Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zv2wxso1pqX5iszOn3ChG5Bjb6o.roa
File:                     zv2wxso1pqX5iszOn3ChG5Bjb6o.roa (raw, json)
Hash identifier:          aDi35RA8MVXw47ozl4tUlloLiR4vb9YELv1mMM9kcZo=
Subject key identifier:   CE:FD:B0:C6:CA:35:A6:A5:F9:8A:CC:CE:9F:70:A1:1B:90:63:6F:AA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       320B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zv2wxso1pqX5iszOn3ChG5Bjb6o.roa
Signing time:             Mon 26 Aug 2024 05:31:12 +0000
ROA not before:           Mon 26 Aug 2024 05:31:12 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9924
IP address blocks:        123.195.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12811 (0x320b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 26 05:31:12 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=CEFDB0C6CA35A6A5F98ACCCE9F70A11B90636FAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:d8:b3:d4:03:16:da:dc:60:4d:39:50:cf:
                    7f:17:d3:cf:48:55:bd:22:16:47:14:78:d2:ee:b9:
                    05:12:7d:61:f4:ea:b8:99:d5:4f:16:47:9b:e6:f3:
                    79:18:c2:aa:d7:d6:5b:bc:49:d2:ba:ff:c0:e9:a7:
                    3f:46:f9:ed:25:99:ed:d4:41:3e:37:fa:af:e6:9e:
                    17:7c:b1:c3:22:8d:7c:e4:ab:72:13:61:2b:f1:35:
                    36:23:92:00:28:da:83:90:4e:21:33:d9:bc:43:32:
                    51:96:de:bc:62:fd:08:d2:0f:7f:40:31:a7:0c:58:
                    93:97:d3:d9:c8:ac:7c:e2:db:df:57:45:8a:13:81:
                    5a:83:ce:55:52:a2:78:7d:1a:89:56:7d:a6:cb:2a:
                    7c:12:ad:cf:d4:d2:b7:9b:a2:46:2f:13:25:d2:c2:
                    e4:37:3c:9d:f1:1e:5d:80:75:77:b9:b6:2b:5a:59:
                    c0:ff:a7:7b:c5:f9:8b:e9:cb:d8:fd:f4:93:06:5f:
                    3f:b8:cc:27:39:4a:97:a3:57:91:81:72:9d:e3:b4:
                    80:0b:e9:d5:9c:60:76:61:10:3b:9d:1c:2b:21:d7:
                    c1:cc:0a:60:63:99:cd:90:42:3b:be:f9:cf:f2:68:
                    ac:14:e5:e7:1f:5e:23:5f:d1:a2:d7:7f:e7:39:1d:
                    0f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FD:B0:C6:CA:35:A6:A5:F9:8A:CC:CE:9F:70:A1:1B:90:63:6F:AA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zv2wxso1pqX5iszOn3ChG5Bjb6o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         05:fd:f0:e6:2f:1e:9a:2b:c3:58:13:2b:74:f2:a2:e2:93:9d:
         c9:b4:15:74:11:d2:54:df:22:62:c4:83:54:f7:75:f6:e2:90:
         86:fa:c7:b0:7e:f5:29:0c:a4:ee:9b:5d:4d:80:ee:32:a4:0d:
         fb:af:f8:88:b9:18:97:ab:ef:d5:b7:c0:72:57:c1:b2:4e:2e:
         8a:d0:f0:50:9d:a2:f1:af:21:39:41:64:dc:00:e9:f6:c3:15:
         86:16:13:d5:44:27:ee:5c:6d:cb:5f:95:93:7e:4d:88:6b:bf:
         f8:03:9c:0d:a1:c2:c7:b1:2f:b6:c6:c1:1d:73:07:4b:64:de:
         84:b8:e6:64:0b:32:93:b5:73:85:2c:94:7f:ce:b8:d7:14:82:
         ff:68:74:59:d2:2a:78:6f:ea:c9:c9:b8:4d:f4:da:83:26:a6:
         7a:cc:23:45:97:67:3e:3e:1e:1f:af:4a:04:64:f2:8f:a0:1e:
         bc:4e:07:a6:40:56:06:cb:21:1f:a5:38:0f:3b:e1:e1:aa:93:
         eb:e5:f9:c5:55:26:00:28:f0:44:c5:9d:d0:f3:0a:ca:b5:c1:
         93:76:d5:19:7d:ea:b9:24:c6:9a:a8:bb:6c:5b:e3:7e:9d:e5:
         05:83:a6:ea:bd:73:c1:53:de:e9:80:2e:b5:89:e8:09:ab:32:
         a8:a5:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:24 2024 by rpki-client on console-ams.rpki-client.org