Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xn-ad5mUSJkziijuCC00-ABJrc8.roa
File:                     xn-ad5mUSJkziijuCC00-ABJrc8.roa (raw, json)
Hash identifier:          C0fNaupkpoirtqP0+qqLFlKLJ7Dh9W+1/Gd4+M1fVPk=
Subject key identifier:   C6:7F:9A:77:99:94:48:99:33:8A:28:EE:08:2D:34:F8:00:49:AD:CF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3166
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xn-ad5mUSJkziijuCC00-ABJrc8.roa
Signing time:             Mon 26 Aug 2024 05:30:25 +0000
ROA not before:           Mon 26 Aug 2024 05:30:25 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        211.76.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 00:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12646 (0x3166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:30:25 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C67F9A7799944899338A28EE082D34F80049ADCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:56:08:fe:db:20:33:eb:e4:73:9f:b8:16:
                    4f:9b:a2:39:9e:46:21:55:4e:51:97:b3:39:93:08:
                    62:2b:f5:57:80:a0:1d:60:a8:f5:78:fc:d5:76:8a:
                    90:fb:cf:ec:7e:6b:eb:d6:9d:d3:27:09:fc:6f:52:
                    a6:98:ae:2f:b3:55:6e:73:cb:b8:a6:dd:af:ab:d3:
                    3f:64:c0:98:4d:c3:c3:56:02:ef:1d:ab:14:ab:a1:
                    ea:43:80:8b:fc:a4:9b:2e:9c:99:fa:9b:1f:1e:fc:
                    5c:a2:ad:e4:4a:15:53:c2:2f:48:46:57:98:0f:a8:
                    33:ec:41:1e:b7:72:1f:f8:81:16:06:cc:bb:cb:6b:
                    49:9e:58:19:55:a8:59:b7:00:4d:2b:05:78:2f:b9:
                    c7:91:81:85:d6:4d:c1:9f:64:66:14:ac:92:f6:3a:
                    58:51:53:88:31:60:37:4c:82:29:9e:61:0e:e8:4c:
                    5d:5f:28:dc:48:1a:ab:93:2c:71:2d:77:7e:24:72:
                    dd:e0:05:c2:b7:81:c1:f7:43:12:ff:82:4c:08:67:
                    d4:b3:25:e8:96:2b:09:b8:6e:fe:da:32:e5:d3:f2:
                    90:7f:55:b6:56:48:09:df:6f:5e:e3:2f:70:41:db:
                    a2:c6:a3:80:ff:2b:73:dc:a7:9e:cd:35:e6:95:3e:
                    5c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7F:9A:77:99:94:48:99:33:8A:28:EE:08:2D:34:F8:00:49:AD:CF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xn-ad5mUSJkziijuCC00-ABJrc8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:78:b4:4c:98:ef:09:b9:da:5c:2b:a8:64:9f:59:dc:61:28:
         98:35:5b:ef:da:a1:e5:c8:97:e7:26:2d:56:f8:9c:a5:c9:ed:
         d1:da:e4:14:af:61:57:b3:16:0e:a9:09:60:dc:04:3b:b2:37:
         36:e4:4e:c3:63:27:38:ce:5c:e1:99:e4:7d:75:cb:69:c2:fd:
         a5:e8:96:e2:a4:1a:8e:41:3b:92:79:e9:97:47:25:42:25:0d:
         a6:67:dd:fc:0f:c2:70:29:5e:c3:f1:d3:c7:24:54:0a:2a:df:
         84:eb:5e:ee:4e:1d:15:6e:10:27:b4:85:f3:3a:04:b5:57:35:
         70:d1:bf:79:d8:74:cf:1e:b4:c3:b0:d6:c9:4d:71:db:24:6b:
         c7:ed:23:f6:b3:4a:02:ef:79:99:48:66:35:d3:aa:77:2f:60:
         2a:84:4f:20:1d:ab:dc:d6:f0:27:f2:5c:70:c7:ef:e0:0c:03:
         65:8d:82:b3:fb:fe:0e:8a:ac:f0:ad:7a:e3:f9:f2:8d:41:18:
         b1:5e:af:8f:96:fe:49:81:5f:40:1c:34:99:77:ac:1e:13:14:
         c8:f7:70:bf:af:33:8e:a3:11:06:fb:6e:34:d6:8b:42:50:79:
         fd:ca:28:ec:ab:12:3c:89:f8:3e:55:7e:22:95:50:e1:ba:19:
         75:1d:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org