Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/85COH28gD5kt4kbgdAJqVZf-jgM.roa
File:                     85COH28gD5kt4kbgdAJqVZf-jgM.roa (raw, json)
Hash identifier:          B8NnxUpEYWcuA9oJhzwFkzP1pYtWDcH6b0qBVrCSFhA=
Subject key identifier:   F3:90:8E:1F:6F:20:0F:99:2D:E2:46:E0:74:02:6A:55:97:FE:8E:03
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0C67
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/85COH28gD5kt4kbgdAJqVZf-jgM.roa
Signing time:             Fri 01 Sep 2023 10:20:39 +0000
ROA not before:           Fri 01 Sep 2023 10:20:39 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18424
IP address blocks:        2405:8700:9900::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 11:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3175 (0xc67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep  1 10:20:39 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=F3908E1F6F200F992DE246E074026A5597FE8E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:ea:8f:d7:a2:79:0b:01:60:e4:14:ab:2e:
                    aa:f8:4e:a7:f4:3a:56:7f:6e:89:1b:65:ff:c3:bd:
                    5f:4f:6d:5c:4b:e3:01:28:8b:25:a5:5d:76:18:1d:
                    5f:f1:af:33:a7:e5:14:c5:32:e5:e2:82:62:19:38:
                    d2:94:92:be:93:78:c2:38:01:8d:4d:50:96:d9:e0:
                    aa:37:22:93:a9:32:a5:01:45:b8:77:17:8f:5c:22:
                    2c:db:e0:ff:18:7e:2d:a7:fe:75:8a:ac:48:d0:4d:
                    af:5b:4c:d4:4b:ac:1b:8d:95:73:ac:3b:81:50:16:
                    1a:6e:27:2b:d3:40:46:54:6b:49:cb:d9:4e:a3:c0:
                    85:1c:25:19:1d:5d:43:d6:a2:3a:60:cb:71:89:c4:
                    75:b4:8b:a2:b3:cf:34:a7:26:b3:2f:5d:42:d3:a4:
                    91:5f:20:8b:e7:6a:b3:c4:e9:42:ba:86:75:04:5b:
                    f7:0e:1d:78:81:0d:d9:e0:c0:f1:8e:71:11:97:e1:
                    e3:5e:81:21:c3:67:12:f6:f1:8a:b0:5f:3d:6b:40:
                    52:73:21:78:36:13:36:90:77:75:27:47:19:01:a6:
                    03:61:f9:df:d3:a4:92:cc:df:06:e5:9f:53:5b:c7:
                    32:f5:e6:5e:4d:cb:6a:e1:8e:d7:1f:4f:f2:1d:0e:
                    ac:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:90:8E:1F:6F:20:0F:99:2D:E2:46:E0:74:02:6A:55:97:FE:8E:03
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/85COH28gD5kt4kbgdAJqVZf-jgM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8700:9900::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:46:ab:8f:4b:a5:f3:9c:e2:66:cf:6f:18:92:de:cc:ff:ad:
         e1:46:a9:63:82:d3:c4:39:4a:30:e2:b9:75:e8:be:b8:96:ed:
         15:2c:ec:39:70:98:88:c5:22:ed:39:ae:9a:9a:2e:7b:01:ea:
         9d:4d:1e:91:ce:c4:e3:57:aa:e6:25:30:fb:74:0d:81:8f:67:
         1e:3a:ff:c8:d9:2e:7c:68:de:c6:57:18:6a:6f:f5:9f:99:e1:
         8d:5a:ba:50:77:89:77:a9:27:e8:c5:e4:20:f3:d7:de:1e:a4:
         1d:53:1c:64:96:59:d0:fd:13:38:3e:63:47:57:f4:d7:c9:33:
         55:9d:8a:ec:72:b0:f9:0f:7d:19:13:05:d9:3a:df:84:84:01:
         89:bd:a8:a0:46:45:35:4b:cd:59:98:d8:ff:fc:a9:44:77:05:
         9d:78:4b:50:e0:b9:fa:f6:92:3d:20:af:97:8d:ec:b4:12:33:
         52:7a:cc:0b:6f:d1:31:35:50:f8:85:36:1a:0a:93:3d:36:cb:
         6e:3c:96:3a:1e:3f:f3:79:19:bf:0e:fb:b5:f8:3e:84:77:f4:
         0f:86:58:28:f0:82:ae:f2:53:08:27:20:9d:f2:d4:c5:6a:65:
         11:c1:97:9e:88:8f:46:06:bd:3f:c6:28:24:1a:fc:e5:d9:59:
         41:08:84:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 03:38:41 2024 by rpki-client on console-ams.rpki-client.org