Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/WPBQsN6H7aQ0N4YLrqdcI6oQae8.roa
File:                     WPBQsN6H7aQ0N4YLrqdcI6oQae8.roa (download)
Hash identifier:          bt7kKpc2Ux+tQp3ZM/mwm9lVOehFAWYlasuoppmwssk=
Subject key identifier:   58:F0:50:B0:DE:87:ED:A4:34:37:86:0B:AE:A7:5C:23:AA:10:69:EF
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0B37
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/WPBQsN6H7aQ0N4YLrqdcI6oQae8.roa
ROA valid until:          Wed 06 Sep 2023 03:00:35 +0000
asID:                     24168
IP address blocks:
    1: 121.50.150.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 15 02:50:31 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=58F050B0DE87EDA43437860BAEA75C23AA1069EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:10:82:c7:2c:47:3a:04:c4:0c:24:cd:e8:27:
                    36:ae:f0:c4:e2:d9:8c:e8:97:55:75:20:6d:96:26:
                    8c:8c:e5:48:6a:14:2c:0e:63:0e:34:be:dd:16:47:
                    f1:a2:99:7e:cb:26:44:1a:a0:0a:ac:13:1a:c9:98:
                    0f:a0:2a:bd:ce:ba:94:63:e3:13:fc:90:af:28:05:
                    cc:8b:31:ee:ae:e7:cf:32:40:2a:fb:74:90:e9:33:
                    85:9b:74:de:76:2e:81:87:bf:30:f1:75:f1:16:3d:
                    e4:45:11:b0:54:37:79:cb:d9:69:1e:22:cd:e1:66:
                    5a:e8:b7:a1:e0:e0:ce:1f:49:af:09:9b:51:82:bd:
                    0d:9b:53:c4:bb:fd:c2:bd:86:8f:5f:56:99:bb:6c:
                    db:d5:63:5e:2b:00:1c:a6:8a:ea:44:c9:ea:47:d9:
                    03:9d:5d:de:7b:86:97:78:38:58:0b:bc:af:c7:82:
                    28:f8:fa:8c:f7:f0:04:12:fc:33:3e:95:50:e5:ac:
                    4e:c3:8a:cd:02:92:dd:7d:27:3d:b7:ca:7c:d3:fc:
                    3d:ae:55:be:cc:c0:9e:1d:1d:86:14:f2:18:6b:d5:
                    21:54:bd:45:01:52:d7:2d:3c:20:d8:24:a1:b9:23:
                    5a:55:cd:be:2c:ee:b4:16:5f:f8:dc:50:21:a0:53:
                    f6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                58:F0:50:B0:DE:87:ED:A4:34:37:86:0B:AE:A7:5C:23:AA:10:69:EF
            X509v3 Authority Key Identifier: 
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access: 
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/WPBQsN6H7aQ0N4YLrqdcI6oQae8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:3e:74:10:cf:7d:14:76:87:fb:20:c4:9c:5f:6b:a8:81:aa:
         43:ab:c3:4e:13:8d:10:78:57:82:2f:a6:7e:7b:9b:0a:a2:2e:
         eb:ff:5c:8d:38:04:be:1d:4c:45:b5:53:ec:11:0a:58:0f:04:
         4a:ae:04:1d:7b:76:44:7d:cf:9a:3a:73:18:d2:dd:1e:71:6a:
         51:b1:89:65:af:e5:64:5b:6d:05:65:18:ee:67:62:ce:df:84:
         3e:02:70:a3:67:55:56:c2:63:8f:a9:97:e8:07:e7:17:8e:ae:
         38:6e:05:29:df:a5:b7:3d:9d:e7:ab:63:e4:20:7d:64:1c:04:
         a0:c3:b2:0d:3a:74:de:55:97:2b:d2:f5:ba:5a:aa:24:c5:b6:
         d9:1a:72:86:d3:64:21:5e:93:61:96:b7:90:3f:7b:1b:71:dd:
         f0:b5:ed:2e:64:e4:22:fb:f6:44:bd:57:e2:0b:8d:98:cc:ed:
         41:a3:7a:48:44:b0:ce:9c:d8:95:3c:91:d9:93:c3:f8:79:c8:
         13:61:16:89:0c:ca:02:51:8a:18:3c:1f:4b:ea:c3:ee:33:0a:
         f1:2a:34:84:40:3b:b1:1c:5c:35:db:b8:5c:b3:bd:be:3f:3a:
         03:84:4e:99:ad:79:ad:a3:6d:03:b0:91:aa:60:d7:ab:30:5d:
         b0:6c:80:f4
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMjA5MTUw
MjUwMzFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU4RjA1MEIwREU4N0VE
QTQzNDM3ODYwQkFFQTc1QzIzQUExMDY5RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQEILHLEc6BMQMJM3oJzau8MTi2Yzol1V1IG2WJoyM5UhqFCwO
Yw40vt0WR/GimX7LJkQaoAqsExrJmA+gKr3OupRj4xP8kK8oBcyLMe6u588yQCr7
dJDpM4WbdN52LoGHvzDxdfEWPeRFEbBUN3nL2WkeIs3hZlrot6Hg4M4fSa8Jm1GC
vQ2bU8S7/cK9ho9fVpm7bNvVY14rABymiupEyepH2QOdXd57hpd4OFgLvK/Hgij4
+oz38AQS/DM+lVDlrE7Dis0Ckt19Jz23ynzT/D2uVb7MwJ4dHYYU8hhr1SFUvUUB
UtctPCDYJKG5I1pVzb4s7rQWX/jcUCGgU/YBAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUWPBQsN6H7aQ0N4YLrqdcI6oQae8wHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL1dQQlFzTjZIN2FR
ME40WUxycWRjSTZvUWFlOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAB5MpYwDQYJKoZIhvcNAQELBQADggEBAFY+dBDPfRR2h/sgxJxfa6iBqkOr
w04TjRB4V4Ivpn57mwqiLuv/XI04BL4dTEW1U+wRClgPBEquBB17dkR9z5o6cxjS
3R5xalGxiWWv5WRbbQVlGO5nYs7fhD4CcKNnVVbCY4+pl+gH5xeOrjhuBSnfpbc9
neerY+QgfWQcBKDDsg06dN5VlyvS9bpaqiTFttkacobTZCFek2GWt5A/extx3fC1
7S5k5CL79kS9V+ILjZjM7UGjekhEsM6c2JU8kdmTw/h5yBNhFokMygJRihg8H0vq
w+4zCvEqNIRAO7EcXDXbuFyzvb4/OgOETpmtea2jbQOwkapg16swXbBsgPQ=
-----END CERTIFICATE-----
Generated at Mon Feb 6 18:25:11 2023 by rpki-client.