Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rWqvsgSLV6yHYd4oCIYXGVKp374.roa
File:                     rWqvsgSLV6yHYd4oCIYXGVKp374.roa (raw, json)
Hash identifier:          BnonPFy2TBnR/M81DHAHPUz2tORGWT5kOKPFk4kqYoE=
Subject key identifier:   AD:6A:AF:B2:04:8B:57:AC:87:61:DE:28:08:86:17:19:52:A9:DF:BE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       30BF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rWqvsgSLV6yHYd4oCIYXGVKp374.roa
Signing time:             Mon 26 Aug 2024 05:29:47 +0000
ROA not before:           Mon 26 Aug 2024 05:29:47 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        106.1.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 00:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12479 (0x30bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:29:47 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=AD6AAFB2048B57AC8761DE280886171952A9DFBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:f5:3a:24:fb:15:90:f1:46:4b:2a:28:4d:
                    ab:bc:2a:e6:7c:36:4f:2a:d9:09:cc:8c:ee:c6:66:
                    ef:16:c7:a6:29:53:ef:f1:52:83:f3:c8:29:ff:a4:
                    57:3a:60:bc:ec:8c:7b:4a:65:82:04:6d:f6:41:96:
                    68:e2:1d:71:95:f2:bc:4f:78:8c:24:18:06:e1:03:
                    eb:ff:75:f2:1c:ec:94:78:ff:4d:ec:b4:5a:4f:41:
                    74:cc:13:bf:68:46:ff:8b:2e:08:6d:a1:88:30:31:
                    d4:ba:88:a2:5b:5e:02:1f:96:dd:fa:a1:8d:dc:f0:
                    5b:0b:c5:a2:d3:b3:c5:28:5a:93:49:77:1a:88:5a:
                    26:d6:62:91:f9:96:72:41:a6:37:8c:19:ca:be:67:
                    eb:e0:fa:4b:d8:77:78:da:77:3f:f7:d3:8c:a4:aa:
                    46:d9:0d:c9:c1:bd:42:ff:7b:8e:a7:36:31:72:84:
                    26:73:48:38:ba:de:a1:03:31:c9:15:9e:c1:81:3f:
                    9e:26:de:5c:a4:8e:52:48:cb:8f:86:13:1b:aa:98:
                    74:6a:3d:b9:16:d3:65:3d:af:cb:6e:49:d1:40:92:
                    e2:bb:08:9b:2e:5f:53:e3:de:e8:a7:65:52:48:b8:
                    aa:5c:4b:c9:3b:eb:cc:b7:34:d4:af:17:4e:c6:22:
                    77:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6A:AF:B2:04:8B:57:AC:87:61:DE:28:08:86:17:19:52:A9:DF:BE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rWqvsgSLV6yHYd4oCIYXGVKp374.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:05:c5:b5:15:0a:7c:7e:65:74:fc:6b:a3:12:19:60:57:91:
         8a:f1:cf:0e:a0:11:37:59:a5:f0:38:08:31:1d:51:c4:bd:e4:
         81:fb:8c:e8:b4:2c:ff:af:a6:f5:de:b1:c7:ad:ae:56:90:f8:
         3d:1b:89:c4:7b:68:d8:75:e4:78:5b:20:25:b7:f8:fd:67:03:
         c5:e4:0d:39:b3:d7:4e:c2:1e:90:75:3a:77:74:0a:8c:86:57:
         0b:8f:8f:cc:ef:d1:cb:72:dd:20:f3:a7:bd:b8:ae:20:48:64:
         b6:a4:1e:0f:2e:5e:88:ef:c2:fd:97:09:60:30:90:e5:c4:47:
         1e:76:9b:a5:bc:3b:b2:2c:91:29:64:42:9f:73:ff:0a:63:a2:
         35:a5:f9:fd:af:4d:2d:1c:41:58:3c:c6:a9:0d:04:bb:d2:5e:
         9d:c6:fa:b9:1d:13:53:0a:1e:7b:3c:16:69:4c:82:2a:db:41:
         30:1f:46:42:05:fa:44:ee:4b:2e:a8:eb:bd:8f:10:68:74:05:
         27:08:a6:8b:47:7c:f4:2b:24:2a:5e:e9:76:f1:50:d7:28:61:
         74:63:6e:14:09:32:49:ea:79:5f:f1:40:a0:df:58:30:5e:98:
         1a:8a:55:a6:41:61:95:d3:e8:b5:ea:2b:77:cd:cb:36:b8:b9:
         9e:37:b0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org