Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmlxhkbi-cBUwdqT7DrHlb9ghsY.roa
File:                     zmlxhkbi-cBUwdqT7DrHlb9ghsY.roa (raw, json)
Hash identifier:          v4OE7SMoGyEucSiHwiGfQ5WqGnqY8GGlG3Xwq9taLq8=
Subject key identifier:   CE:69:71:86:46:E2:F9:C0:54:C1:DA:93:EC:3A:C7:95:BF:60:86:C6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2FD1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmlxhkbi-cBUwdqT7DrHlb9ghsY.roa
Signing time:             Mon 26 Aug 2024 05:28:53 +0000
ROA not before:           Mon 26 Aug 2024 05:28:53 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.176.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12241 (0x2fd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:28:53 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=CE69718646E2F9C054C1DA93EC3AC795BF6086C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:df:e9:a0:7b:58:3f:4d:d0:f1:31:d7:da:f2:
                    e6:c2:f9:65:6d:05:6f:54:4e:46:ee:98:90:ef:36:
                    65:6c:57:b4:cf:af:0d:12:25:e0:2c:dc:33:b0:3d:
                    d5:a0:4d:30:1d:6c:21:3c:2f:91:f3:7a:b5:74:39:
                    c7:d7:4f:e9:df:a3:c9:25:43:7c:8a:d6:3e:41:38:
                    87:76:f1:5f:03:ad:1e:e9:4c:0d:cd:fb:1e:0f:84:
                    91:2a:d9:86:13:26:5e:87:7b:c9:66:51:f2:55:14:
                    3b:41:fd:7e:0e:3a:2b:58:2c:f7:b4:c0:dc:0a:94:
                    82:f9:20:86:b6:9f:70:3f:84:70:d2:b1:e8:ad:70:
                    35:ff:c9:d2:7e:ee:f5:18:d9:d1:92:ee:08:09:56:
                    56:4c:32:a5:6a:fe:73:d2:e4:ac:c1:82:14:de:2b:
                    3b:a5:60:cf:68:4a:4c:43:e2:95:b4:c7:d8:a9:24:
                    bd:9f:3f:2b:55:01:cf:1a:3f:0d:66:b8:18:7c:6c:
                    d9:a0:c1:92:98:0f:e3:5c:f3:4e:e7:c0:ca:b5:a4:
                    95:45:32:96:0c:fe:1c:d3:80:dc:96:24:78:9b:dc:
                    15:d5:41:ee:6d:08:c1:3f:3d:85:ea:0a:ac:e4:93:
                    b2:41:9c:e4:d8:aa:49:d0:e2:1d:a4:6c:81:0e:0c:
                    08:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:69:71:86:46:E2:F9:C0:54:C1:DA:93:EC:3A:C7:95:BF:60:86:C6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmlxhkbi-cBUwdqT7DrHlb9ghsY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:cf:42:d5:70:6d:a9:5a:61:ed:4e:48:37:5c:e9:88:bf:49:
         ad:2c:d0:20:09:5e:8b:47:0a:58:6d:af:38:6c:1f:96:e1:d6:
         03:f9:6f:a8:be:64:3f:1a:7b:24:2e:5d:e8:29:3d:c7:9a:2f:
         34:f9:21:c1:89:1a:7b:d8:83:21:30:01:2a:3a:2f:67:d5:81:
         3a:e2:b6:de:f4:ed:6a:7b:e3:b9:2d:8a:ad:5b:01:d6:1c:93:
         3d:a4:9c:28:ed:e1:b1:2f:ab:6a:6d:33:86:07:2e:df:16:83:
         77:de:1c:56:ed:f8:30:14:aa:ff:68:ac:bd:9d:fc:17:17:4e:
         17:8f:ad:fc:60:78:5d:e0:76:ea:7d:f0:95:69:5a:d9:18:7a:
         75:21:7c:ad:40:71:74:ec:7d:62:a5:a1:4e:dd:41:77:3d:dd:
         88:9f:69:d6:22:6e:b3:74:bd:47:fd:26:53:98:2e:78:09:b0:
         f5:6f:1b:01:e2:4e:13:a5:a6:68:05:a3:f0:17:15:c6:d0:60:
         81:04:17:05:0a:c7:72:a0:b3:2f:07:df:be:ce:be:82:a9:35:
         42:d0:3d:ff:6b:23:51:82:23:1b:a8:87:bb:51:ab:56:9c:6d:
         40:cd:2b:b6:77:02:d9:f1:8a:cd:7f:ca:82:d1:f8:6d:82:84:
         5d:51:b0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:29:56 2024 by rpki-client on console-fra.rpki-client.org