Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/mwbdnRFxGjTypiJm87k6N0_fvdQ.roa
File:                     mwbdnRFxGjTypiJm87k6N0_fvdQ.roa (raw, json)
Hash identifier:          7h+I84tvtdqsInE7E/KgjKy4k42Z8Trh4WAENR+gqLY=
Subject key identifier:   9B:06:DD:9D:11:71:1A:34:F2:A6:22:66:F3:B9:3A:37:4F:DF:BD:D4
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0C6C
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/mwbdnRFxGjTypiJm87k6N0_fvdQ.roa
Signing time:             Fri 01 Sep 2023 10:20:41 +0000
ROA not before:           Fri 01 Sep 2023 10:20:41 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18424
IP address blocks:        121.50.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 11:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3180 (0xc6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep  1 10:20:41 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=9B06DD9D11711A34F2A62266F3B93A374FDFBDD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:59:58:f0:1f:f1:03:f7:55:0d:65:6b:0d:
                    6d:00:06:db:b9:83:44:20:01:d2:74:bb:1e:10:fb:
                    9a:82:d8:73:a6:e8:ff:1a:0c:0d:c2:5a:06:ae:40:
                    bb:d5:ce:a1:07:f7:e3:58:17:9a:c0:76:56:cd:57:
                    9a:a1:b0:6c:f7:8d:a2:f4:38:a9:c9:94:a5:bd:33:
                    f1:52:bf:36:b7:c7:5f:20:1c:b8:2d:4b:c8:12:b1:
                    65:52:2a:ee:1d:ba:b0:a7:9b:7e:19:e9:f2:97:35:
                    8a:15:f5:98:3d:b4:dd:e1:16:c3:5f:98:1a:50:a5:
                    76:a0:07:19:c1:1d:fb:99:2b:b9:61:72:20:0b:a1:
                    43:55:7c:f7:65:01:e3:c5:6a:d5:94:7b:dd:1b:0d:
                    7b:6f:c9:97:f3:18:43:39:0e:03:82:49:b9:4b:7a:
                    f4:87:9f:d5:4c:4a:e4:d8:f1:08:09:4b:93:22:f9:
                    9a:7e:ed:96:4d:f8:03:6c:f3:84:9b:5a:a0:72:39:
                    0b:2a:90:75:c8:67:3f:d1:18:95:6c:fd:88:db:95:
                    4c:72:e7:f9:14:d9:bc:93:4a:49:8a:23:28:df:db:
                    b1:48:24:0e:4c:8b:76:bc:0a:5a:3f:68:aa:cc:cc:
                    51:19:27:24:72:d8:5f:ce:6c:6b:82:e2:b8:7e:1c:
                    38:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:06:DD:9D:11:71:1A:34:F2:A6:22:66:F3:B9:3A:37:4F:DF:BD:D4
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/mwbdnRFxGjTypiJm87k6N0_fvdQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:9e:ee:2c:c3:b6:15:2b:17:49:7e:c4:d7:cb:8b:49:e6:91:
         cf:cb:4a:ca:b3:a6:49:75:e1:a5:36:34:bd:86:c4:c4:f5:a1:
         68:dc:12:03:dc:eb:84:8c:92:33:ce:79:50:4b:82:83:dc:bc:
         05:27:3c:5f:89:75:17:0b:c4:31:59:dd:28:59:da:14:20:89:
         56:6a:a9:36:96:5e:b0:d1:19:51:82:d3:c0:0f:85:e1:63:ea:
         9e:18:25:1d:0a:12:1e:1b:a2:e9:01:57:64:1e:51:f2:04:ec:
         e0:37:45:79:d5:80:ac:81:68:c6:4c:f3:d1:29:47:27:9a:a8:
         9f:66:51:18:56:cf:87:fb:82:4c:45:31:69:1a:69:72:0a:bc:
         b1:ac:b1:08:12:a3:da:01:d3:bc:7a:74:88:24:6b:2a:4e:70:
         80:82:fb:e0:f4:1d:3d:30:10:bf:8a:92:34:0c:dc:ad:20:bd:
         3d:26:1c:1f:26:aa:d4:d4:34:2f:32:3f:d4:76:87:d1:b5:91:
         9c:cc:35:88:9f:05:17:43:d1:37:3c:1e:0b:72:bc:a8:c6:0f:
         4e:2d:fc:97:ac:39:b8:c5:14:2b:15:36:03:b3:97:76:9f:37:
         41:e8:25:9c:05:22:1d:ec:96:d9:00:e2:fb:6d:7e:d7:5f:be:
         9b:27:ec:dc
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMzA5MDEx
MDIwNDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlCMDZERDlEMTE3MTFB
MzRGMkE2MjI2NkYzQjkzQTM3NEZERkJERDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4WllY8B/xA/dVDWVrDW0ABtu5g0QgAdJ0ux4Q+5qC2HOm6P8a
DA3CWgauQLvVzqEH9+NYF5rAdlbNV5qhsGz3jaL0OKnJlKW9M/FSvza3x18gHLgt
S8gSsWVSKu4durCnm34Z6fKXNYoV9Zg9tN3hFsNfmBpQpXagBxnBHfuZK7lhciAL
oUNVfPdlAePFatWUe90bDXtvyZfzGEM5DgOCSblLevSHn9VMSuTY8QgJS5Mi+Zp+
7ZZN+ANs84SbWqByOQsqkHXIZz/RGJVs/YjblUxy5/kU2byTSkmKIyjf27FIJA5M
i3a8Clo/aKrMzFEZJyRy2F/ObGuC4rh+HDjvAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUmwbdnRFxGjTypiJm87k6N0/fvdQwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL213YmRuUkZ4R2pU
eXBpSm04N2s2TjBfZnZkUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAB5MpIwDQYJKoZIhvcNAQELBQADggEBALOe7izDthUrF0l+xNfLi0nmkc/L
Ssqzpkl14aU2NL2GxMT1oWjcEgPc64SMkjPOeVBLgoPcvAUnPF+JdRcLxDFZ3ShZ
2hQgiVZqqTaWXrDRGVGC08APheFj6p4YJR0KEh4boukBV2QeUfIE7OA3RXnVgKyB
aMZM89EpRyeaqJ9mURhWz4f7gkxFMWkaaXIKvLGssQgSo9oB07x6dIgkaypOcICC
++D0HT0wEL+KkjQM3K0gvT0mHB8mqtTUNC8yP9R2h9G1kZzMNYifBRdD0Tc8Hgty
vKjGD04t/JesObjFFCsVNgOzl3afN0HoJZwFIh3sltkA4vttftdfvpsn7Nw=
-----END CERTIFICATE-----
Generated at Thu May 2 03:38:41 2024 by rpki-client on console-ams.rpki-client.org