Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kDEWAaxIeZI9bgcrDyuCwkvoKa8.roa
File:                     kDEWAaxIeZI9bgcrDyuCwkvoKa8.roa (raw, json)
Hash identifier:          vNXxBKgeiFCQou3+M8HNSZ11TsuKRSfGN7vgH4EB3uE=
Subject key identifier:   90:31:16:01:AC:48:79:92:3D:6E:07:2B:0F:2B:82:C2:4B:E8:29:AF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3254
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kDEWAaxIeZI9bgcrDyuCwkvoKa8.roa
Signing time:             Mon 26 Aug 2024 05:31:33 +0000
ROA not before:           Mon 26 Aug 2024 05:31:33 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.184.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12884 (0x3254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:31:33 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=90311601AC4879923D6E072B0F2B82C24BE829AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:28:1d:45:12:2c:54:20:26:35:4d:8a:65:
                    9b:d2:da:02:5b:5d:37:31:1d:dd:4b:c6:b3:bc:9f:
                    db:0c:f1:e1:1f:2c:9a:5e:ed:5d:ee:d4:ef:c5:d5:
                    81:aa:3a:c3:b4:cd:4d:6b:ee:e8:9a:b7:74:ba:1c:
                    ff:95:04:d6:3b:e2:d0:62:f8:16:9c:13:0e:04:ce:
                    bd:10:73:2a:ce:ac:7e:6a:48:de:87:28:25:51:b8:
                    a8:80:b5:02:57:89:08:cd:de:7a:27:5e:c6:dd:87:
                    b4:8c:13:8b:91:fa:a2:4b:17:ab:7a:67:d1:d5:7d:
                    14:a4:c2:0f:13:60:8c:0c:61:a7:56:0b:69:3c:25:
                    cf:bd:27:12:7c:a9:50:6d:6c:37:f2:6a:c7:76:59:
                    9f:87:2c:cb:6b:9a:52:e5:f9:f4:20:a7:11:fe:fb:
                    12:70:3b:29:b2:3f:5e:08:ad:b3:47:94:fd:93:9f:
                    39:cb:ce:4e:95:74:44:69:11:fe:fb:03:59:13:40:
                    c9:a7:86:ec:32:7c:18:49:b9:5c:5b:d8:e7:2e:a5:
                    b0:79:37:ed:d7:66:46:61:29:93:9f:cc:9b:0f:ed:
                    6e:57:7c:74:ba:9f:db:77:91:5f:07:ed:80:c6:1e:
                    6e:40:8e:9a:3f:ad:f6:ea:0a:0e:ec:3b:ca:d6:ca:
                    86:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:31:16:01:AC:48:79:92:3D:6E:07:2B:0F:2B:82:C2:4B:E8:29:AF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kDEWAaxIeZI9bgcrDyuCwkvoKa8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:0c:94:91:75:dc:d5:4f:c3:58:e4:2c:e9:d3:8d:91:34:fb:
         e8:68:b4:11:77:be:01:54:64:a4:83:9c:49:34:25:9a:57:fb:
         5a:75:c8:cc:d6:7f:90:d8:6b:3f:69:02:07:1d:80:25:62:0b:
         1a:eb:96:dd:79:c4:e0:29:9a:11:55:ce:73:ea:18:fc:c0:a9:
         05:24:61:35:b2:e9:5b:7a:0f:e1:73:e9:95:2a:48:86:6a:56:
         a5:0f:c7:c8:f9:b7:7a:cc:0b:dd:b8:23:4a:c7:19:55:77:07:
         51:73:5e:b9:1c:a2:36:7b:77:8e:ef:cd:93:a5:a5:28:e6:05:
         c8:83:86:a5:65:9b:70:60:1e:f4:53:db:86:82:f0:63:8b:0c:
         0e:8a:28:f4:f2:83:5c:e1:c5:34:90:79:b3:a8:80:41:c6:17:
         93:af:50:a2:7b:71:06:54:56:a5:e1:92:94:45:56:6e:d7:7a:
         86:74:fa:ad:3e:f5:f4:2a:ba:0c:2f:1c:06:36:79:e7:72:fb:
         e6:55:70:6d:b9:f3:2e:cc:0f:11:b2:5b:d3:b7:21:81:20:7c:
         21:74:c6:03:28:bb:84:0f:ed:94:5d:bf:89:2d:65:d5:ce:1a:
         0f:e8:1e:cb:0a:33:8e:e0:53:0a:09:01:9e:e0:4b:03:7e:d7:
         ec:3e:aa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:39 2024 by rpki-client on console-ams.rpki-client.org