Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qQoDTARsiRc6ZJFbdoUAdLZRhOY.roa
File:                     qQoDTARsiRc6ZJFbdoUAdLZRhOY.roa (raw, json)
Hash identifier:          JBOg3sKhxc0Z9rtLhUep8lcFTsiXnK00sW8Ym3O9mM4=
Subject key identifier:   A9:0A:03:4C:04:6C:89:17:3A:64:91:5B:76:85:00:74:B6:51:84:E6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3164
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qQoDTARsiRc6ZJFbdoUAdLZRhOY.roa
Signing time:             Mon 26 Aug 2024 05:30:24 +0000
ROA not before:           Mon 26 Aug 2024 05:30:24 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 00:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12644 (0x3164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:24 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=A90A034C046C89173A64915B76850074B65184E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:91:91:17:c2:18:fc:31:94:18:e5:87:95:c8:
                    5e:0a:6f:13:14:3e:78:d5:f8:73:50:42:ed:13:2d:
                    1b:11:99:a7:9d:d6:1b:d6:07:a7:35:a4:d1:ef:da:
                    05:17:be:b4:35:eb:4b:2a:ba:72:94:d1:db:ae:29:
                    e6:82:0e:18:7a:74:e6:2d:bc:06:a8:53:49:90:a1:
                    d2:54:d3:c9:ad:85:f8:83:8c:e6:fe:2f:b0:df:b1:
                    5f:b7:4b:52:b5:9a:c6:a6:d6:87:91:fa:17:a0:6b:
                    16:59:7e:17:71:ca:85:5a:60:5a:00:15:59:75:ff:
                    fe:0e:1e:48:75:71:45:4f:9f:9a:87:58:37:ec:e9:
                    00:7b:d8:b5:36:8f:db:0a:98:8b:ec:4f:b3:51:94:
                    81:20:3e:e6:b2:39:88:3e:2b:3e:c8:43:92:00:37:
                    3f:f4:79:f3:2c:39:28:e9:74:e4:03:3d:65:03:f8:
                    7c:4c:6e:40:70:8b:a3:4d:3a:b9:e7:b6:7d:48:a8:
                    67:6c:c0:64:56:1e:96:33:2e:f7:a1:89:95:91:71:
                    69:b2:e8:9e:9b:be:89:58:42:a2:02:b9:e9:bd:dc:
                    5b:74:02:71:08:fa:b6:69:15:98:c2:cd:be:21:ea:
                    b6:6a:a7:fe:d0:67:91:e7:93:8d:4d:38:7f:4f:31:
                    59:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0A:03:4C:04:6C:89:17:3A:64:91:5B:76:85:00:74:B6:51:84:E6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qQoDTARsiRc6ZJFbdoUAdLZRhOY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:93:e6:5a:6a:07:1b:f5:ab:2f:f6:48:c7:27:74:8a:60:ff:
         3c:6d:14:19:80:8c:a1:9e:7a:91:bf:ab:2f:c3:66:84:0f:bf:
         1e:f7:49:88:8c:28:34:2e:ee:99:c3:96:d9:84:96:ab:49:3e:
         be:83:d8:d2:65:bb:f4:6b:2c:58:bb:9e:68:32:bb:4d:3b:e4:
         84:23:e8:2c:67:a0:8b:ce:88:97:24:82:ed:17:9b:f9:1c:ec:
         6e:30:6f:2a:da:a6:53:63:6d:cb:94:23:87:1a:8d:db:54:57:
         cc:62:fb:61:30:7f:12:9a:3f:8a:1e:91:c6:f1:42:62:a1:16:
         2e:37:48:eb:f6:88:9d:a4:e6:53:2d:ed:c4:3e:9c:e4:83:56:
         be:c1:88:df:ef:1f:f7:f4:3a:27:36:c3:5b:38:b8:b0:50:01:
         a0:83:01:d0:05:17:4a:0a:4e:ad:a1:b6:2b:85:03:59:fc:67:
         cf:d3:22:d8:6b:d7:a2:80:ac:8e:c9:ee:28:c8:4d:e2:4c:26:
         6d:82:58:e7:90:08:31:d3:bb:fa:8b:83:7b:c0:3b:68:b6:9f:
         9d:92:6a:12:c1:a6:43:5a:f6:71:01:0a:b2:74:d1:83:47:30:
         2e:1f:ee:30:cb:9b:18:bf:04:c6:ff:76:b4:8a:1e:1a:94:a1:
         2f:78:05:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org