Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ewpxFwSUHWETCs6gqInh7dHiDq8.roa
File:                     ewpxFwSUHWETCs6gqInh7dHiDq8.roa (raw, json)
Hash identifier:          wvRVLVwuFUAc/t22+9AnK1UIWRg96h4jYSsBNQY2QsY=
Subject key identifier:   7B:0A:71:17:04:94:1D:61:13:0A:CE:A0:A8:89:E1:ED:D1:E2:0E:AF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       31CB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ewpxFwSUHWETCs6gqInh7dHiDq8.roa
Signing time:             Mon 26 Aug 2024 05:30:57 +0000
ROA not before:           Mon 26 Aug 2024 05:30:57 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        118.233.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 00:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12747 (0x31cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:57 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=7B0A711704941D61130ACEA0A889E1EDD1E20EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cf:0f:c2:0d:51:1c:eb:08:f8:e8:2a:76:cd:
                    df:56:a8:40:95:87:40:16:92:51:de:44:1a:f7:6d:
                    bc:eb:4a:66:94:dd:d8:37:79:97:23:38:f9:44:8d:
                    cf:ea:b5:2e:ee:b3:a5:e5:70:6c:83:d5:1b:ee:dd:
                    59:a9:77:0b:6d:ec:70:36:71:ad:1c:3c:d9:41:d7:
                    dc:77:45:c9:23:fc:36:60:fb:f9:be:f7:97:d2:36:
                    e4:14:78:5b:21:f5:99:9a:46:6f:f3:75:e6:64:68:
                    21:12:41:c6:7f:c1:69:3f:3d:d1:85:4d:91:56:93:
                    47:b2:fd:de:69:f5:21:7f:c8:e9:6f:b5:a0:c8:ff:
                    ba:e7:35:c8:74:78:c4:35:98:98:e6:81:f5:fa:1e:
                    dd:80:f1:33:11:89:fd:a4:93:ec:3d:18:12:c7:36:
                    c0:94:2f:2d:aa:78:11:ad:37:d7:d2:41:66:54:95:
                    a3:8c:3d:52:5e:ad:92:01:78:42:92:f2:94:46:22:
                    a4:e0:9e:6b:51:dd:d4:9c:c3:b5:97:c3:49:45:82:
                    64:d8:62:bb:40:7e:0f:64:b8:91:7c:f2:11:dc:41:
                    45:6e:84:d4:e2:2b:be:6e:09:0d:35:72:9d:b6:14:
                    e1:98:50:04:0e:ee:a4:c3:68:43:58:2e:a7:37:3d:
                    3a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0A:71:17:04:94:1D:61:13:0A:CE:A0:A8:89:E1:ED:D1:E2:0E:AF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ewpxFwSUHWETCs6gqInh7dHiDq8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:38:c8:ae:18:01:e5:06:25:c9:b7:3c:96:54:c7:11:89:b4:
         88:31:f2:a7:70:80:bd:7d:d2:ba:3f:dd:fe:17:96:da:be:2f:
         d0:29:3b:c6:f4:14:8d:76:38:cf:15:c9:e0:6a:9f:0e:39:4e:
         22:03:98:f6:f1:e2:01:50:20:b7:39:79:95:b3:c8:3c:76:59:
         4b:45:23:d0:e0:1b:83:17:4a:6c:ec:a8:26:7d:a7:c1:33:a6:
         0a:6f:a5:05:22:1e:43:69:ef:a9:fa:12:9e:fb:89:56:ce:82:
         61:85:7c:17:3a:4c:c3:e4:7b:43:87:99:c7:71:d8:90:be:bb:
         39:5f:7c:69:f8:6b:6a:41:28:74:1d:d8:21:9d:ee:7b:22:0f:
         e8:1b:fe:46:df:c1:d8:12:60:0e:b8:bc:22:ef:3a:9f:88:cc:
         48:f3:e3:3b:6d:91:14:1b:5a:e1:ce:5a:b2:36:38:e6:1f:56:
         68:56:34:3c:66:3a:fa:4c:dd:67:13:2e:26:bb:e2:db:7f:4b:
         ca:aa:d7:36:d6:7c:6c:d8:9c:85:c1:d6:51:06:f4:4f:39:8d:
         e0:69:0e:bc:74:2d:ac:25:f9:e6:fc:90:58:09:65:0a:49:64:
         60:e2:8c:b4:60:5d:19:d5:96:87:d5:d4:b0:32:f5:2b:89:7a:
         dd:6f:2d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org