Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q1mYdZ65hRc4Abfxz92Dd_WYpLE.roa
File:                     q1mYdZ65hRc4Abfxz92Dd_WYpLE.roa (raw, json)
Hash identifier:          LMm2Z927xdwjh+hUbm+/1ZcpUw2g04II4mGxcbASL6o=
Subject key identifier:   AB:59:98:75:9E:B9:85:17:38:01:B7:F1:CF:DD:83:77:F5:98:A4:B1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       313C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q1mYdZ65hRc4Abfxz92Dd_WYpLE.roa
Signing time:             Mon 26 Aug 2024 05:30:15 +0000
ROA not before:           Mon 26 Aug 2024 05:30:15 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12604 (0x313c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:15 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=AB5998759EB985173801B7F1CFDD8377F598A4B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:80:15:1d:00:63:a3:97:71:2f:d8:14:2d:
                    f8:89:80:eb:71:d5:78:2e:8d:78:91:61:38:46:0a:
                    18:b0:e1:2f:c1:04:4a:3f:64:25:b8:5d:29:0b:2e:
                    ba:5c:61:fc:9e:fa:e0:f8:36:37:da:9a:77:67:5f:
                    08:cb:e3:c9:f8:d8:8d:26:6f:d5:df:52:e2:1b:fd:
                    e0:55:5a:ed:44:c1:88:84:e5:19:7b:bd:0d:11:7e:
                    34:0e:12:ab:95:36:e2:9a:9e:05:e5:d6:a8:5e:6e:
                    cb:2d:04:bb:05:e4:c7:e6:d5:f8:0d:4d:36:7d:8b:
                    0c:4f:37:57:86:23:00:f7:26:7e:b9:3a:10:67:3f:
                    62:32:d6:77:72:62:b4:18:fd:fb:cf:0c:d1:09:af:
                    2d:e5:7f:cb:5a:59:34:7b:b0:ba:3e:9f:b2:c0:b4:
                    51:4d:bd:9f:d6:d5:18:c0:c4:e7:f4:a7:a0:05:5f:
                    cd:26:66:57:97:78:0a:9e:a7:97:3c:10:9c:46:46:
                    27:d2:5f:4f:c8:02:b5:89:74:f0:fe:6c:0c:2d:22:
                    7f:bf:67:54:f6:73:d4:e2:c1:ee:e9:e8:33:5a:e3:
                    9b:c3:6f:61:0b:c9:a5:9a:3b:66:2a:5d:28:49:c0:
                    28:09:e8:9b:04:4a:6f:7e:db:09:3f:4d:7b:62:03:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:59:98:75:9E:B9:85:17:38:01:B7:F1:CF:DD:83:77:F5:98:A4:B1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q1mYdZ65hRc4Abfxz92Dd_WYpLE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:f1:89:c0:a9:51:7a:66:fd:58:57:e4:74:38:20:9c:c5:73:
         1f:a5:74:2f:a2:af:73:3a:b1:55:31:c1:d6:da:73:50:61:4a:
         80:67:81:26:10:84:4f:5d:41:06:55:45:47:84:17:a0:b0:cf:
         aa:41:75:c0:e2:f0:5a:70:bd:d2:0d:fb:b0:f5:e8:bb:d7:93:
         57:98:f4:2f:f1:1b:aa:f9:fb:3a:da:18:74:43:0d:11:bf:1d:
         89:e0:cc:09:b5:7a:60:29:5f:9e:0a:cd:e0:85:75:ce:4b:8c:
         c9:5c:c3:b0:04:f2:0c:7d:02:2d:e4:ee:ae:ea:60:39:d7:d5:
         dd:70:a6:cd:5b:c8:b0:da:ed:6a:89:37:4d:cf:98:09:4e:57:
         21:a1:7f:8e:a9:e0:b0:a1:40:81:f5:b8:f5:a0:8e:69:4f:16:
         dc:b9:14:41:a7:ae:00:df:a0:c6:e1:ef:ae:7b:8a:cf:31:76:
         dd:97:e5:ac:d3:3b:8a:ed:9e:4b:24:b4:f9:cc:20:da:d3:12:
         5e:44:ba:5a:1f:34:3e:46:57:31:08:d4:46:20:52:4f:5b:11:
         84:2b:5d:83:7b:a2:9c:de:8b:6d:a6:e9:f6:43:b9:c2:38:c5:
         28:15:44:c2:95:5d:b3:de:0c:16:c6:24:28:36:43:c3:8f:6a:
         f1:62:28:0b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMTwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMwMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFCNTk5ODc1OUVCOTg1
MTczODAxQjdGMUNGREQ4Mzc3RjU5OEE0QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkD4AVHQBjo5dxL9gULfiJgOtx1XgujXiRYThGChiw4S/BBEo/
ZCW4XSkLLrpcYfye+uD4NjfamndnXwjL48n42I0mb9XfUuIb/eBVWu1EwYiE5Rl7
vQ0RfjQOEquVNuKangXl1qhebsstBLsF5Mfm1fgNTTZ9iwxPN1eGIwD3Jn65OhBn
P2Iy1ndyYrQY/fvPDNEJry3lf8taWTR7sLo+n7LAtFFNvZ/W1RjAxOf0p6AFX80m
ZleXeAqep5c8EJxGRifSX0/IArWJdPD+bAwtIn+/Z1T2c9Tiwe7p6DNa45vDb2EL
yaWaO2YqXShJwCgJ6JsESm9+2wk/TXtiA5N7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUq1mYdZ65hRc4Abfxz92Dd/WYpLEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ExbVlkWjY1aFJjNEFiZnh6
OTJEZF9XWXBMRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sRAwDQYJKoZIhvcNAQELBQADggEBAIHxicCpUXpm/VhX5HQ4IJzFcx+ldC+ir3M6
sVUxwdbac1BhSoBngSYQhE9dQQZVRUeEF6Cwz6pBdcDi8FpwvdIN+7D16LvXk1eY
9C/xG6r5+zraGHRDDRG/HYngzAm1emApX54KzeCFdc5LjMlcw7AE8gx9Ai3k7q7q
YDnX1d1wps1byLDa7WqJN03PmAlOVyGhf46p4LChQIH1uPWgjmlPFty5FEGnrgDf
oMbh7657is8xdt2X5azTO4rtnksktPnMINrTEl5EulofND5GVzEI1EYgUk9bEYQr
XYN7opzei22m6fZDucI4xSgVRMKVXbPeDBbGJCg2Q8OPavFiKAs=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:52 2024 by rpki-client on console-fra.rpki-client.org