Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ggH-e11HEA3DfzGTcEBROai0jvk.roa
File:                     ggH-e11HEA3DfzGTcEBROai0jvk.roa (raw, json)
Hash identifier:          SNpyDF2gJEnd8vx3v5mTEAT93APH7Glt3tEte5/KDT4=
Subject key identifier:   82:01:FE:7B:5D:47:10:0D:C3:7F:31:93:70:40:51:39:A8:B4:8E:F9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2A29
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ggH-e11HEA3DfzGTcEBROai0jvk.roa
Signing time:             Fri 01 Sep 2023 10:07:34 +0000
ROA not before:           Fri 01 Sep 2023 10:07:34 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.176.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10793 (0x2a29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:34 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=8201FE7B5D47100DC37F319370405139A8B48EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:73:c0:27:0e:99:2b:d5:42:d8:20:e7:23:
                    5c:e3:21:be:16:75:fb:6e:6e:ba:ae:89:c5:ca:97:
                    92:4d:6e:58:e6:be:63:1d:d2:8a:54:24:ed:f0:fd:
                    85:fc:dd:71:4a:02:23:1f:8b:4d:19:a4:74:86:49:
                    41:f7:ab:9f:a0:ad:90:2d:81:4c:6a:f3:eb:f0:b1:
                    e3:a5:d8:01:0b:eb:49:2f:28:10:97:b3:96:22:8b:
                    27:19:0b:14:2e:9a:dc:f1:d8:0c:a8:69:02:98:ea:
                    fc:71:9b:66:e8:21:08:25:ad:a5:4a:7e:1e:12:17:
                    b4:47:35:f3:aa:d5:28:c9:8c:18:c7:69:e8:a5:bb:
                    8d:a8:bb:29:5f:db:16:a8:da:c5:ef:25:36:a0:31:
                    d3:bd:bf:54:c6:41:3a:b7:16:ed:6b:01:d3:f4:8f:
                    3f:72:a7:3a:de:86:dc:0e:da:ca:b2:53:06:5a:e9:
                    26:ae:be:c3:62:28:41:51:f4:32:51:87:f2:10:4f:
                    1d:c1:d7:63:af:bc:0f:3e:24:62:65:22:85:3d:90:
                    44:21:fd:f0:00:4b:79:42:97:bf:08:42:35:57:21:
                    da:08:bd:89:ba:ac:c6:40:4c:f4:af:35:3d:8d:0b:
                    3a:ce:0b:d4:3c:05:4b:43:69:b6:5a:52:df:24:15:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:01:FE:7B:5D:47:10:0D:C3:7F:31:93:70:40:51:39:A8:B4:8E:F9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ggH-e11HEA3DfzGTcEBROai0jvk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:f0:6a:cb:97:2b:a6:b4:ae:14:c8:a3:1b:42:b7:53:bb:ca:
         78:4b:e4:53:44:b1:65:67:1f:ef:b0:a7:b5:a2:e3:94:53:b1:
         63:e7:84:53:34:5d:63:ff:94:a2:00:18:12:56:13:72:46:7c:
         c7:99:9b:14:46:de:69:bd:12:5d:1a:1d:c3:45:5a:61:94:cc:
         9a:2e:b9:a9:29:8e:18:40:ca:a6:91:4c:19:66:bb:a2:b7:af:
         5f:35:cd:f7:cb:40:57:39:66:99:fc:4a:b8:d2:eb:32:0d:f1:
         95:d3:2d:d5:a9:b6:c7:8d:3f:c0:5f:6a:43:f9:b9:72:b3:df:
         4d:60:a8:ab:10:4b:73:0a:16:3b:7b:68:f2:4e:52:90:f8:3d:
         d1:cd:ab:8e:17:09:7b:b6:88:67:cf:94:ec:a3:32:ff:98:58:
         81:3f:6e:87:7c:9c:fe:49:3d:1e:bf:d6:ab:29:b1:cc:49:3b:
         c4:42:ce:74:ee:62:a4:46:0a:aa:8f:98:a2:b6:49:57:46:b2:
         5d:d8:9b:e1:c9:35:8c:23:b5:22:84:58:c1:bd:8b:e1:6d:d2:
         a3:7b:93:89:13:0c:75:ee:bc:f3:d3:0b:61:d6:da:29:25:ee:
         f4:01:ff:9d:9f:96:e2:4d:ff:cf:88:46:21:1b:02:05:27:6c:
         63:d9:fb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org