Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mEX0BjNP2GSSx2bfvs4jRF2U2kM.roa
File:                     mEX0BjNP2GSSx2bfvs4jRF2U2kM.roa (raw, json)
Hash identifier:          UHL8XODOgOAj0H781AH88HylwOmHaQ0optBvx+DAfCk=
Subject key identifier:   98:45:F4:06:33:4F:D8:64:92:C7:66:DF:BE:CE:23:44:5D:94:DA:43
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       315E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mEX0BjNP2GSSx2bfvs4jRF2U2kM.roa
Signing time:             Mon 26 Aug 2024 05:30:23 +0000
ROA not before:           Mon 26 Aug 2024 05:30:23 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9924
IP address blocks:        123.194.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12638 (0x315e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:23 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=9845F406334FD86492C766DFBECE23445D94DA43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:c9:e1:2f:e4:23:1e:44:3a:38:17:62:83:
                    b3:c6:39:f1:f4:a1:dd:b4:b6:25:98:c1:19:3e:45:
                    38:2e:05:40:ce:de:4d:b6:04:16:0c:4a:7a:1f:f5:
                    19:6c:ae:17:96:36:5f:39:33:ef:13:73:22:72:fe:
                    b0:21:34:39:31:9c:85:81:68:14:88:0f:dc:30:c4:
                    c2:cb:18:7a:fe:9f:c4:65:28:bc:d3:47:a4:09:d5:
                    04:c2:9a:9d:f1:3b:1e:ef:21:cc:7c:e0:19:94:85:
                    57:2c:09:95:23:37:14:52:71:c1:5a:82:cc:18:00:
                    5c:ee:26:75:fd:9d:c5:34:7b:0a:78:fb:11:13:10:
                    27:d9:2c:49:4f:b1:f8:5b:e1:3e:19:f0:8d:d5:1f:
                    dd:65:41:7b:28:dd:aa:f1:34:b9:d7:8d:e4:64:3b:
                    ee:c1:29:20:e9:e3:81:cc:90:71:46:68:41:cc:38:
                    84:25:15:68:ad:05:ea:82:7a:97:a4:2c:6b:95:f3:
                    20:5b:aa:0b:56:bb:07:95:55:b3:53:55:ff:23:bb:
                    cf:68:22:5c:f5:bf:d5:e2:69:05:e1:e9:d4:18:58:
                    e8:41:c3:26:25:80:c0:04:2a:d8:e5:05:6f:27:82:
                    65:92:38:37:dd:43:28:34:21:c5:20:b3:94:c6:f3:
                    0b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:45:F4:06:33:4F:D8:64:92:C7:66:DF:BE:CE:23:44:5D:94:DA:43
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mEX0BjNP2GSSx2bfvs4jRF2U2kM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9b:c4:b7:f2:d2:b7:48:82:a9:0d:35:59:de:73:11:4c:a2:8f:
         8d:71:cf:04:5e:c8:8e:ea:5a:ef:38:5e:2f:dc:d6:2d:1e:1f:
         02:5e:24:63:71:4c:94:59:cf:b9:38:cd:85:97:33:09:33:86:
         06:e5:d2:2b:4f:0f:62:c0:49:1d:db:98:5e:c4:a5:96:c6:a1:
         2b:42:0b:87:97:d4:b1:19:3d:73:16:cf:1b:77:c3:14:a6:2c:
         aa:66:f4:05:d8:c7:e0:cb:3f:44:29:32:11:44:7d:0d:c9:a3:
         cc:a1:06:de:5d:64:14:2b:1b:a9:2f:9c:42:3e:e2:01:f6:f9:
         97:2f:d3:a2:11:d5:85:ef:2e:e6:f1:86:de:ef:10:b3:7e:77:
         99:07:ce:3a:55:41:64:52:e9:ee:a0:e9:de:8a:d5:50:0a:79:
         ff:35:3c:62:89:81:ac:26:7a:59:01:c6:e4:b6:50:47:b0:68:
         a0:58:37:dc:78:32:89:9f:a5:cf:ae:ea:0e:49:46:09:ca:16:
         97:b6:d0:e6:51:22:43:72:ca:ac:4e:26:dd:fb:32:69:31:7e:
         72:3c:eb:89:98:3f:c2:06:6a:85:76:3f:16:a2:b3:0d:94:b9:
         a1:e0:29:f8:c9:36:66:20:bc:22:9b:38:d4:5a:fb:da:9c:72:
         1f:44:ca:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:51 2024 by rpki-client on console-fra.rpki-client.org