Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6x2WB1bwDsjmJtAbB4_X8iZgnE.roa
File:                     w6x2WB1bwDsjmJtAbB4_X8iZgnE.roa (raw, json)
Hash identifier:          VjEpP+k5EdKeulPlUHf62OZOAX33TEjTUDdR6K7txCs=
Subject key identifier:   C3:AC:76:58:1D:5B:C0:3B:23:98:9B:40:6C:1E:3F:5F:C8:99:82:71
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3099
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6x2WB1bwDsjmJtAbB4_X8iZgnE.roa
Signing time:             Mon 26 Aug 2024 05:29:37 +0000
ROA not before:           Mon 26 Aug 2024 05:29:37 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9924
IP address blocks:        118.232.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12441 (0x3099)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:29:37 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C3AC76581D5BC03B23989B406C1E3F5FC8998271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c4:ab:ec:04:21:68:94:db:d0:ef:d5:ae:57:
                    4a:0e:0b:5c:fb:a8:8f:6a:9a:ce:3d:c5:37:ce:24:
                    b1:6b:4f:48:1a:d5:c7:fe:d6:04:8d:2e:4d:2e:07:
                    9e:67:c4:66:03:0d:99:d7:f4:c5:15:82:84:95:25:
                    13:af:aa:3d:15:96:d4:fe:4f:a6:13:25:2c:c4:96:
                    bc:9b:85:32:46:3b:1d:91:f1:48:2a:44:b9:2f:35:
                    98:78:f8:06:37:b0:62:94:a4:aa:08:a6:02:45:77:
                    fc:19:5e:91:3f:60:d2:f6:b2:48:48:51:c3:e1:21:
                    36:30:05:97:16:81:7c:5a:81:86:b3:ac:68:43:09:
                    bf:e9:d6:81:3c:44:12:15:be:81:7a:70:7e:69:69:
                    92:c5:ae:df:06:cf:33:b6:aa:57:29:ae:03:6b:ab:
                    34:3e:f9:b6:29:d6:84:e2:67:e1:6b:45:b0:08:35:
                    4b:f5:b1:33:b7:de:3f:24:8a:06:a4:fc:46:ff:e1:
                    cd:b5:da:5a:00:6f:b3:bd:b8:86:21:f7:8a:e7:5e:
                    f6:6f:34:ee:6c:ce:99:89:75:e3:64:95:d0:22:e4:
                    e2:fb:e8:4a:1e:13:18:02:dd:8d:82:cf:b6:e3:04:
                    47:26:6a:76:63:7a:36:c3:db:bd:2e:9a:81:ab:45:
                    1b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AC:76:58:1D:5B:C0:3B:23:98:9B:40:6C:1E:3F:5F:C8:99:82:71
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6x2WB1bwDsjmJtAbB4_X8iZgnE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         12:b4:9b:6e:bb:0d:86:de:2a:75:a8:2d:46:fa:f0:12:74:2f:
         bb:b9:ee:1b:2a:8e:dd:03:1c:43:03:bc:c1:9a:ba:56:c1:1e:
         71:f8:a3:0f:e5:e9:87:b9:58:f9:02:60:ba:2a:49:00:90:a5:
         2b:d7:19:7e:ca:c1:77:59:6a:3c:97:43:6e:94:fa:72:b0:0a:
         ad:78:ed:51:75:2f:29:4b:a9:ec:72:3a:99:f1:90:1a:33:05:
         1b:3c:dd:82:73:1f:b2:54:54:b1:fd:3b:8c:84:40:d3:6b:ea:
         b5:c5:28:e4:fe:b0:3d:cf:af:4b:9d:78:69:13:ea:f6:ba:45:
         4a:c1:7c:f3:26:41:9f:e5:bb:58:92:f5:c5:90:71:9f:0e:2b:
         8b:3f:6c:99:7d:06:b5:a9:25:18:84:4d:54:cc:0e:cb:c9:c5:
         19:30:b0:f2:85:08:d4:3e:7d:b2:50:29:f9:5e:71:49:c4:d1:
         45:5a:3d:0c:bf:53:3f:54:70:e1:cf:f1:18:43:99:96:34:22:
         be:81:16:d2:7d:f4:f8:54:c2:70:ae:58:98:2b:60:46:aa:23:
         b3:91:f7:38:c3:3b:e9:5d:2c:7e:f2:85:9f:f8:33:25:38:05:
         cb:e5:7e:7a:35:f4:3e:cb:c3:32:ed:d4:58:a6:34:d5:85:0d:
         b2:cb:8d:4f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTI5MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMzQUM3NjU4MUQ1QkMw
M0IyMzk4OUI0MDZDMUUzRjVGQzg5OTgyNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDixKvsBCFolNvQ79WuV0oOC1z7qI9qms49xTfOJLFrT0ga1cf+
1gSNLk0uB55nxGYDDZnX9MUVgoSVJROvqj0VltT+T6YTJSzElrybhTJGOx2R8Ugq
RLkvNZh4+AY3sGKUpKoIpgJFd/wZXpE/YNL2skhIUcPhITYwBZcWgXxagYazrGhD
Cb/p1oE8RBIVvoF6cH5paZLFrt8GzzO2qlcprgNrqzQ++bYp1oTiZ+FrRbAINUv1
sTO33j8kigak/Eb/4c212loAb7O9uIYh94rnXvZvNO5szpmJdeNkldAi5OL76Eoe
ExgC3Y2Cz7bjBEcmanZjejbD270umoGrRRuDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUw6x2WB1bwDsjmJtAbB4/X8iZgnEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3c2eDJXQjFid0Rzam1KdEFi
QjRfWDhpWmduRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ2
6IAwDQYJKoZIhvcNAQELBQADggEBABK0m267DYbeKnWoLUb68BJ0L7u57hsqjt0D
HEMDvMGaulbBHnH4ow/l6Ye5WPkCYLoqSQCQpSvXGX7KwXdZajyXQ26U+nKwCq14
7VF1LylLqexyOpnxkBozBRs83YJzH7JUVLH9O4yEQNNr6rXFKOT+sD3Pr0udeGkT
6va6RUrBfPMmQZ/lu1iS9cWQcZ8OK4s/bJl9BrWpJRiETVTMDsvJxRkwsPKFCNQ+
fbJQKflecUnE0UVaPQy/Uz9UcOHP8RhDmZY0Ir6BFtJ99PhUwnCuWJgrYEaqI7OR
9zjDO+ldLH7yhZ/4MyU4Bcvlfno19D7LwzLt1FimNNWFDbLLjU8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:59 2024 by rpki-client on console-fra.rpki-client.org