Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/PSGUXa6EU7B-2JxnqByErIABk3Q.roa
File:                     PSGUXa6EU7B-2JxnqByErIABk3Q.roa (raw, json)
Hash identifier:          w+YBlRShiSLccdE7u6WdMUlV5w+xeIZx6GOVFkhsfEY=
Subject key identifier:   3D:21:94:5D:AE:84:53:B0:7E:D8:9C:67:A8:1C:84:AC:80:01:93:74
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0E0D
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/PSGUXa6EU7B-2JxnqByErIABk3Q.roa
Signing time:             Mon 10 Feb 2025 14:22:06 +0000
ROA not before:           Mon 10 Feb 2025 14:22:06 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18424
IP address blocks:        121.50.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Apr 2025 12:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3597 (0xe0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb 10 14:22:06 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=3D21945DAE8453B07ED89C67A81C84AC80019374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6b:f1:6a:d5:af:a1:0b:f0:ac:e5:1c:96:19:
                    4c:4b:a4:3b:2e:b3:a6:47:9d:d0:4e:87:a5:c5:70:
                    09:9a:4a:05:8d:27:66:f2:9c:a0:8d:41:3d:a1:51:
                    06:4a:b2:be:ec:ca:c0:c1:01:ed:5e:3c:c1:ec:b0:
                    19:fc:3e:06:79:92:c1:1f:48:7e:71:bf:79:88:24:
                    02:ad:06:c1:6e:f9:c8:78:ad:8d:54:02:1a:0c:8a:
                    75:52:4e:38:26:40:eb:2b:23:f2:1b:88:b2:4a:ad:
                    2b:e1:26:76:7b:8b:ca:46:52:f6:dd:69:64:93:20:
                    4f:15:9f:13:18:e7:6b:0c:40:d4:9e:05:20:2f:7a:
                    bb:5a:3d:56:e2:0b:59:23:ad:06:e3:f8:e2:0f:a4:
                    b2:f3:50:a0:b8:64:e4:af:d3:7e:fb:2f:12:fb:43:
                    95:72:05:30:6e:5b:a0:97:d1:df:04:64:fd:e5:34:
                    4a:7e:90:28:7d:83:10:2c:f5:b2:e9:8a:1b:58:06:
                    87:4e:37:61:ff:53:9b:49:cf:34:28:fa:37:76:63:
                    85:9b:93:40:b9:1e:46:67:e0:e8:f7:5d:4f:e4:6f:
                    8e:1a:2c:c8:19:e7:d5:90:49:c2:af:eb:7f:f1:55:
                    19:83:5f:d3:1c:8e:65:ec:c7:3b:bf:28:ce:21:47:
                    09:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:21:94:5D:AE:84:53:B0:7E:D8:9C:67:A8:1C:84:AC:80:01:93:74
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/PSGUXa6EU7B-2JxnqByErIABk3Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:ca:4f:70:43:f9:06:9b:ea:b6:ec:39:46:b8:b7:cd:96:cf:
         7b:2f:05:5f:1e:b0:4d:e6:09:50:39:79:5f:13:fd:55:8c:9b:
         0d:88:99:b2:1d:32:35:e9:c6:7a:ae:22:70:d3:31:15:f2:6b:
         2b:27:fc:11:1a:8a:3a:d3:dc:d8:19:4d:3e:e6:1a:2d:b6:65:
         bd:53:2e:50:a6:3f:6b:6d:46:01:44:20:5a:88:e8:1d:61:f9:
         b4:ff:02:93:57:87:3f:b6:3e:db:da:f5:7d:60:76:ba:56:d9:
         f2:46:95:a2:26:4f:63:67:6a:35:ed:8b:84:f5:3b:e6:f0:d9:
         54:1d:a3:ff:d2:46:d7:23:d1:64:f1:05:33:56:83:1b:ec:fc:
         57:67:04:ed:9b:bb:7f:ba:df:43:1e:6e:5e:10:c2:85:72:bc:
         54:22:5c:24:d8:91:3c:da:01:ca:ee:3c:44:6c:75:45:73:f6:
         48:19:1c:72:72:9f:c1:c0:a1:d9:1f:ac:a9:5d:1d:19:a6:22:
         b3:a2:66:f7:4b:70:b6:03:bc:23:2b:30:ff:30:06:1d:c1:7c:
         32:d5:5c:fa:18:cd:53:74:4b:dc:13:67:5e:34:d7:d1:82:81:
         d9:2c:b8:2c:d0:75:ea:ca:42:52:f3:81:83:02:7b:cf:11:90:
         46:71:14:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:17:46 2025 by rpki-client