Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g6k-Ua4pRx0ObqzvShFsZdkJiTs.roa
File:                     g6k-Ua4pRx0ObqzvShFsZdkJiTs.roa (raw, json)
Hash identifier:          jiyT3eWveETLkR0lWN6Huhr4fiAsVYrSqS4jjT/qW4g=
Subject key identifier:   83:A9:3E:51:AE:29:47:1D:0E:6E:AC:EF:4A:11:6C:65:D9:09:89:3B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3229
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g6k-Ua4pRx0ObqzvShFsZdkJiTs.roa
Signing time:             Mon 26 Aug 2024 05:31:21 +0000
ROA not before:           Mon 26 Aug 2024 05:31:21 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        118.232.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12841 (0x3229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:31:21 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=83A93E51AE29471D0E6EACEF4A116C65D909893B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9d:f8:0f:51:9e:1f:19:89:9e:0f:c5:cf:5c:
                    c4:25:17:f4:08:88:22:3d:20:65:b8:b2:0a:5f:8e:
                    e2:5a:95:7b:39:06:53:3c:40:c0:db:82:73:04:d7:
                    25:1d:c4:8d:12:25:dc:b0:0d:ac:68:64:be:0d:e5:
                    5d:90:39:d7:a9:58:97:e2:b5:c7:c3:18:51:9b:32:
                    76:88:1b:d3:46:1e:c7:5f:7d:26:59:7b:da:0a:b9:
                    e8:4b:61:5a:3c:cc:77:13:43:07:96:f6:0b:ed:4d:
                    c6:4a:cf:de:15:29:b8:67:e0:52:22:ea:80:b6:00:
                    12:27:ac:8b:1a:70:03:e4:4f:9c:71:4d:f0:10:d6:
                    e8:6e:61:b1:e1:bc:b5:b0:0a:ae:be:7f:ae:88:45:
                    db:dd:90:c2:4b:92:9e:3b:20:03:dc:9a:64:d4:9d:
                    c8:2e:2d:fa:d7:4f:1f:78:b8:a8:ac:f2:28:84:86:
                    46:2d:2b:78:c3:96:32:99:8b:7e:b6:20:7d:43:d0:
                    0c:93:82:1c:9b:92:16:8b:b4:9b:ce:44:da:72:62:
                    fe:82:cf:9a:a3:86:36:4b:67:ce:b5:4c:e2:57:bc:
                    fe:57:42:ab:06:3f:6e:8e:03:73:7f:00:b2:ca:d4:
                    ce:a5:0c:bf:63:9f:4e:93:eb:1e:4e:7a:8b:8c:8e:
                    bb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A9:3E:51:AE:29:47:1D:0E:6E:AC:EF:4A:11:6C:65:D9:09:89:3B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g6k-Ua4pRx0ObqzvShFsZdkJiTs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:e9:85:f8:43:40:4f:29:66:07:50:e0:d5:55:bd:50:35:3c:
         0a:ef:45:70:ed:df:b4:1c:10:60:a3:7b:07:9d:b4:e3:b0:ba:
         4d:eb:58:66:66:cd:22:94:91:bf:68:ea:5a:50:d1:6c:a0:4b:
         f3:05:a5:c4:68:c2:7b:21:42:54:b2:0c:6a:e1:38:3f:66:8d:
         c7:2b:33:80:dc:9b:00:0f:70:a4:15:12:fe:73:a4:51:44:f9:
         35:a3:f2:11:e2:19:79:13:c2:e4:ee:ea:70:7c:73:ae:66:f8:
         81:29:9a:2c:8b:f6:75:39:5a:f7:c6:a6:d7:c6:0d:3c:55:76:
         0b:64:e2:95:64:66:e9:de:8d:c5:8c:be:5c:b0:6d:2d:c9:e7:
         de:d4:04:a6:46:a8:8b:ed:88:89:ff:79:d8:13:02:91:2c:33:
         bd:09:08:68:87:3f:1a:2f:69:c7:14:db:6c:a4:b7:98:2c:c5:
         6f:fb:4d:25:8c:97:64:d9:06:56:b6:d1:41:dc:3a:62:48:87:
         05:6b:f6:33:93:32:1b:61:87:19:2a:7d:b2:5d:76:cd:94:54:
         26:dd:cb:13:19:79:3a:e8:67:5f:0a:eb:36:42:07:9c:f2:3a:
         25:07:6f:42:9b:26:f8:b6:0e:0d:db:85:78:19:87:c6:8d:9f:
         8d:f4:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:38 2024 by rpki-client on console-ams.rpki-client.org