Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jq8UkuKyMSbvst4CkJ-P88PFPL0.roa
File:                     jq8UkuKyMSbvst4CkJ-P88PFPL0.roa (raw, json)
Hash identifier:          IPNzwyusOQmFgRcijLKbwZCZGTeuMOQu17VyVntlg4k=
Subject key identifier:   8E:AF:14:92:E2:B2:31:26:EF:B2:DE:02:90:9F:8F:F3:C3:C5:3C:BD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3146
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jq8UkuKyMSbvst4CkJ-P88PFPL0.roa
Signing time:             Mon 26 Aug 2024 05:30:18 +0000
ROA not before:           Mon 26 Aug 2024 05:30:18 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        211.76.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12614 (0x3146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:18 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8EAF1492E2B23126EFB2DE02909F8FF3C3C53CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:b9:9d:8d:b4:85:c2:d4:ab:07:fb:80:d1:
                    19:56:c4:4d:33:32:65:fa:e5:0b:5c:05:07:45:51:
                    cf:59:de:27:87:1d:7f:cb:12:d6:63:f3:20:47:d7:
                    29:b1:61:dd:b3:69:f0:ed:f0:5a:d3:4d:41:05:2b:
                    c5:06:19:23:51:a2:51:3e:8f:a2:d3:bd:7a:ad:dd:
                    62:4d:01:3d:77:3c:7a:e6:3d:9c:a9:0d:df:93:fa:
                    27:b0:ad:f6:99:27:1d:41:d9:06:6a:5d:73:3a:67:
                    04:6d:15:d8:73:c4:87:4e:db:e9:06:b6:46:4d:4c:
                    cd:aa:8a:fe:f8:13:64:7d:3d:2f:e1:2d:15:fe:7e:
                    cf:cf:a2:78:62:9f:08:bc:37:4e:66:a8:c5:72:cd:
                    44:6f:da:ad:5b:6f:5a:69:2d:c2:16:f2:fc:01:98:
                    09:9d:7d:bd:b9:45:5b:0a:da:ac:12:67:5a:5b:b7:
                    4e:6d:cf:a6:ca:ae:a7:60:b1:ba:2c:88:d6:a2:99:
                    21:bd:a4:98:73:a5:e5:92:92:4c:4b:4c:31:45:7c:
                    0f:1a:ed:a4:cb:af:d9:2c:23:a0:aa:dd:6c:89:82:
                    fb:71:65:23:15:30:d3:f3:40:93:52:34:30:78:b7:
                    77:1b:b3:00:63:79:eb:62:30:1b:b0:18:2a:7c:ec:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AF:14:92:E2:B2:31:26:EF:B2:DE:02:90:9F:8F:F3:C3:C5:3C:BD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jq8UkuKyMSbvst4CkJ-P88PFPL0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:10:32:3a:96:1e:b0:6b:e8:51:a0:8d:89:82:ca:ba:98:f6:
         f7:65:25:38:98:d9:31:2a:71:97:aa:d2:ad:2c:ec:19:71:d7:
         1f:37:9c:56:55:04:6c:d6:c5:48:95:78:69:43:4d:ff:ce:29:
         30:ae:be:4a:e7:a9:06:b3:a7:40:81:04:23:f2:ed:ee:39:12:
         15:7d:09:e3:b7:98:4f:be:57:40:9d:76:a5:c7:d2:4a:e6:55:
         bc:a7:66:ee:80:a1:0b:e7:88:15:cc:55:91:82:4c:79:08:41:
         ad:ac:ec:0c:eb:60:95:27:36:4a:39:9e:73:34:52:54:b8:6d:
         8d:01:7c:4f:6b:03:7d:27:15:6f:98:11:08:71:a7:51:c2:17:
         ed:c1:5f:69:a6:14:9e:29:38:da:80:9f:40:d4:6c:23:1e:85:
         d1:65:d3:57:dd:d1:67:2b:87:26:81:a3:35:41:6f:3f:54:b9:
         b2:1b:cc:dd:0e:ba:ca:f7:a4:e5:bf:a8:77:89:a3:0c:72:85:
         18:2c:9e:ff:cb:a2:b6:46:29:50:6a:d0:3c:85:30:06:39:31:
         f2:e9:48:01:c9:8c:34:db:96:35:5d:9e:97:89:0e:84:95:3f:
         f1:53:37:f0:d2:c7:dd:c6:e5:3f:2a:31:7f:0e:e6:c1:70:fd:
         e5:34:d1:c7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMwMThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhFQUYxNDkyRTJCMjMx
MjZFRkIyREUwMjkwOUY4RkYzQzNDNTNDQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO2rmdjbSFwtSrB/uA0RlWxE0zMmX65QtcBQdFUc9Z3ieHHX/L
EtZj8yBH1ymxYd2zafDt8FrTTUEFK8UGGSNRolE+j6LTvXqt3WJNAT13PHrmPZyp
Dd+T+iewrfaZJx1B2QZqXXM6ZwRtFdhzxIdO2+kGtkZNTM2qiv74E2R9PS/hLRX+
fs/Ponhinwi8N05mqMVyzURv2q1bb1ppLcIW8vwBmAmdfb25RVsK2qwSZ1pbt05t
z6bKrqdgsbosiNaimSG9pJhzpeWSkkxLTDFFfA8a7aTLr9ksI6Cq3WyJgvtxZSMV
MNPzQJNSNDB4t3cbswBjeetiMBuwGCp87CWNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjq8UkuKyMSbvst4CkJ+P88PFPL0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pxOFVrdUt5TVNidnN0NENr
Si1QODhQRlBMMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
THYwDQYJKoZIhvcNAQELBQADggEBAEQQMjqWHrBr6FGgjYmCyrqY9vdlJTiY2TEq
cZeq0q0s7Blx1x83nFZVBGzWxUiVeGlDTf/OKTCuvkrnqQazp0CBBCPy7e45EhV9
CeO3mE++V0CddqXH0krmVbynZu6AoQvniBXMVZGCTHkIQa2s7AzrYJUnNko5nnM0
UlS4bY0BfE9rA30nFW+YEQhxp1HCF+3BX2mmFJ4pONqAn0DUbCMehdFl01fd0Wcr
hyaBozVBbz9UubIbzN0Ousr3pOW/qHeJowxyhRgsnv/LorZGKVBq0DyFMAY5MfLp
SAHJjDTbljVdnpeJDoSVP/FTN/DSx93G5T8qMX8O5sFw/eU00cc=
-----END CERTIFICATE-----
Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org