Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/-_3z9YneTh9_VPXotPLwiW8Tnio.roa
File:                     -_3z9YneTh9_VPXotPLwiW8Tnio.roa (raw, json)
Hash identifier:          wt63Jl83G2N3TQXeLK9GPFOpcPPTqr87zoZl1TT7Vs4=
Subject key identifier:   FB:FD:F3:F5:89:DE:4E:1F:7F:54:F5:E8:B4:F2:F0:89:6F:13:9E:2A
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       117D
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/-_3z9YneTh9_VPXotPLwiW8Tnio.roa
Signing time:             Fri 01 Sep 2023 05:00:51 +0000
ROA not before:           Fri 01 Sep 2023 05:00:51 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131621
IP address blocks:        2001:dc1::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Jun 2024 12:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4477 (0x117d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Sep  1 05:00:51 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=FBFDF3F589DE4E1F7F54F5E8B4F2F0896F139E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a0:a2:45:4c:a2:ed:8d:4f:f7:c1:f4:3c:75:
                    37:78:0b:50:4c:1e:9f:e1:cc:88:c0:0d:32:60:98:
                    50:7c:2f:4d:8f:da:fe:de:e3:e7:52:b2:cd:57:1f:
                    2e:2b:8c:b7:65:20:68:3d:b5:3b:45:ee:b2:1f:91:
                    73:02:fa:58:39:6e:ef:c8:42:90:1d:79:cb:03:63:
                    bd:c0:db:5b:2f:1e:18:d2:81:d0:48:76:78:6b:da:
                    05:b8:d9:d6:9a:24:38:c3:32:3b:fb:97:6e:37:c1:
                    5c:1f:a6:1b:64:c6:7c:b8:fa:08:a7:b6:d0:97:dd:
                    1b:07:8c:e8:09:71:fe:db:b9:63:e9:d8:04:92:84:
                    23:a0:d5:11:21:26:79:e0:50:e7:ee:5e:08:5a:35:
                    44:50:e5:14:b2:6f:09:52:7c:b0:96:60:0a:c9:ce:
                    d2:ae:9d:d8:e7:88:6d:80:fb:3c:41:e9:56:fb:7c:
                    06:87:04:94:b5:91:1a:9e:80:ee:14:08:af:0c:b5:
                    42:e5:c8:23:dc:6d:c8:4c:28:c7:32:a9:30:b0:32:
                    77:27:e7:d0:b8:7b:01:f4:05:ce:f6:34:53:00:bb:
                    05:c0:dd:e1:5b:e8:05:48:00:e1:96:00:cc:16:19:
                    d6:40:84:0c:36:24:0f:bb:b4:58:df:c6:e6:bb:39:
                    86:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FD:F3:F5:89:DE:4E:1F:7F:54:F5:E8:B4:F2:F0:89:6F:13:9E:2A
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/-_3z9YneTh9_VPXotPLwiW8Tnio.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:dc1::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:33:13:f5:43:70:2f:1e:65:6d:a5:25:82:cb:86:16:1f:6f:
         1f:0a:5f:7f:77:4c:6a:21:a4:3e:2f:36:da:10:2f:df:ec:13:
         58:a8:61:a4:e8:a5:9f:99:5c:3a:d3:32:39:ae:2f:de:ea:6c:
         ad:0f:fa:d2:b0:a0:23:32:da:0a:f1:8a:c0:d5:ac:12:11:fe:
         36:95:98:e0:d0:65:af:82:b9:89:91:6a:73:8b:c2:1f:69:0f:
         57:d0:46:a2:8a:ad:9e:aa:4d:ad:3d:63:7f:44:39:90:49:c5:
         fc:3b:e7:1a:10:43:37:1d:a0:cc:04:66:bd:6d:d0:90:f0:37:
         e7:59:3e:5f:86:aa:be:45:67:b9:61:9a:3a:b1:ec:d8:f8:47:
         0e:ec:75:89:c0:56:7f:e6:5f:87:75:83:99:ff:0e:9f:c5:25:
         63:11:c9:1c:96:21:a7:96:9a:38:6b:4b:83:76:3e:12:cb:23:
         10:cb:d1:7d:df:69:c6:00:ba:fb:d8:a8:84:11:d6:20:12:9c:
         26:cf:6c:12:bb:c3:d1:9b:ad:1e:b1:99:90:2a:a9:28:b5:35:
         a0:b1:ef:b8:fc:7c:b7:d1:69:70:0b:29:13:98:c1:9c:07:60:
         6b:e7:4f:97:4a:a0:82:63:9a:0e:31:0f:11:21:f0:e1:0b:62:
         6d:ff:48:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 08:47:49 2024 by rpki-client on console-fra.rpki-client.org