Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gJcHMt44F576lMyg8RlwLuwsCh8.roa
File:                     gJcHMt44F576lMyg8RlwLuwsCh8.roa (raw, json)
Hash identifier:          DhM2XKd7r1c8rnFQNuQVApN5gwsBx+TZ3EdmtB/x7rQ=
Subject key identifier:   80:97:07:32:DE:38:17:9E:FA:94:CC:A0:F1:19:70:2E:EC:2C:0A:1F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3174
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gJcHMt44F576lMyg8RlwLuwsCh8.roa
Signing time:             Mon 26 Aug 2024 05:30:28 +0000
ROA not before:           Mon 26 Aug 2024 05:30:28 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12660 (0x3174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:28 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=80970732DE38179EFA94CCA0F119702EEC2C0A1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:4b:d1:36:40:92:c8:4c:f2:20:87:54:f0:
                    43:5e:df:18:1e:56:4f:13:b6:75:8b:28:b4:b1:0a:
                    90:bb:ff:19:52:d5:ee:9f:2b:67:d3:ca:ac:d3:0a:
                    ef:55:0f:0b:5e:28:a3:a4:61:4d:51:fe:ab:a4:89:
                    45:2f:d0:2e:96:54:b7:c5:3f:06:33:a3:18:2c:d4:
                    69:12:9d:ca:ff:06:9f:5a:bf:07:33:f3:b4:16:76:
                    43:6f:e5:98:ae:ac:f9:ac:0e:7e:50:d4:05:36:90:
                    fe:08:23:e0:5f:86:5b:f9:bb:8a:f2:79:47:8f:d7:
                    2d:d9:67:5a:a8:a9:55:b2:b7:9b:46:0f:1b:48:79:
                    64:2c:9e:1a:f6:31:70:39:cc:24:e4:6b:60:a4:a4:
                    6a:1c:0e:8b:5e:67:9e:20:b1:35:fb:84:82:d4:46:
                    25:8e:08:cd:0b:9b:a6:e4:1b:b9:94:64:45:34:d9:
                    70:94:6a:82:4a:2e:23:4d:ec:6d:86:91:c0:60:14:
                    77:ce:f4:61:40:06:d0:c8:de:83:47:9f:e1:49:a1:
                    08:72:6e:cd:12:e3:d7:cc:48:15:07:30:67:87:10:
                    df:2e:07:f6:ce:0f:95:71:22:39:ac:54:56:f3:8d:
                    2a:b4:67:80:1c:d4:4e:82:fc:77:00:87:1e:f0:01:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:97:07:32:DE:38:17:9E:FA:94:CC:A0:F1:19:70:2E:EC:2C:0A:1F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gJcHMt44F576lMyg8RlwLuwsCh8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:84:74:ec:0e:6a:7a:6b:13:83:01:04:4d:6b:e2:0f:5b:d8:
         ec:b1:5c:78:93:1b:58:d6:8d:84:31:40:dc:91:40:fe:1a:65:
         31:4f:70:68:8f:82:0f:03:cb:17:78:cc:78:ed:2c:00:29:bc:
         fd:83:82:1a:40:17:25:94:0f:f3:b5:df:5c:99:a0:2d:33:ce:
         59:0f:ae:c9:d6:79:0e:3e:91:17:37:0a:f4:44:b3:66:19:36:
         21:99:44:f6:21:55:cc:4a:c9:ea:4e:3d:b8:ae:97:82:43:ce:
         19:83:8c:8e:55:19:56:41:a9:73:f3:cc:3e:94:8b:3c:3e:f9:
         e4:41:b3:5f:81:1b:cb:96:53:41:d4:ec:2a:58:1d:1b:cb:3e:
         d5:58:97:a5:30:e0:97:98:bc:e1:6e:ec:5b:c7:07:c5:05:95:
         f7:f7:89:bf:91:e7:09:83:37:da:4d:00:ba:09:28:59:45:fa:
         54:79:20:20:18:8a:44:25:39:22:3c:d6:d0:09:a1:86:04:17:
         fb:86:d7:2b:76:25:25:4d:17:c5:49:18:62:fc:ef:71:e5:76:
         89:48:06:7a:08:6d:d0:80:a6:48:cd:e1:f1:ed:67:ea:f2:69:
         19:22:98:75:df:cd:6a:f3:32:ac:9e:f1:bb:26:60:0b:91:5c:
         0d:36:87:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:51 2024 by rpki-client on console-fra.rpki-client.org