Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pvICKcpAGr7wTh06SGDMAuikgzU.roa
File:                     pvICKcpAGr7wTh06SGDMAuikgzU.roa (raw, json)
Hash identifier:          ar7mcAiEI3OOnOBPcygFD9xUECX8MPwcZW2qsxjesgc=
Subject key identifier:   A6:F2:02:29:CA:40:1A:BE:F0:4E:1D:3A:48:60:CC:02:E8:A4:83:35
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2900
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pvICKcpAGr7wTh06SGDMAuikgzU.roa
Signing time:             Fri 01 Sep 2023 10:06:03 +0000
ROA not before:           Fri 01 Sep 2023 10:06:03 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        103.224.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10496 (0x2900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:03 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=A6F20229CA401ABEF04E1D3A4860CC02E8A48335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d6:6b:75:7d:8e:42:ca:90:72:f6:d3:71:03:
                    b1:9c:cd:24:c3:4d:8f:c4:0c:1b:48:e3:84:36:16:
                    c2:a9:2f:86:78:dc:55:f4:a5:84:27:3d:1d:96:57:
                    cf:1f:b6:f1:cb:77:55:8c:c1:2f:ad:0c:f1:cd:d1:
                    d8:b5:8d:0a:5b:18:07:c0:14:78:31:23:c2:20:43:
                    10:df:11:bb:cf:17:5d:ab:d6:6a:df:55:40:f6:fa:
                    92:9c:52:10:15:6b:e7:c1:bc:07:2d:7b:9d:5f:5b:
                    43:a3:bc:62:77:c2:71:09:e0:f4:c8:11:33:81:38:
                    42:99:9f:d3:1e:f4:65:08:49:ab:39:03:83:36:a3:
                    2b:ee:38:d9:2e:7f:0a:04:ae:7f:d0:b4:4f:ff:05:
                    e3:11:bb:cc:e1:d2:04:33:c3:2f:8c:c5:68:fe:8e:
                    59:4e:18:c9:f0:24:ca:95:ac:17:4d:dd:84:7e:0f:
                    78:65:04:62:af:38:3c:46:b7:0b:15:18:90:8d:72:
                    59:ab:3b:2c:d5:a4:c7:60:b3:f5:2e:5c:85:8d:b9:
                    02:f5:4c:15:31:28:60:02:9a:b5:93:11:48:b7:d4:
                    cd:e9:14:40:6a:bf:5b:78:28:ae:84:20:52:61:9f:
                    2a:01:cf:1d:18:4c:c5:78:12:70:05:92:c6:8b:dd:
                    a7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F2:02:29:CA:40:1A:BE:F0:4E:1D:3A:48:60:CC:02:E8:A4:83:35
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pvICKcpAGr7wTh06SGDMAuikgzU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:de:a7:a3:1c:8b:53:ce:42:15:58:69:95:b1:5e:41:94:8a:
         7d:91:6e:a6:ee:f1:f1:62:fc:d7:1c:7e:ae:08:64:03:84:79:
         84:5e:54:f5:65:fa:03:e6:eb:41:43:7a:48:4a:bd:6b:92:cd:
         29:0d:9b:a9:b1:8c:88:6c:d6:d3:74:da:8a:46:3b:bd:26:71:
         ce:dc:f5:56:26:d8:91:6f:1b:8f:d4:53:3a:f5:7b:90:c7:68:
         3c:70:eb:4e:cf:d2:f5:2a:c8:e7:02:71:d4:8b:88:76:39:df:
         fe:45:bd:ed:3f:d7:b8:85:6b:f7:7f:ed:88:51:55:d4:bb:9d:
         d8:eb:be:69:ab:5b:9b:a1:96:f7:7b:e4:fc:37:80:57:19:98:
         db:d8:a4:00:76:3d:68:df:63:4b:e0:15:c2:8b:8e:2f:90:03:
         10:13:4a:79:49:a4:10:f9:ab:fd:e3:c3:76:b8:92:91:56:ee:
         38:1d:f5:84:ed:74:67:d4:c7:b2:fb:45:92:c7:20:e3:60:15:
         66:8e:d8:b7:4c:b1:72:b8:bc:f0:d9:a3:eb:4e:1b:0c:02:86:
         39:b7:5d:4b:3d:aa:30:10:3c:f9:95:a7:26:72:38:cd:f5:24:
         91:2e:58:98:b8:85:7b:41:13:be:15:5b:8a:ef:73:11:6e:50:
         17:13:e9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org