Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/aj0tu3S3Hbysjub1l71h6kUyR9Y.roa
File:                     aj0tu3S3Hbysjub1l71h6kUyR9Y.roa (raw, json)
Hash identifier:          DomVCNnith+lSXACOJzFwCe11jRNYgYOfE2iBQN+uAY=
Subject key identifier:   6A:3D:2D:BB:74:B7:1D:BC:AC:8E:E6:F5:97:BD:61:EA:45:32:47:D6
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0C6B
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/aj0tu3S3Hbysjub1l71h6kUyR9Y.roa
Signing time:             Fri 01 Sep 2023 10:20:41 +0000
ROA not before:           Fri 01 Sep 2023 10:20:41 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18424
IP address blocks:        103.30.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 11:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3179 (0xc6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep  1 10:20:41 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6A3D2DBB74B71DBCAC8EE6F597BD61EA453247D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:24:a8:a0:b7:bf:6b:c4:91:a3:d7:03:4a:46:
                    b7:16:33:83:fc:87:cb:a4:d4:e5:00:26:39:0c:c5:
                    a9:ef:3d:12:8c:2e:54:b8:49:77:aa:1c:e3:c0:27:
                    20:b0:6a:d0:3e:86:45:8c:c0:64:f1:99:e5:fd:51:
                    8f:39:8d:95:d0:53:81:10:66:d5:9c:27:f9:30:d2:
                    58:75:c7:43:36:95:e2:df:72:10:3a:ba:23:73:26:
                    41:ec:62:40:ff:01:31:b4:61:d0:7f:a3:e9:6c:2c:
                    b8:f8:03:2e:24:40:bf:50:b8:1e:e5:7d:a9:20:4d:
                    c9:3e:10:af:d2:2b:43:26:2c:d7:6d:83:8f:91:37:
                    69:c6:45:d7:f1:d3:06:ba:d5:b8:67:dd:ae:94:cb:
                    c7:22:17:f9:63:a5:6a:4a:b8:12:d6:3a:57:01:71:
                    b4:93:e8:70:34:d2:68:90:b7:00:08:8f:9e:8c:d1:
                    d7:8d:84:5c:91:ea:ca:78:40:ad:58:83:54:d1:1c:
                    14:8b:a5:8d:43:ce:53:17:cf:66:27:09:df:7f:68:
                    3e:18:80:fe:2b:46:dd:ea:02:82:05:38:9b:ed:4c:
                    48:41:52:df:e7:11:2f:6d:ae:d2:2c:46:7b:de:88:
                    27:12:a9:c4:70:a8:f9:98:66:66:75:b7:a9:fe:dd:
                    43:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3D:2D:BB:74:B7:1D:BC:AC:8E:E6:F5:97:BD:61:EA:45:32:47:D6
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/aj0tu3S3Hbysjub1l71h6kUyR9Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:d0:78:7c:9b:58:25:1f:0c:d0:74:d6:50:e1:8c:70:9f:fd:
         de:40:44:e3:b9:f5:6e:e5:48:bf:82:0d:67:bf:74:72:9e:cf:
         d1:f8:7a:1e:c0:8b:5b:7f:6c:55:ed:08:c9:03:e3:7e:18:bd:
         fa:ef:e5:37:a3:a7:2c:0e:88:d4:18:08:da:61:d9:fd:a5:4a:
         1b:21:c1:69:13:e9:0b:dc:f7:71:3c:8f:bf:e8:ff:e3:36:4d:
         66:1c:cf:8e:72:fa:b7:91:89:aa:2a:59:91:19:c3:e8:c2:47:
         c8:ed:4d:b4:65:c2:92:0c:13:07:71:95:93:a0:e2:9f:40:e2:
         7a:00:84:3f:84:5a:4e:1a:55:ea:15:27:b4:1b:40:27:d0:ef:
         88:ec:5c:1b:c6:0d:46:ad:80:4b:ab:86:d4:10:8e:e5:bd:d2:
         49:90:7a:5e:0b:f1:79:18:6b:b8:57:34:1f:2e:65:44:23:1b:
         17:1a:f6:5c:4d:fb:bd:bc:3a:33:63:50:e3:41:69:6d:a8:71:
         dc:d5:87:58:ac:2f:08:d6:ff:8a:4c:9c:df:2c:38:5c:cc:d3:
         59:f3:17:b5:dd:e1:c2:7d:9c:ff:75:78:0e:22:75:15:c9:7a:
         91:5e:3a:73:76:37:14:61:ef:eb:e7:3c:5c:97:1d:9e:38:39:
         6b:cf:6a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:38:41 2024 by rpki-client on console-ams.rpki-client.org