Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v7be54DQeT3Z1el8gToH6XWJJyw.roa
File:                     v7be54DQeT3Z1el8gToH6XWJJyw.roa (raw, json)
Hash identifier:          y98nc/jiNOjzPOUvDDJIjSnKTfu/S+etlwkQAAm+9wE=
Subject key identifier:   BF:B6:DE:E7:80:D0:79:3D:D9:D5:E9:7C:81:3A:07:E9:75:89:27:2C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3373
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v7be54DQeT3Z1el8gToH6XWJJyw.roa
Signing time:             Mon 10 Feb 2025 13:51:26 +0000
ROA not before:           Mon 10 Feb 2025 13:51:26 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.192.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 23:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13171 (0x3373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:51:26 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=BFB6DEE780D0793DD9D5E97C813A07E97589272C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bf:53:dd:23:44:1b:0b:30:81:5c:1c:43:c7:
                    9e:62:6e:e7:a1:80:5c:9e:a1:d0:35:0a:3b:6c:cc:
                    22:43:3c:d6:4f:ac:cc:78:a4:60:48:0a:09:7b:00:
                    c5:27:a3:40:18:c4:43:40:c0:24:36:56:4d:f5:d0:
                    46:b9:c7:8e:d0:00:b3:e8:2e:20:fc:6c:b8:4f:f4:
                    85:54:0f:18:78:04:d0:bb:1a:14:8e:c1:65:4a:17:
                    0d:09:70:62:50:c0:f5:c4:2e:ab:ff:b5:74:2d:52:
                    00:71:83:a3:34:27:e4:22:40:cf:9a:dd:a2:c1:4e:
                    f0:e8:76:49:22:ec:08:a8:ee:51:57:1e:c9:65:9c:
                    97:54:4f:9b:85:9e:22:f5:10:cf:df:6d:70:d5:af:
                    be:23:f6:90:83:8d:00:e9:d0:68:81:f1:71:27:ce:
                    4a:cd:e0:c4:53:42:14:6f:48:62:94:eb:8e:f9:be:
                    03:f9:05:35:0f:7c:01:c1:2f:4c:df:83:c0:20:09:
                    ce:5c:62:69:b2:34:ab:36:a9:26:7d:fc:39:99:17:
                    28:52:6b:33:d9:77:0e:3d:be:9e:cb:df:69:34:bf:
                    31:2a:26:d1:6f:1a:80:9d:4a:06:bb:50:31:c8:af:
                    b1:35:b9:b1:ca:20:f1:89:19:e6:86:20:f7:74:e3:
                    e7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B6:DE:E7:80:D0:79:3D:D9:D5:E9:7C:81:3A:07:E9:75:89:27:2C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v7be54DQeT3Z1el8gToH6XWJJyw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:02:72:f1:d4:be:f6:cc:7e:7d:9e:95:73:24:e6:89:d3:d7:
         2a:ca:1d:4f:8b:dd:e0:be:2b:5d:03:b9:9c:51:ef:8d:c4:ee:
         b9:fb:d4:69:3f:37:1f:4c:52:29:e6:10:2e:ac:d4:cd:ae:cb:
         6d:c1:71:dc:a7:ac:a7:8d:ad:7f:ea:69:c1:03:b7:7d:dd:4f:
         e5:8a:b9:f1:c5:30:d7:10:d4:20:9c:92:cd:f7:7a:4d:3f:32:
         52:81:27:71:ac:ad:1e:5e:ad:e7:f4:3f:19:ef:68:c5:24:99:
         7a:0e:7d:8f:fc:6c:f7:d3:2a:7f:10:d9:29:07:07:34:ac:71:
         98:78:a4:57:d2:36:de:0d:e6:47:d1:fe:08:9f:9d:91:3f:39:
         9f:1d:8e:67:18:b2:45:ac:f2:cc:7a:ea:84:9c:25:38:a4:df:
         5a:b1:a2:44:a4:31:45:5e:b4:3b:1f:16:65:06:d7:e8:d0:53:
         ed:50:c2:f7:71:82:41:4c:c8:6d:af:cb:d8:d0:09:77:95:75:
         dd:f6:89:55:9e:57:1f:5f:0e:0e:4e:ed:19:ba:19:8f:8e:fe:
         1e:0f:e9:87:5d:e8:aa:6a:64:42:ec:70:d9:16:6b:4b:ac:21:
         23:c3:0c:42:75:fa:7f:79:5c:a8:d5:2f:84:c7:62:ae:a3:04:
         a8:b7:88:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:10 2025 by rpki-client