Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uig8ly_Pb_0hRJ3Ut4xtoi52WuM.roa
File:                     uig8ly_Pb_0hRJ3Ut4xtoi52WuM.roa (raw, json)
Hash identifier:          fBjFJwPpGLmQmiH99Xat61fXdhQU+pX0gK4Z6hyqjt4=
Subject key identifier:   BA:28:3C:97:2F:CF:6F:FD:21:44:9D:D4:B7:8C:6D:A2:2E:76:5A:E3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2816
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uig8ly_Pb_0hRJ3Ut4xtoi52WuM.roa
Signing time:             Fri 01 Sep 2023 10:04:55 +0000
ROA not before:           Fri 01 Sep 2023 10:04:55 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.177.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10262 (0x2816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:04:55 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=BA283C972FCF6FFD21449DD4B78C6DA22E765AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:08:a5:f0:38:fa:03:ab:12:b4:b6:8b:46:74:
                    bb:ca:be:44:87:09:a1:c2:6d:db:de:8b:6e:fc:bb:
                    4e:82:a7:0d:c9:27:1c:c1:fd:f8:9c:65:3f:2f:a1:
                    83:a5:67:32:43:a2:f7:d1:83:22:65:9e:85:fa:9f:
                    d3:2a:bf:22:12:9e:9d:65:f0:24:21:4b:88:01:3c:
                    c1:b5:94:13:9f:10:f9:2e:a2:4d:5b:78:77:b7:6c:
                    d4:97:90:51:34:7e:bd:5a:06:8e:9d:37:0a:63:a7:
                    6b:a3:b5:bf:c6:8e:36:68:c0:be:e7:46:0d:7d:49:
                    9d:e0:24:06:9d:d2:8f:fc:94:0d:54:27:5d:6d:85:
                    3d:41:e3:9c:20:fa:5b:44:e6:6e:2f:e7:e1:f6:02:
                    ce:61:ed:12:ef:25:8e:b9:00:6e:19:6d:f1:a0:64:
                    5e:a8:67:81:e1:bb:dd:c2:e0:44:6e:f7:1b:23:2b:
                    50:46:d8:b7:5f:f0:87:a5:9d:63:84:c6:41:f1:58:
                    63:e1:d9:b8:b6:de:42:2a:94:00:ee:72:5f:63:1c:
                    65:45:e6:a0:52:8b:fa:ba:a3:74:b9:26:14:de:30:
                    2a:95:87:7e:ad:68:98:46:a1:e6:30:47:6d:21:99:
                    3f:a5:e9:43:ca:ea:c9:4b:6e:76:52:6b:4a:46:94:
                    f5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:28:3C:97:2F:CF:6F:FD:21:44:9D:D4:B7:8C:6D:A2:2E:76:5A:E3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uig8ly_Pb_0hRJ3Ut4xtoi52WuM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:d9:f2:16:39:e8:2b:e8:51:11:35:f4:54:eb:d9:6f:7b:d1:
         d6:8d:f4:a9:45:9d:12:4b:f0:ec:8a:d2:0d:56:c0:9b:52:4d:
         0f:8a:ca:da:57:8a:90:98:37:c7:b4:0b:53:de:02:31:1f:ff:
         8a:0c:e5:46:4f:1d:d0:ba:26:23:2c:8b:a8:12:5e:68:ab:83:
         2a:10:24:3d:46:63:e8:67:dc:10:af:1f:e6:b3:4f:ff:6a:9b:
         9a:8d:9a:07:65:2f:d7:b9:24:b4:ed:09:4b:59:9b:fb:05:48:
         29:22:66:bc:e3:f6:a0:af:c3:cf:49:68:61:47:94:98:38:ed:
         d0:b1:67:11:5c:95:e4:12:54:f1:f4:00:5b:67:0c:42:b6:1b:
         0e:9d:ac:de:cc:b2:66:a4:76:9f:0b:9c:9e:80:dd:10:cf:1c:
         a4:6d:3d:52:c1:6c:71:d0:13:d3:35:60:4f:c6:b6:27:2e:3b:
         33:bc:1f:be:2a:cd:bf:46:fc:b4:45:54:ff:c3:cd:f3:fa:9d:
         f8:cb:98:b2:4b:10:d1:15:a3:00:cd:26:60:ab:33:52:11:fc:
         01:d5:07:df:c0:fd:71:03:dc:ae:37:33:03:04:34:6d:b2:62:
         36:38:eb:df:18:bf:a7:22:66:f6:48:00:0f:f9:e7:0b:c7:fa:
         d3:ef:7d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org