Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/8PAvO999RzE_3fflY4sGnExFwoc.roa
File:                     8PAvO999RzE_3fflY4sGnExFwoc.roa (raw, json)
Hash identifier:          I9r2hDIWrz91h2grMDBw63O0MCxijjTI3EKZhait7e4=
Subject key identifier:   F0:F0:2F:3B:DF:7D:47:31:3F:DD:F7:E5:63:8B:06:9C:4C:45:C2:87
Certificate issuer:       /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Certificate serial:       0B8F
Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/8PAvO999RzE_3fflY4sGnExFwoc.roa
Signing time:             Fri 08 Dec 2023 08:59:50 +0000
ROA not before:           Fri 08 Dec 2023 08:59:50 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18419
IP address blocks:        103.130.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 13:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2959 (0xb8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
        Validity
            Not Before: Dec  8 08:59:50 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=F0F02F3BDF7D47313FDDF7E5638B069C4C45C287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:45:9f:79:47:55:37:f1:5d:fe:c4:44:50:
                    d8:1f:8a:0f:b5:62:ba:6c:f1:06:25:1d:33:29:dd:
                    e4:17:1c:f9:b0:f3:99:78:3f:60:cb:4b:4c:77:65:
                    e0:2e:d3:88:ac:27:24:0a:34:f4:ef:3c:64:e7:85:
                    e5:f3:12:b1:1b:1d:61:41:d7:88:e2:87:0b:3a:b3:
                    84:d3:46:a2:84:2c:5a:53:ff:38:86:03:39:72:73:
                    ed:f7:87:58:60:be:8c:0d:25:32:dc:2d:d8:7b:e6:
                    13:e5:07:7b:6a:78:f2:f0:bd:fc:2a:b4:db:fb:a1:
                    2f:4b:c3:ac:03:e3:4a:aa:7d:0d:14:1c:8b:cd:f7:
                    11:cc:52:1c:32:d1:2c:b8:1e:c3:53:9a:4a:38:74:
                    85:fc:40:65:4d:dd:5d:72:45:ad:9e:af:ee:8c:54:
                    cb:7d:38:d7:49:b9:08:d2:7a:51:09:83:36:e4:91:
                    17:79:09:d5:82:25:af:84:36:38:20:22:5a:a5:59:
                    10:73:a3:ce:a0:60:52:92:5c:c2:32:c1:9f:51:c6:
                    c7:1b:69:ba:00:a5:68:b8:48:4b:10:8b:c3:ae:2d:
                    75:0a:bf:ba:3a:9e:c3:a4:69:3d:0c:96:b4:ae:00:
                    ff:72:5c:ad:de:12:33:3b:e1:1c:ac:71:e5:4a:b2:
                    18:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F0:2F:3B:DF:7D:47:31:3F:DD:F7:E5:63:8B:06:9C:4C:45:C2:87
            X509v3 Authority Key Identifier:
                keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/8PAvO999RzE_3fflY4sGnExFwoc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:f6:aa:a4:f2:d5:90:b5:de:92:22:0a:7f:6c:a3:f5:ef:20:
         89:5e:89:23:dd:d2:ad:03:c5:38:c1:42:20:7a:90:0d:68:7a:
         83:b9:cb:96:00:89:49:a8:16:c8:4e:6f:dd:a5:19:1c:74:05:
         9f:88:50:d7:4b:a3:97:9e:ea:c2:81:b6:5f:04:79:11:3c:51:
         56:d5:58:a0:94:49:e1:e3:80:5c:1e:4a:98:17:72:2f:0c:24:
         dc:d2:41:4c:70:db:d6:11:16:76:f8:52:60:55:d5:f7:8a:2f:
         40:e4:4f:f1:64:d7:b2:e5:e5:ed:53:a8:b2:53:5f:8b:b4:41:
         60:92:68:32:5b:53:f7:e4:8f:02:b4:16:bc:81:da:80:ef:7b:
         7b:4b:5f:82:d7:9f:08:a9:ec:93:c8:63:b8:e3:02:4d:39:b4:
         6f:92:cc:04:1e:63:a9:12:57:3e:d3:1f:57:b2:83:c9:46:51:
         48:4b:d4:7f:0b:6a:92:3c:2e:c7:97:86:f3:e3:fa:ab:40:d9:
         0b:80:0e:b4:71:48:a8:d3:97:4b:7f:23:a5:1f:47:ff:22:31:
         61:d5:aa:3c:af:0d:ad:c3:51:f2:58:d9:dd:9d:24:fa:9d:ff:
         a8:9d:26:60:ae:c5:ab:69:7a:2a:d3:21:76:41:01:99:55:0d:
         0e:c3:cc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org