Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/0mG6sNqmQRj_WZxFkV5N3HoVRqE.roa
File:                     0mG6sNqmQRj_WZxFkV5N3HoVRqE.roa (raw, json)
Hash identifier:          i2E5uM4QPhlBycT0nb6DGx2dEfwHPsCLnBRIeEESgik=
Subject key identifier:   D2:61:BA:B0:DA:A6:41:18:FF:59:9C:45:91:5E:4D:DC:7A:15:46:A1
Certificate issuer:       /CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
Certificate serial:       0BC6
Authority key identifier: 33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/0mG6sNqmQRj_WZxFkV5N3HoVRqE.roa
Signing time:             Mon 26 Aug 2024 05:34:40 +0000
ROA not before:           Mon 26 Aug 2024 05:34:40 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18046
IP address blocks:        103.16.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3014 (0xbc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
        Validity
            Not Before: Aug 26 05:34:40 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D261BAB0DAA64118FF599C45915E4DDC7A1546A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b2:43:cf:ef:df:d2:6b:c0:7c:df:b2:22:54:
                    f0:38:a6:d0:40:ad:93:9a:3c:5c:8c:db:f3:46:12:
                    1b:d8:1a:6f:26:ca:c8:a7:8b:9b:c2:0e:ce:e4:3d:
                    90:e2:8e:13:37:6a:ce:9a:28:55:83:db:6a:ab:c8:
                    1b:6a:45:f2:77:d4:7c:ca:16:3f:7c:b7:f8:ae:49:
                    18:a4:55:b4:38:8d:8e:d3:96:35:cc:7b:8d:c4:90:
                    a8:75:f3:2b:22:20:ec:1c:6f:c0:27:70:df:0e:a4:
                    34:59:ea:97:28:2b:12:5b:83:60:37:2a:76:aa:e0:
                    3e:72:9a:e6:14:c4:b9:50:3d:bf:26:20:1c:2c:51:
                    ae:88:fb:a8:fc:20:63:ed:d5:e7:df:41:f8:97:d5:
                    7e:d1:fb:ba:01:9b:5a:38:64:3a:e5:75:37:5c:67:
                    d2:4c:81:b5:c4:c9:e7:33:f9:32:d1:06:4a:03:c4:
                    1e:b4:db:e1:a8:8a:a8:88:38:6b:f6:93:d5:76:ce:
                    18:d6:dd:78:da:54:a8:73:6e:1d:3d:90:89:70:ca:
                    c6:eb:bb:b2:d8:f1:a5:0c:b6:8f:fc:fa:56:e1:fc:
                    b5:93:33:a6:27:1f:c8:06:8e:ed:ef:a7:ee:9f:91:
                    fd:a7:51:11:f8:52:9a:65:75:c3:0e:78:a6:f7:4f:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:61:BA:B0:DA:A6:41:18:FF:59:9C:45:91:5E:4D:DC:7A:15:46:A1
            X509v3 Authority Key Identifier:
                keyid:33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/0mG6sNqmQRj_WZxFkV5N3HoVRqE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:5d:fd:16:5a:2d:12:f9:36:b9:9f:48:d6:28:21:82:43:b6:
         8a:d0:ca:60:57:a1:68:81:65:57:12:77:3f:ce:01:7f:ee:f2:
         ab:af:64:a8:f6:5e:21:f9:be:93:82:7d:cf:7e:df:08:7a:d0:
         11:4b:e3:cc:82:25:8c:1c:3d:db:86:f2:83:9a:a3:96:0c:49:
         9d:3e:6a:91:0b:0d:ee:c5:28:0a:f6:32:04:50:4e:b0:91:6b:
         6b:4f:39:79:26:fc:ea:9b:db:4e:47:14:fe:4e:db:cb:b5:ec:
         e7:bb:14:bb:41:ec:06:46:df:cd:e4:8f:d1:fb:b7:79:49:e5:
         f4:26:7b:f0:ff:e0:ad:2a:59:4a:ca:59:33:6c:11:85:f0:64:
         72:43:84:29:d4:20:2b:20:6f:93:d6:ac:a3:f7:a3:c2:49:df:
         3f:cc:53:23:2f:3a:5a:30:28:4f:5f:c2:37:b1:7f:b2:32:dd:
         c8:14:8a:ba:a1:99:d0:ca:38:9a:28:68:a4:ec:6e:9a:70:13:
         7e:f6:ea:0d:c8:94:76:d4:ff:e3:ea:8e:4e:d6:83:13:0c:8f:
         5b:1b:0f:32:71:c3:d7:4d:8f:01:30:ae:21:6d:ae:92:a9:c1:
         26:ad:22:a5:b0:d8:dd:68:57:f7:bd:57:16:36:9b:95:8a:84:
         08:82:a8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:49 2024 by rpki-client on console-ams.rpki-client.org