Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/Lu26syhSeaGY13MuMfBWzpUXIEY.roa
File:                     Lu26syhSeaGY13MuMfBWzpUXIEY.roa (raw, json)
Hash identifier:          atfpODqTUEJaDMpEYCmfIwlf0moOfj+8rro7C/LWgI0=
Subject key identifier:   2E:ED:BA:B3:28:52:79:A1:98:D7:73:2E:31:F0:56:CE:95:17:20:46
Certificate issuer:       /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial:       11A3
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/Lu26syhSeaGY13MuMfBWzpUXIEY.roa
Signing time:             Fri 01 Sep 2023 10:20:08 +0000
ROA not before:           Fri 01 Sep 2023 10:20:08 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131636
IP address blocks:        103.130.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 04:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4515 (0x11a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
        Validity
            Not Before: Sep  1 10:20:08 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=2EEDBAB3285279A198D7732E31F056CE95172046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:cf:70:2f:02:52:55:61:59:f3:18:64:8a:
                    18:a3:24:fe:d9:4c:f7:0d:33:e9:b0:ac:d7:de:3f:
                    c8:f8:0f:0a:39:3b:0d:82:5a:41:bb:82:50:8a:df:
                    d3:4c:fc:dd:6c:e2:1c:b9:1f:8b:a6:3e:7a:b6:84:
                    75:d7:af:0b:fd:9f:89:ab:f9:fc:f8:e1:73:0c:0a:
                    85:95:2b:a6:0d:3c:84:2a:d5:8c:4c:c4:bd:c1:54:
                    c1:20:0c:9e:60:65:88:1a:cd:21:03:0d:74:ff:c6:
                    5e:50:a0:47:ab:49:86:79:fe:55:cd:05:4d:ce:21:
                    af:cb:f1:47:96:c6:29:fc:8c:87:65:cf:30:6d:14:
                    c3:2b:62:32:86:fe:9c:1d:65:54:ec:fe:2e:b2:48:
                    ef:69:f8:4a:ee:0c:f7:76:20:31:14:05:70:59:03:
                    b3:59:76:a5:1b:73:8d:eb:93:67:03:8f:33:e6:c8:
                    8f:d3:3e:47:a0:95:23:8f:9e:5d:c2:e7:ab:0f:2e:
                    d4:32:82:ab:65:d1:be:97:1d:a1:16:b0:2c:2a:20:
                    80:b5:48:ed:cd:62:8a:fa:52:01:87:c8:74:c0:b1:
                    e0:da:58:a0:e7:76:35:48:3b:c4:26:f0:de:20:19:
                    c2:5d:a1:ad:48:35:fc:93:47:9b:f9:3d:6f:6c:02:
                    0f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:ED:BA:B3:28:52:79:A1:98:D7:73:2E:31:F0:56:CE:95:17:20:46
            X509v3 Authority Key Identifier:
                keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/Lu26syhSeaGY13MuMfBWzpUXIEY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:4f:46:8c:9c:cd:9d:2f:6c:7b:a3:81:45:ca:69:63:36:3d:
         55:81:c9:e1:38:85:bf:cb:01:df:9e:4d:72:79:ac:ed:73:4d:
         70:10:76:8d:43:9c:bd:95:21:54:22:61:62:f9:f5:04:e5:7b:
         a3:26:32:4f:5b:a0:04:59:ea:62:cf:4b:06:68:46:d4:0f:92:
         3e:df:91:c5:ed:aa:51:ce:89:43:d8:c0:f2:17:ec:5c:8f:0d:
         49:f6:69:5a:54:4c:2e:84:9c:5a:be:3c:5c:70:0d:f3:72:05:
         c2:5b:44:91:84:51:6a:17:c9:9c:92:27:b8:82:bc:af:9e:ee:
         ef:4b:b1:cc:d4:23:41:1a:cc:5b:ce:cb:72:d9:62:fb:c7:e3:
         5e:8d:93:44:f0:ba:2c:f2:99:6d:49:2b:e5:87:61:72:8a:b6:
         3d:d5:b9:1e:36:3b:c7:ab:53:cc:e5:7e:b5:00:6f:a9:d3:c0:
         99:7c:82:37:62:58:e4:af:eb:71:58:4f:ec:71:c1:ae:5f:6f:
         c5:c6:28:b4:38:74:f2:50:b1:63:e8:c7:77:fb:83:26:5f:d3:
         92:b2:6e:17:73:48:68:62:87:fb:2d:0e:11:8e:cf:25:98:1e:
         5e:84:4e:c3:6e:b9:61:6a:dc:86:d9:ce:77:4d:12:76:49:df:
         0f:46:0a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:22:04 2024 by rpki-client on console-ams.rpki-client.org