Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uRLNpfzWKSEWDX427JFER16kDKM.roa
File:                     uRLNpfzWKSEWDX427JFER16kDKM.roa (raw, json)
Hash identifier:          ESkLDQy1Vd3v1Irkq960QdfnvKv5TJHRD4abp1xXsBI=
Subject key identifier:   B9:12:CD:A5:FC:D6:29:21:16:0D:7E:36:EC:91:44:47:5E:A4:0C:A3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       319D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uRLNpfzWKSEWDX427JFER16kDKM.roa
Signing time:             Mon 26 Aug 2024 05:30:45 +0000
ROA not before:           Mon 26 Aug 2024 05:30:45 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.176.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12701 (0x319d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:45 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=B912CDA5FCD62921160D7E36EC9144475EA40CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:80:26:e3:c5:4e:27:13:5d:2d:5e:8f:e6:be:
                    8f:a9:aa:98:93:66:47:f6:ea:50:d7:03:bb:45:2b:
                    dd:99:45:26:0c:91:21:18:63:43:f1:70:95:bb:73:
                    d9:f5:5a:91:33:eb:74:33:fa:de:53:c3:c0:5f:1a:
                    e2:7b:79:85:18:12:3d:e7:f5:de:a0:3f:84:b3:8f:
                    af:cc:43:6d:b2:78:52:94:d4:90:69:4b:18:a4:47:
                    82:30:e1:f0:69:5a:26:8c:24:da:ec:4e:95:63:2d:
                    b5:5f:e1:b3:41:54:65:93:9c:ce:35:66:85:7b:e9:
                    47:83:12:74:b8:94:a3:1f:e9:1e:d5:99:3d:e9:2a:
                    3d:7c:4d:5e:31:f5:5d:29:8b:24:29:53:03:33:90:
                    a5:ca:41:01:bd:2b:1f:11:4d:e4:ea:9c:05:82:ca:
                    ae:77:d9:ef:8a:a6:10:0c:f9:16:86:c2:f1:40:05:
                    fc:21:62:e8:ad:23:57:d8:3c:65:e8:74:92:40:6e:
                    ca:78:fd:37:2f:b8:68:4b:fd:14:90:8b:e8:07:16:
                    31:85:2c:e2:48:be:b2:8e:1a:ab:ed:ec:c5:bb:6e:
                    d5:65:fc:4d:13:c7:5c:79:1d:25:b3:ad:cc:b3:aa:
                    05:48:80:35:30:f8:6c:a4:a9:37:90:cc:52:6d:8b:
                    55:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:12:CD:A5:FC:D6:29:21:16:0D:7E:36:EC:91:44:47:5E:A4:0C:A3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uRLNpfzWKSEWDX427JFER16kDKM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:28:0a:22:7a:ec:d8:bf:45:48:d5:16:d5:ae:92:37:73:b2:
         6d:1e:2d:0e:81:8e:d6:25:e9:59:5c:5e:11:37:1f:3a:8a:ad:
         82:81:e9:c2:48:87:fb:e1:2b:3a:08:6b:3a:49:c6:27:77:91:
         ff:39:f1:d1:32:62:90:c0:c7:5d:d5:e9:a4:93:e5:0b:86:4d:
         03:a9:16:b3:22:e0:d0:fd:56:3f:e3:c5:7b:08:46:a4:41:23:
         3e:f2:32:3f:6c:d2:a2:a0:01:d3:af:bf:c7:90:f5:6e:94:3e:
         86:c3:d2:60:cd:58:bf:bb:a7:19:02:26:25:8a:2e:ff:c1:5b:
         09:dc:06:6b:01:93:d0:db:55:b3:64:4a:93:2c:43:7c:2b:f4:
         1c:24:f3:ab:50:7b:2d:bb:b6:c4:1c:80:33:5d:fd:a2:3d:0c:
         d5:de:99:5d:23:70:24:5c:06:e3:3d:4b:bb:58:24:1e:58:e7:
         bf:b5:91:1b:ee:75:97:2b:57:01:28:a2:71:f0:75:d3:47:72:
         18:1c:75:98:b0:da:2d:3d:62:ac:52:c3:c0:f7:5d:93:3e:c9:
         f7:47:bd:4a:b4:14:1e:f8:ff:e5:76:39:2c:fc:6e:4e:ed:ed:
         80:24:a6:eb:25:10:53:24:03:f1:af:3c:3d:45:33:b1:f5:70:
         0d:16:f5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:58 2024 by rpki-client on console-fra.rpki-client.org