Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eMTcI3BCpa6HphuY1M-03pwDmZQ.roa
File:                     eMTcI3BCpa6HphuY1M-03pwDmZQ.roa (raw, json)
Hash identifier:          C7DklNcDyhZTt1gJVaPOYRs1HpWAWSkxVxPfiARm7gM=
Subject key identifier:   78:C4:DC:23:70:42:A5:AE:87:A6:1B:98:D4:CF:B4:DE:9C:03:99:94
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       312B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eMTcI3BCpa6HphuY1M-03pwDmZQ.roa
Signing time:             Mon 26 Aug 2024 05:30:11 +0000
ROA not before:           Mon 26 Aug 2024 05:30:11 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9924
IP address blocks:        118.232.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12587 (0x312b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:11 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=78C4DC237042A5AE87A61B98D4CFB4DE9C039994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:90:88:3d:c5:23:06:7f:11:8f:6a:c8:1e:bd:
                    ba:62:eb:20:be:ee:13:b2:7e:e6:ae:c2:79:81:6a:
                    0f:ac:71:ff:f8:f3:89:af:51:5d:66:ca:4b:c7:b2:
                    cc:c6:fb:49:21:b4:72:15:7a:78:ce:55:6d:17:a7:
                    12:7b:ab:73:0b:e5:97:9a:97:21:81:a8:ce:1c:1f:
                    9f:26:ed:11:74:44:54:85:46:da:89:94:31:a1:e7:
                    3b:f7:03:a1:9b:5b:76:e0:45:1a:60:f7:2f:dc:a4:
                    0f:d5:7c:09:36:7a:79:8c:49:d0:48:06:d1:f4:a3:
                    9e:bd:93:27:84:0f:37:a3:29:92:c0:00:7b:f7:ed:
                    c4:0c:a3:c8:de:e8:90:e3:dd:9b:b4:c9:27:15:4a:
                    1b:d1:d8:1d:98:36:5b:e8:22:4c:60:e6:0a:6e:cd:
                    8a:09:e8:f1:77:93:57:2c:0c:f6:8f:8d:48:8f:31:
                    12:61:3b:f5:2a:a8:98:9e:58:ff:13:97:ca:14:76:
                    98:82:dd:55:3d:48:08:bf:f3:64:4f:cd:05:3f:d8:
                    f6:bf:cd:38:25:bf:9a:7d:c8:a2:b2:5d:21:36:de:
                    e8:f9:a5:ec:34:3c:e1:e3:e4:63:ed:b0:7c:5c:12:
                    9d:ed:37:b1:ae:ef:3f:aa:10:63:06:93:cc:a8:ef:
                    9d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C4:DC:23:70:42:A5:AE:87:A6:1B:98:D4:CF:B4:DE:9C:03:99:94
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eMTcI3BCpa6HphuY1M-03pwDmZQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         51:0c:3a:65:96:e2:34:fe:b5:a2:57:2d:08:40:22:d3:07:a1:
         34:f9:29:91:7a:1a:f4:7f:13:19:5a:61:0f:92:ae:a8:8d:79:
         92:24:63:cc:01:c4:b3:13:e5:0b:e3:2b:f1:f0:44:78:1a:64:
         b3:29:d9:a3:4b:71:95:b3:be:92:bf:65:1c:e3:57:c7:29:02:
         85:eb:55:df:43:0b:34:ab:05:7b:33:e2:7d:dc:38:ad:1a:c7:
         e9:6a:41:ed:0e:65:e9:ed:09:69:c1:ca:30:38:9f:73:43:6e:
         ab:47:6b:08:a1:55:31:22:38:81:80:98:c2:1a:fd:85:e4:10:
         1a:98:68:74:6e:53:41:e7:ff:9c:bd:e0:3e:8f:be:17:97:9d:
         29:c6:2e:bc:c6:a1:9a:eb:f6:90:e9:1a:44:6b:de:c1:50:7b:
         0b:48:92:fd:a9:b5:c6:e5:b0:40:f1:98:ca:a8:c7:9e:e2:1c:
         7c:5a:03:1c:e0:1c:00:fd:87:71:cc:fd:30:89:cd:b7:55:32:
         00:3a:a5:01:55:0b:dc:f5:89:2d:b1:18:30:5e:67:99:18:98:
         64:3b:72:f0:b6:8e:d8:dd:ba:f5:a1:48:de:6c:47:84:89:57:
         68:eb:18:2d:48:40:34:89:d7:2b:e6:6e:22:37:56:b1:f6:0b:
         31:86:03:ee
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMSswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMwMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc4QzREQzIzNzA0MkE1
QUU4N0E2MUI5OEQ0Q0ZCNERFOUMwMzk5OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtkIg9xSMGfxGPasgevbpi6yC+7hOyfuauwnmBag+scf/484mv
UV1mykvHsszG+0khtHIVenjOVW0XpxJ7q3ML5ZealyGBqM4cH58m7RF0RFSFRtqJ
lDGh5zv3A6GbW3bgRRpg9y/cpA/VfAk2enmMSdBIBtH0o569kyeEDzejKZLAAHv3
7cQMo8je6JDj3Zu0yScVShvR2B2YNlvoIkxg5gpuzYoJ6PF3k1csDPaPjUiPMRJh
O/UqqJieWP8Tl8oUdpiC3VU9SAi/82RPzQU/2Pa/zTglv5p9yKKyXSE23uj5pew0
POHj5GPtsHxcEp3tN7Gu7z+qEGMGk8yo7529AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUeMTcI3BCpa6HphuY1M+03pwDmZQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VNVGNJM0JDcGE2SHBodVkx
TS0wM3B3RG1aUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2
6AAwDQYJKoZIhvcNAQELBQADggEBAFEMOmWW4jT+taJXLQhAItMHoTT5KZF6GvR/
ExlaYQ+SrqiNeZIkY8wBxLMT5QvjK/HwRHgaZLMp2aNLcZWzvpK/ZRzjV8cpAoXr
Vd9DCzSrBXsz4n3cOK0ax+lqQe0OZentCWnByjA4n3NDbqtHawihVTEiOIGAmMIa
/YXkEBqYaHRuU0Hn/5y94D6PvheXnSnGLrzGoZrr9pDpGkRr3sFQewtIkv2ptcbl
sEDxmMqox57iHHxaAxzgHAD9h3HM/TCJzbdVMgA6pQFVC9z1iS2xGDBeZ5kYmGQ7
cvC2jtjduvWhSN5sR4SJV2jrGC1IQDSJ1yvmbiI3VrH2CzGGA+4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:38 2024 by rpki-client on console-ams.rpki-client.org