Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/4BV5d92ovYqirGBGsYnradD3Bhc.roa
File:                     4BV5d92ovYqirGBGsYnradD3Bhc.roa (raw, json)
Hash identifier:          6622FW1efR6o9uhVxLlFAWD0Qeh/IDoCPVNwSs+jQgM=
Subject key identifier:   E0:15:79:77:DD:A8:BD:8A:A2:AC:60:46:B1:89:EB:69:D0:F7:06:17
Certificate issuer:       /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Certificate serial:       0B41
Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/4BV5d92ovYqirGBGsYnradD3Bhc.roa
Signing time:             Fri 01 Sep 2023 10:17:07 +0000
ROA not before:           Fri 01 Sep 2023 10:17:07 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17408
IP address blocks:        103.123.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 13:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2881 (0xb41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
        Validity
            Not Before: Sep  1 10:17:07 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E0157977DDA8BD8AA2AC6046B189EB69D0F70617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:44:00:6c:64:35:1d:45:8a:28:51:6c:75:53:
                    0f:bc:59:cc:11:47:9b:e6:a4:8b:1d:14:a0:a6:d8:
                    8e:84:93:a7:d7:79:df:bc:6a:38:b1:14:09:8a:a7:
                    07:36:32:9a:d7:07:96:7b:40:56:d1:29:20:13:63:
                    eb:57:57:c4:12:13:ff:ad:3b:df:c3:f1:c8:03:ed:
                    af:da:7e:17:dc:1f:ed:6e:32:68:a1:0c:28:0d:40:
                    54:0a:e1:f2:b0:9f:21:6f:83:98:c7:89:95:56:8b:
                    d4:9f:1a:9f:98:21:96:e3:ad:48:be:74:32:4c:ea:
                    50:b3:37:ef:e7:16:6f:68:93:82:12:2d:34:3b:cd:
                    c4:6b:11:b9:a7:f4:15:d5:42:60:ae:20:c4:e9:c1:
                    2a:01:8f:ed:91:52:ee:d2:96:f7:5e:34:ae:3f:91:
                    91:79:f3:f9:d9:4e:7a:fc:b6:e5:ab:6b:4a:78:15:
                    1d:31:83:5a:20:e6:52:6e:d2:24:1d:8f:92:ec:e2:
                    c0:3b:af:64:1f:fc:38:da:95:0e:b8:6e:92:87:95:
                    f5:91:8f:25:c7:85:cd:d6:3c:5d:ff:5e:53:d2:c0:
                    8e:8f:38:84:ba:7f:67:a8:cc:dc:0c:a4:f9:db:73:
                    56:0a:27:27:30:49:76:f5:50:b3:be:1c:2c:7b:35:
                    5d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:15:79:77:DD:A8:BD:8A:A2:AC:60:46:B1:89:EB:69:D0:F7:06:17
            X509v3 Authority Key Identifier:
                keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/4BV5d92ovYqirGBGsYnradD3Bhc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:ab:c6:82:42:33:ac:25:24:42:3d:01:60:6e:f4:a2:ef:62:
         98:ef:db:83:75:75:66:09:e0:ca:c2:56:02:c9:7c:2c:6b:d0:
         38:9d:35:35:04:a3:12:04:aa:5f:29:e4:d9:f7:8a:68:4f:ee:
         36:1f:95:4f:8a:92:2e:bd:ef:91:61:f0:80:fb:81:48:02:87:
         09:f6:45:63:ae:21:e0:e6:44:eb:4f:f1:cd:4b:52:40:d3:02:
         6b:d1:3a:51:99:00:6f:cd:ab:12:60:ad:b7:c8:66:52:eb:a3:
         e5:af:97:ef:58:8b:6c:85:7e:8e:06:59:ac:d9:38:5f:99:07:
         44:89:31:6c:b4:53:13:31:74:b3:bc:71:58:30:f1:db:3c:35:
         ee:e4:60:45:be:4b:c4:4a:dd:ac:cd:b6:66:98:e0:cb:8a:aa:
         71:38:a6:21:69:b9:eb:2d:25:bf:dc:7b:cc:6e:88:10:6e:94:
         2e:88:05:83:05:3a:8e:84:33:31:45:f3:95:b0:4d:45:dc:4c:
         aa:21:cd:37:69:a9:f4:2a:0e:71:f9:58:9f:e2:3e:98:4d:78:
         33:8a:53:ea:a6:04:68:d2:27:36:dc:84:de:85:1d:34:14:8b:
         9e:03:a7:0b:07:44:8e:24:48:d9:6f:89:5b:da:d0:b6:97:74:
         4e:8e:87:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:22:04 2024 by rpki-client on console-ams.rpki-client.org