Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/waix_UL-ir9MoAVGlEtsbxCuhZY.roa
File:                     waix_UL-ir9MoAVGlEtsbxCuhZY.roa (raw, json)
Hash identifier:          zdOLUeBfZfw/Xt5QP3xvkbBerS+ac+BygB5aLMMyJX8=
Subject key identifier:   C1:A8:B1:FD:42:FE:8A:BF:4C:A0:05:46:94:4B:6C:6F:10:AE:85:96
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       30D1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/waix_UL-ir9MoAVGlEtsbxCuhZY.roa
Signing time:             Mon 26 Aug 2024 05:29:51 +0000
ROA not before:           Mon 26 Aug 2024 05:29:51 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.195.8.0/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12497 (0x30d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:29:51 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C1A8B1FD42FE8ABF4CA00546944B6C6F10AE8596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:ca:40:4c:a8:c4:5f:a2:e2:e7:8c:77:6d:
                    7b:4d:7c:31:51:52:53:65:44:64:df:73:47:1f:81:
                    2d:ca:2d:90:69:77:ea:a2:ad:df:c4:2b:40:69:4c:
                    d2:0c:50:f5:79:a4:ad:12:5f:ea:90:6f:d9:82:cd:
                    55:32:8c:fb:da:a1:1c:21:f1:0e:39:a7:6c:f7:02:
                    3c:14:61:cb:26:65:dc:58:de:54:e4:ba:0f:b7:ae:
                    04:ae:23:d0:3b:d5:e1:03:04:57:7d:91:21:ea:10:
                    9c:93:91:6a:36:15:fa:f5:e9:0b:e6:d1:05:3b:24:
                    a5:fd:ae:aa:76:f4:04:d7:4e:5f:4e:e7:2b:50:e4:
                    75:ce:8b:bd:fb:2e:bd:ab:47:e5:32:40:38:94:e1:
                    6f:66:9b:f5:76:66:63:5e:63:41:1f:0c:e6:71:51:
                    ba:67:77:f5:a2:27:a2:8d:ed:cb:e7:c6:8f:b2:fb:
                    08:bb:ba:84:e1:b2:e0:9e:ff:a2:91:dc:bb:6a:c1:
                    e7:e6:83:c8:53:7f:98:ac:d3:fa:b6:5f:dd:f9:78:
                    dc:b8:ee:1a:d8:5f:20:07:d0:b6:de:2e:bd:aa:7e:
                    71:d7:5f:d4:12:23:99:60:b9:fc:93:52:c7:ba:ff:
                    b8:b9:4f:2a:3e:20:7f:b8:0a:82:f9:39:8a:1c:eb:
                    03:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A8:B1:FD:42:FE:8A:BF:4C:A0:05:46:94:4B:6C:6F:10:AE:85:96
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/waix_UL-ir9MoAVGlEtsbxCuhZY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.8.0/26

    Signature Algorithm: sha256WithRSAEncryption
         9f:6b:43:25:cf:dd:a1:e7:ad:a0:df:bf:02:f2:d8:8f:3d:3a:
         80:3f:d4:8f:c8:2c:54:64:2a:38:af:11:12:0b:aa:b7:68:b8:
         e6:62:3b:e9:0a:9d:dd:44:62:d5:ec:b1:7a:13:9a:d7:e3:de:
         24:2b:c5:7c:9a:56:3b:99:1b:e8:08:93:5d:c7:ec:b7:49:90:
         0a:81:e1:63:4b:f9:a3:8b:89:d2:71:80:4d:e3:30:ae:6c:82:
         64:df:00:1b:a8:28:dc:12:ef:c5:db:92:ad:04:fc:66:9d:4a:
         b7:98:d2:ad:08:0d:db:0e:85:53:38:e1:4a:2d:53:a7:d2:62:
         68:9c:7d:a3:c9:9d:ec:6a:35:61:81:70:d6:e4:c9:61:95:2b:
         cb:00:08:74:a3:a3:c8:b3:58:19:46:6f:b0:d1:30:0b:81:d5:
         94:dd:a2:4b:d2:3f:43:f3:31:10:26:b6:47:1d:1d:b3:f7:5d:
         5b:32:49:fa:19:33:0b:39:a1:a0:c1:03:45:79:cd:02:e6:92:
         4a:10:f0:f2:bf:08:16:e1:87:74:90:60:83:e4:02:c9:75:1c:
         9b:72:6b:39:7b:a0:3b:da:f9:a5:35:e0:86:a4:57:b4:e0:25:
         6a:93:37:7e:f1:45:e6:2a:4f:05:a3:e4:0d:92:08:52:bb:de:
         64:25:12:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:29:56 2024 by rpki-client on console-fra.rpki-client.org