Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sl9MFZzo_jgGIJbP6SSwlmlmmkQ.roa
File:                     sl9MFZzo_jgGIJbP6SSwlmlmmkQ.roa (raw, json)
Hash identifier:          SHOgU5n9SQbwGDaRyEHknnrg9z8MfyiUwgER0Rw2sUA=
Subject key identifier:   B2:5F:4C:15:9C:E8:FE:38:06:20:96:CF:E9:24:B0:96:69:66:9A:44
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2FCE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sl9MFZzo_jgGIJbP6SSwlmlmmkQ.roa
Signing time:             Mon 26 Aug 2024 05:28:52 +0000
ROA not before:           Mon 26 Aug 2024 05:28:52 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9924
IP address blocks:        123.195.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12238 (0x2fce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:28:52 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=B25F4C159CE8FE38062096CFE924B09669669A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:ca:ec:54:c8:8a:2d:42:7e:f3:c0:db:2b:
                    00:6f:f1:bc:ba:d1:54:57:b2:18:13:e8:e9:eb:35:
                    9a:2b:10:e0:02:6c:60:fa:83:07:ac:00:97:73:2e:
                    14:1a:b7:2c:e9:cb:c1:8e:70:34:56:08:ba:b9:bf:
                    4f:d7:87:5c:04:5b:83:3e:9a:aa:2e:e9:54:76:2f:
                    ad:e9:9a:f5:23:05:aa:63:f9:05:43:d9:53:dd:90:
                    21:06:c9:a8:f9:24:2b:1d:3f:70:cb:a6:3f:d3:2e:
                    4c:69:1d:81:96:ec:2a:84:11:12:65:9f:39:ca:92:
                    5f:1b:ed:57:09:65:7e:52:37:2b:f8:8b:7e:c5:44:
                    86:13:14:7e:6d:2e:f7:86:ae:e4:19:81:54:dc:b1:
                    13:f5:21:ca:18:55:70:4f:13:91:d6:ed:cc:e2:03:
                    a4:0d:37:e1:cc:0d:7b:f8:22:55:35:ec:6f:14:d6:
                    97:5d:6a:11:ae:5a:32:36:6d:4c:76:fa:80:9f:21:
                    a5:65:44:f3:52:52:0b:0a:1d:3b:64:75:66:cb:88:
                    73:46:14:00:5d:9b:65:55:80:ef:8b:af:43:2b:70:
                    ab:88:47:56:d5:48:d3:f4:c4:f5:89:20:b6:b3:b4:
                    38:a7:c5:77:b9:be:1f:34:1e:ca:f7:46:87:13:07:
                    78:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5F:4C:15:9C:E8:FE:38:06:20:96:CF:E9:24:B0:96:69:66:9A:44
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sl9MFZzo_jgGIJbP6SSwlmlmmkQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:eb:f4:c4:10:2f:f9:1e:78:45:8f:47:56:38:33:6b:f4:57:
         3c:57:9e:56:d8:66:c0:6b:d5:22:06:16:c9:b4:44:fb:a0:16:
         99:5d:f9:6a:ce:f8:ac:bd:3a:40:11:c0:53:0a:6f:98:f2:6d:
         e6:ce:55:06:db:15:bd:9b:f3:0f:52:b2:94:a1:6a:80:86:67:
         e8:21:cc:2f:8e:b4:53:9b:66:b3:d0:91:f8:94:13:f3:61:09:
         5b:3e:9f:b8:27:5f:c3:86:71:4e:9e:26:2d:3b:22:bd:9a:4e:
         dc:6e:89:9c:cb:b0:3a:02:77:5e:7f:8c:24:fe:b4:f9:12:fe:
         d4:14:bc:fc:d1:34:2e:37:3e:5d:6f:4c:e8:3d:28:c3:d7:8b:
         28:7b:c0:65:4a:6f:32:f2:29:b5:f1:13:3f:0e:98:8b:3a:b2:
         9b:85:5f:9f:43:92:d8:14:fa:7d:f4:ab:66:01:e2:49:66:4f:
         58:af:09:41:c5:66:b1:1f:8b:d6:8f:5b:45:1c:84:23:6a:e9:
         53:70:01:61:a5:36:27:c2:e2:38:04:43:e5:dd:29:eb:b9:a9:
         2d:df:e4:9e:b4:86:71:15:b8:d0:1a:99:7e:d8:13:aa:84:46:
         ce:71:57:b7:7a:da:0d:73:e0:7d:d1:2f:7f:4a:73:5a:e9:21:
         18:11:a5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:23 2024 by rpki-client on console-ams.rpki-client.org