Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/scUKOl6zb8k5Ag6RVs06LzUmx5c.roa
File:                     scUKOl6zb8k5Ag6RVs06LzUmx5c.roa (raw, json)
Hash identifier:          RURqMLehsJ5HPEO+MSNK8+46J3r5A974P8hpFstN96k=
Subject key identifier:   B1:C5:0A:3A:5E:B3:6F:C9:39:02:0E:91:56:CD:3A:2F:35:26:C7:97
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       32C1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/scUKOl6zb8k5Ag6RVs06LzUmx5c.roa
Signing time:             Mon 26 Aug 2024 05:31:59 +0000
ROA not before:           Mon 26 Aug 2024 05:31:59 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12993 (0x32c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:31:59 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=B1C50A3A5EB36FC939020E9156CD3A2F3526C797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:e8:7f:b4:86:2e:0c:ed:f6:99:d5:59:39:
                    a3:67:f6:f3:bb:76:49:d7:5b:ab:0a:06:d3:8f:78:
                    6a:42:18:c9:c6:c2:2b:6b:08:21:be:06:7e:ae:4c:
                    ab:da:b1:1b:b0:2b:86:1d:a6:3d:98:09:91:1d:72:
                    fa:78:e1:4b:56:de:34:b5:d0:66:0c:38:b2:7c:18:
                    b8:6f:2a:98:38:0d:4f:31:43:20:fa:b8:da:40:18:
                    3d:bd:dc:6d:db:56:41:f3:f1:af:04:92:e0:5e:99:
                    51:d3:f4:0c:67:06:0f:fc:2e:81:19:aa:2c:65:5e:
                    77:52:65:ae:0d:47:81:c9:a0:bf:e5:36:7e:d7:7b:
                    e9:ba:cd:72:a3:6f:f3:c8:6a:81:ec:5a:b6:70:00:
                    97:71:2f:7b:6b:b5:7b:09:bb:aa:25:d8:f4:d8:de:
                    eb:9d:82:34:93:07:f6:23:6a:a0:28:01:83:d3:03:
                    16:dc:83:69:f5:e4:78:a8:da:b3:8f:06:c9:bf:d6:
                    6e:12:4d:df:fd:92:f2:27:8c:91:f4:b9:77:1a:0d:
                    b1:b6:27:77:8c:f8:22:56:b4:ea:d8:3c:a5:ae:45:
                    3f:98:bb:69:14:74:4f:2c:9d:5f:ad:e7:13:e5:21:
                    4d:b8:3d:65:c8:73:e3:80:9d:68:5a:46:b5:bb:a6:
                    5b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C5:0A:3A:5E:B3:6F:C9:39:02:0E:91:56:CD:3A:2F:35:26:C7:97
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/scUKOl6zb8k5Ag6RVs06LzUmx5c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:8f:ff:82:12:6f:72:59:57:03:7a:26:82:1d:a5:d7:05:f2:
         22:23:70:4e:b6:16:8c:08:97:21:bd:90:40:55:b3:35:db:12:
         91:56:05:b6:e4:d8:b5:e2:e4:44:5b:6a:57:67:06:9b:a0:b1:
         2c:e0:23:be:0c:01:50:da:6e:ea:c6:73:da:92:cd:85:d7:1f:
         be:40:ab:e0:23:0f:94:9a:6f:61:75:e8:b5:3d:9d:8f:d0:d8:
         4f:c4:31:1c:de:8b:02:9d:a0:b7:26:e8:b7:8b:c5:5a:04:c3:
         e5:d3:95:06:f7:b3:17:b7:47:e5:6a:84:32:40:56:7a:b0:b8:
         c5:62:b2:50:22:85:40:a0:88:7d:1f:37:84:e9:bc:60:82:82:
         72:4f:b9:be:2a:58:3d:f4:4e:4d:58:f3:3a:61:8d:e8:ab:e4:
         4e:4f:03:46:35:29:be:33:1c:15:0f:76:0d:29:9e:6a:20:21:
         21:d8:a0:c0:1b:16:07:93:4c:58:73:27:56:54:97:7e:e6:84:
         39:00:91:d4:c0:a0:2f:f3:8d:8d:92:99:14:e1:ff:98:57:d1:
         6c:72:f2:25:fc:2d:90:28:8d:66:7e:de:8c:45:54:07:79:35:
         87:14:12:70:db:eb:05:5f:aa:ce:83:f5:a9:a7:24:b8:50:8a:
         80:63:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:23 2024 by rpki-client on console-ams.rpki-client.org