Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x_N_nudguK0ttcjFv55cfxyAbFo.roa
File:                     x_N_nudguK0ttcjFv55cfxyAbFo.roa (raw, json)
Hash identifier:          jLoSs64RHtAGdUL1BevAL2Z+iubZz3O1q2LqyCYhkEA=
Subject key identifier:   C7:F3:7F:9E:E7:60:B8:AD:2D:B5:C8:C5:BF:9E:5C:7F:1C:80:6C:5A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       31CD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x_N_nudguK0ttcjFv55cfxyAbFo.roa
Signing time:             Mon 26 Aug 2024 05:30:58 +0000
ROA not before:           Mon 26 Aug 2024 05:30:58 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        106.1.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 00:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12749 (0x31cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:58 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C7F37F9EE760B8AD2DB5C8C5BF9E5C7F1C806C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5a:c4:9a:5f:d8:bc:87:ac:b6:86:47:4b:e5:
                    09:74:bc:fd:1c:f5:d6:60:ea:77:5f:2d:08:5b:00:
                    87:8f:d8:01:56:a4:67:a3:15:eb:3e:5d:f5:ce:10:
                    71:6c:25:99:33:72:9b:d8:03:16:96:c0:2a:4c:57:
                    a0:09:05:aa:10:cf:96:21:3c:8f:ab:1d:4d:5c:5b:
                    1e:1e:23:8b:ff:21:a9:e2:7f:d8:40:31:b1:4c:78:
                    20:80:bf:a4:38:dc:8a:d6:4c:4a:3a:b1:2f:62:23:
                    e0:f6:70:3e:42:6e:1a:ee:63:2b:b2:83:49:76:8a:
                    f7:dd:95:a0:e2:74:f2:1b:03:80:68:83:50:65:3d:
                    cf:bd:00:46:06:2d:37:33:6e:8b:33:ca:b0:d8:f4:
                    b1:9c:4a:55:be:67:32:04:14:16:08:c6:7f:a3:5d:
                    ee:6d:65:7f:f0:00:87:c5:65:72:c1:7e:00:89:f4:
                    d0:a7:7d:22:47:d8:37:ee:4f:23:57:5a:87:56:0d:
                    25:a7:91:9c:fc:fd:36:d5:8f:0b:bc:c1:29:2d:e4:
                    f3:67:9b:c2:a6:93:96:e6:13:00:37:82:d8:4c:5e:
                    09:71:4a:4f:ec:22:46:f0:86:c9:02:0c:89:d5:07:
                    39:bf:da:00:4b:10:a8:00:e4:f9:c2:f6:07:8a:dc:
                    4b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F3:7F:9E:E7:60:B8:AD:2D:B5:C8:C5:BF:9E:5C:7F:1C:80:6C:5A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x_N_nudguK0ttcjFv55cfxyAbFo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:4c:37:61:c2:4d:ee:f2:9f:78:f1:ab:c0:24:aa:a2:f3:07:
         03:a0:50:89:58:e4:e9:3c:c5:f9:1e:70:f2:97:d1:d0:67:8b:
         9c:fd:6c:51:ae:52:f3:9b:aa:d0:ff:0d:e2:df:b2:4b:22:38:
         0f:4a:6b:e8:c2:52:d1:3b:c4:53:c1:c2:e1:82:bc:87:52:e2:
         fe:47:79:c7:59:a0:4d:c2:af:e2:46:dd:d9:a9:c3:ba:06:ec:
         1b:8b:35:6c:c0:e1:9a:68:60:39:3d:9a:14:ba:ca:24:f9:d4:
         fd:fc:fc:4e:9f:7e:1d:bf:5f:27:99:31:0d:03:77:37:0a:59:
         9b:6e:8f:51:aa:e3:22:91:0d:8a:c3:52:34:88:df:ae:62:48:
         61:da:cd:e7:7f:43:c9:fb:fa:b7:3a:4c:bb:64:93:1b:8f:31:
         14:07:3c:03:1c:42:bf:03:0b:12:23:4b:62:63:63:5c:ec:83:
         1c:c4:f5:e3:0e:af:41:11:bf:87:8c:f7:15:87:93:e4:4a:48:
         d6:c1:bb:00:c4:f2:73:03:ba:32:83:3f:16:f5:62:16:46:35:
         ea:89:17:d3:2c:bf:92:3f:f7:48:86:2a:d4:fd:8e:0d:05:1a:
         b2:8b:08:d5:49:a8:43:08:75:fe:ff:54:28:52:93:db:f1:53:
         f4:a8:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org