Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lzV4iaaJb0fbEFZScRVo4vLaR-M.roa
File:                     lzV4iaaJb0fbEFZScRVo4vLaR-M.roa (raw, json)
Hash identifier:          q7u4uvliBBIMkyIUn0ULa6jQsF4Mml4wjQTP73oEvas=
Subject key identifier:   97:35:78:89:A6:89:6F:47:DB:10:56:52:71:15:68:E2:F2:DA:47:E3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3179
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lzV4iaaJb0fbEFZScRVo4vLaR-M.roa
Signing time:             Mon 26 Aug 2024 05:30:30 +0000
ROA not before:           Mon 26 Aug 2024 05:30:30 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.176.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12665 (0x3179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:30 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=97357889A6896F47DB105652711568E2F2DA47E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:48:47:89:b0:1f:e8:a3:c4:a9:fb:50:9b:36:
                    4a:93:5e:59:94:93:1a:08:ee:c4:85:2f:fe:03:6f:
                    d0:aa:97:d4:bb:a1:08:7c:cc:2f:77:4b:89:0b:fd:
                    8e:26:1e:64:24:1c:4e:89:21:1f:de:f6:4e:19:33:
                    28:ec:f7:8e:4a:38:51:f1:77:89:c8:4e:b0:31:b7:
                    69:1c:a9:9e:84:ed:30:19:f0:bf:82:39:93:47:11:
                    e8:96:90:95:13:a1:83:d7:e7:4f:81:43:01:38:8c:
                    06:91:81:62:78:09:97:91:77:34:13:42:6a:9c:e3:
                    cc:07:2d:c3:89:de:79:6a:38:1b:0b:b6:c1:73:70:
                    3f:4c:4c:76:f0:55:09:f3:51:93:1e:ec:53:2d:b9:
                    c6:dc:31:59:4b:ea:a0:6d:2b:c8:9f:e2:fb:ac:1d:
                    c1:d5:64:9f:08:82:9a:80:21:bf:40:20:7a:4d:68:
                    7c:ec:72:85:42:3b:0e:1a:85:f1:4d:b9:dc:b7:e2:
                    0c:a1:25:21:c5:9e:e7:0c:ed:f9:62:f6:2b:a6:85:
                    00:66:49:af:62:e3:7d:c9:5c:1d:d9:77:99:2d:2d:
                    1a:ca:e0:7a:84:cd:ef:5b:f1:b6:c0:49:5c:24:01:
                    49:8c:f1:50:41:27:82:92:01:45:e9:11:57:0c:50:
                    f1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:35:78:89:A6:89:6F:47:DB:10:56:52:71:15:68:E2:F2:DA:47:E3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lzV4iaaJb0fbEFZScRVo4vLaR-M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:e6:cf:bb:4e:b5:7d:0a:e7:f0:86:69:88:1d:f1:77:3d:6a:
         e9:44:63:13:81:40:83:6d:9a:a1:b0:0a:39:7c:c9:89:61:a5:
         2a:78:36:61:4e:61:ae:3d:0d:50:ba:47:50:73:67:23:e2:a0:
         94:18:ad:3d:bf:1b:74:c1:33:f2:e2:68:b0:bd:86:ba:80:90:
         05:2f:58:3a:5b:d6:85:07:de:a3:54:41:ee:ba:d4:a2:da:1a:
         89:73:d6:bf:11:0d:ef:c1:3c:8d:3c:09:35:8e:23:95:d3:98:
         4f:3b:30:54:e2:1f:f3:e0:b4:33:b0:79:1d:46:02:3a:eb:df:
         5c:8f:4a:89:4e:dc:2f:65:57:88:24:c8:f4:f6:ec:49:8e:2f:
         82:4c:ff:e9:ea:4a:0a:2f:da:09:7f:e2:4a:8f:f1:8d:34:19:
         ae:8a:7c:a6:47:75:c9:72:1f:a1:3d:c2:f3:a9:7b:c9:29:f8:
         4b:0e:34:24:59:5e:94:3a:92:51:27:c5:51:9b:6d:b6:a9:12:
         9d:5e:44:c3:ef:f0:a6:f2:d0:44:01:64:d4:64:bf:5e:c5:b1:
         06:4e:ff:b7:31:ae:76:fb:a8:71:26:49:b0:73:3f:4b:f2:8a:
         9c:ec:36:42:d9:52:59:9d:33:7a:22:1e:0c:61:32:4e:ed:dc:
         5d:60:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org