Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ugw1YCZ9J_eeG9-NSrikezoq-lI.roa
File:                     ugw1YCZ9J_eeG9-NSrikezoq-lI.roa (raw, json)
Hash identifier:          uiKiCVOtsezaZ1u3uSlJjKWQ5xjB5Cp4mlhoWTMdWyY=
Subject key identifier:   BA:0C:35:60:26:7D:27:F7:9E:1B:DF:8D:4A:B8:A4:7B:3A:2A:FA:52
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0D78
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ugw1YCZ9J_eeG9-NSrikezoq-lI.roa
Signing time:             Mon 26 Aug 2024 05:34:59 +0000
ROA not before:           Mon 26 Aug 2024 05:34:59 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18424
IP address blocks:        121.50.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3448 (0xd78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Aug 26 05:34:59 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=BA0C3560267D27F79E1BDF8D4AB8A47B3A2AFA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:c4:6e:05:da:41:12:d7:86:1d:e4:18:87:
                    f0:c8:19:05:72:50:36:78:72:77:ea:98:8e:e0:a5:
                    38:14:20:1f:49:1d:9a:5d:fc:8a:06:f7:4f:84:72:
                    de:da:d8:1f:b8:da:6a:62:bf:45:38:6b:87:75:80:
                    d2:7f:32:74:d7:ff:9f:b4:e2:2b:56:38:d3:1d:ec:
                    2c:a0:a8:d9:c8:38:8c:83:1c:04:71:c4:bf:80:cd:
                    6b:85:15:f1:13:6f:41:ec:e3:82:68:e9:9f:ae:bf:
                    68:cc:d8:45:1a:84:4f:86:cc:f7:50:b4:4f:ca:da:
                    17:86:e2:56:e7:97:36:4f:87:f8:1f:40:a0:ef:89:
                    3e:3a:b3:1c:1a:6c:18:2f:8f:55:da:10:e7:ac:46:
                    d2:1e:3b:68:1a:a1:74:f4:cb:d2:2d:35:2f:af:29:
                    3f:67:b3:06:d5:f3:4b:5f:4e:74:1f:3f:2f:6a:ec:
                    68:3f:8a:84:9a:1e:2f:9a:56:93:f7:d9:8b:0a:8f:
                    39:32:69:74:e9:14:6f:88:c7:7b:92:1e:b4:e7:91:
                    f1:12:03:35:c4:45:4f:98:3f:a1:8b:24:70:6a:de:
                    84:ba:7f:34:c8:cf:c5:c5:5c:81:3e:0a:a0:c1:95:
                    b1:fc:1a:1a:cf:93:f3:35:8c:a7:9b:c5:5a:0b:09:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0C:35:60:26:7D:27:F7:9E:1B:DF:8D:4A:B8:A4:7B:3A:2A:FA:52
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ugw1YCZ9J_eeG9-NSrikezoq-lI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d8:4a:f7:21:23:30:7a:7a:12:a7:19:45:36:56:10:c6:f5:
         24:84:11:cb:7f:94:89:7a:e0:74:33:d8:7c:af:81:94:ad:a2:
         a7:42:72:8b:ff:9c:d0:2a:f2:8c:63:1a:34:22:ec:cb:43:6c:
         7e:0f:04:cd:74:4f:e3:23:3e:be:f6:17:58:1f:8b:e9:43:fe:
         e9:6b:29:dc:d7:d0:1b:31:93:aa:e7:90:32:c4:af:c5:37:59:
         07:72:f4:f4:87:e0:a7:fa:30:e1:23:94:c1:25:be:b9:b0:4c:
         a1:14:d4:26:e5:ff:db:37:cd:41:2f:7e:25:05:d5:97:e2:34:
         fb:a0:dc:37:a1:6c:0e:49:6f:5f:96:49:cd:8f:5d:ef:f6:3e:
         7a:a5:87:0a:a7:ae:fd:90:b6:1a:a7:c7:f5:5d:9c:ce:e0:c4:
         ca:e6:c4:68:e2:46:f0:d3:3b:9b:bc:51:23:99:34:07:87:5a:
         9d:f1:eb:80:59:e4:89:28:4d:a2:10:a1:60:35:de:47:39:a8:
         ca:52:38:e0:46:f1:ff:2c:e9:c1:5d:9b:70:c3:4d:44:86:d7:
         d9:32:69:2f:03:b5:81:9d:24:3a:db:8f:c7:46:d8:1a:0b:ef:
         39:c8:2f:cb:51:79:32:83:c3:0d:08:9d:01:30:6a:25:86:75:
         f6:26:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:56 2024 by rpki-client on console-fra.rpki-client.org