_b_EvdXPv4go.roa
Signing time:             Mon 26 Aug 2024 05:29:04 +0000
ROA not before:           Mon 26 Aug 2024 05:29:04 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        106.1.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12293 (0x3005)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:29:04 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6EA8A04E6786D4310B5CB73F6FF12F7573EFE20A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:18:2a:50:bb:ea:d4:b5:ac:4c:e0:bf:52:e1:
                    e1:06:0c:f9:82:00:31:60:ba:ba:ef:18:47:7b:21:
                    6c:6e:e2:d1:d7:f1:9a:75:3c:38:c6:25:00:dd:7e:
                    2a:1f:82:4b:48:c4:4e:75:af:2b:09:52:84:83:1d:
                    3e:3c:64:fe:bc:e3:dc:c6:7d:d9:70:28:6f:39:5e:
                    5e:b4:c4:b0:7d:e3:44:d1:69:b2:8d:6c:8d:1c:ce:
                    3d:f8:c1:be:c9:40:7b:08:d3:39:6b:73:36:a6:8f:
                    5f:19:c2:eb:8f:2d:3d:02:52:ca:52:e8:4c:1d:a7:
                    d9:c6:9c:3f:2a:3f:78:c0:d6:7a:67:f2:e8:6c:eb:
                    51:b8:a8:e7:c5:9c:35:5e:34:cd:e8:b0:7b:37:4e:
                    8a:99:38:98:18:2c:74:5e:d3:66:b1:62:3a:36:b8:
                    b4:f3:84:f4:42:ae:52:ce:03:7c:11:1a:71:4c:40:
                    af:da:3b:98:99:30:7c:7d:3c:8e:49:57:a5:c3:fb:
                    6b:46:85:f2:51:dd:35:53:be:6d:c4:c8:a8:51:33:
                    b8:89:11:b2:27:ca:34:aa:96:65:f1:f9:74:74:a6:
                    fa:9a:dd:37:8d:08:2f:6f:f4:d9:86:c4:a7:96:86:
                    30:ed:a7:c5:84:2a:6c:51:61:3a:69:c6:d9:81:86:
                    90:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A8:A0:4E:67:86:D4:31:0B:5C:B7:3F:6F:F1:2F:75:73:EF:E2:0A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bqigTmeG1DELXLc_b_EvdXPv4go.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:a0:8d:d1:4f:ad:b5:1f:84:8c:03:75:f6:d3:15:83:45:73:
         1e:ce:b3:71:60:a0:a6:97:ab:4a:5f:c5:57:8c:1d:1a:e6:ec:
         54:df:28:a1:16:91:32:4f:9d:89:7e:24:c0:69:fa:a5:7a:df:
         5c:a7:3c:91:42:23:66:e2:ee:cf:c6:ba:ee:00:94:df:c0:51:
         78:89:33:aa:50:62:43:e9:ff:d7:d6:09:85:a6:98:a5:08:f1:
         7b:cb:32:b7:bb:03:44:c6:24:78:b1:28:f3:94:06:f0:c7:30:
         b8:d5:c0:58:a1:ec:53:ee:49:34:d3:e8:6c:b2:3e:43:b9:b4:
         fc:11:ab:55:c4:89:aa:2e:83:b7:dd:2d:32:72:52:ef:81:5f:
         31:98:4e:17:d8:4d:63:19:3c:e4:f6:99:8c:c9:a8:e7:62:a1:
         57:de:ea:80:bc:45:21:98:9d:49:e8:ef:fb:26:71:a7:03:df:
         99:48:c6:4f:20:00:01:1b:c1:a9:68:48:63:31:12:cd:ee:71:
         e1:a6:f5:38:dc:02:ae:82:10:f6:ac:df:4b:e3:46:42:53:32:
         67:34:b9:6a:4c:58:63:79:6b:ec:3a:8c:41:86:c7:ea:75:a7:
         f5:7b:ff:76:a5:f6:9d:5e:fd:1e:1b:2a:9a:66:42:09:77:22:
         1e:d8:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:57 2024 by rpki-client on console-fra.rpki-client.org