Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/ZbBPn9FEdZqHFUvvZdjZa21FZ_A.roa
File:                     ZbBPn9FEdZqHFUvvZdjZa21FZ_A.roa (raw, json)
Hash identifier:          SdNaHVYcvX5VPClKr3FIM3vCD2x5HX39YXFynTgQGi8=
Subject key identifier:   65:B0:4F:9F:D1:44:75:9A:87:15:4B:EF:65:D8:D9:6B:6D:45:67:F0
Certificate issuer:       /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial:       0337
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/ZbBPn9FEdZqHFUvvZdjZa21FZ_A.roa
Signing time:             Mon 26 Aug 2024 05:35:13 +0000
ROA not before:           Mon 26 Aug 2024 05:35:13 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     208148
IP address blocks:        2407:a0c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
        Validity
            Not Before: Aug 26 05:35:13 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=65B04F9FD144759A87154BEF65D8D96B6D4567F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:77:10:e0:3b:95:9d:fb:49:da:9c:9f:14:fb:
                    e8:68:6a:16:69:bd:83:91:cf:8f:8c:2f:b7:8d:33:
                    d2:3a:4b:b7:33:c6:81:87:30:a7:69:a4:68:d6:cd:
                    c9:a1:83:c1:1c:cd:14:5c:77:20:d4:1c:b3:18:d6:
                    47:78:b0:10:82:97:b6:2d:9a:fa:b0:32:35:c3:ee:
                    29:e3:d2:79:a1:b0:4d:ef:3b:49:c8:66:fb:d4:09:
                    cc:2f:5d:bf:10:29:8e:62:c7:48:67:1c:d2:26:e6:
                    f3:4f:47:e6:5d:d9:f5:ec:05:db:5e:2f:80:dc:86:
                    29:c0:6e:dd:32:be:1e:60:17:7b:b1:48:f4:1d:03:
                    ef:b5:5f:3c:c5:dc:29:ac:ed:12:ee:fc:bc:af:56:
                    66:a4:7b:bd:de:dc:75:c3:a1:ef:bc:df:3e:ae:7d:
                    3b:92:91:11:c7:3f:c8:a8:07:7e:74:c5:73:38:0f:
                    e5:9e:28:6c:55:04:fb:ec:87:b8:bb:40:37:7d:40:
                    62:30:b5:b5:c0:8e:10:48:6f:60:75:0c:ba:41:2e:
                    7c:11:f6:c3:b1:bb:6a:2c:95:12:fb:c5:c6:25:f9:
                    6f:80:06:b9:7f:c4:14:d3:5a:62:bc:d0:fb:91:9c:
                    0d:67:a0:ef:db:de:ee:38:d8:fe:e7:c2:4f:03:d2:
                    be:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B0:4F:9F:D1:44:75:9A:87:15:4B:EF:65:D8:D9:6B:6D:45:67:F0
            X509v3 Authority Key Identifier:
                keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/ZbBPn9FEdZqHFUvvZdjZa21FZ_A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:5a:e7:31:93:dd:34:ab:d9:34:f9:e5:83:66:1c:7a:b3:3d:
         b7:c5:32:7d:40:1d:02:7f:28:00:a2:df:31:8e:5f:5a:6b:d4:
         23:ff:2f:ea:98:92:47:e2:95:52:a9:d2:59:cd:3c:57:1c:4a:
         93:68:83:a9:3c:b3:78:12:ca:b5:13:38:07:dc:96:4d:23:35:
         9f:8f:d6:80:0d:8a:8c:2d:9a:3a:bd:bd:73:33:e9:4a:a9:f8:
         0d:bc:7e:b6:8f:3d:c4:11:f7:58:9d:cd:d7:f5:52:93:ef:3a:
         c5:c6:44:cd:b6:95:64:f7:e2:ad:8d:0d:67:a5:a2:10:7c:6f:
         f4:4e:a8:95:41:c7:34:93:4f:95:db:1e:81:d7:9e:3d:4d:4e:
         2a:b8:c2:42:63:9c:12:8c:75:c9:be:94:9c:7e:cd:8b:88:1d:
         2a:c0:d5:90:f2:28:59:1f:23:86:40:8a:3a:94:f1:4c:a3:dc:
         1e:de:6b:23:a3:db:19:07:96:bc:6c:2b:21:93:bd:d2:7b:22:
         ce:b6:cc:49:b0:ee:5d:65:64:b8:55:2c:84:df:89:2d:ce:30:
         28:f3:9c:16:e0:2d:6b:f4:3b:64:9c:2e:9e:1f:fa:06:c1:70:
         e2:fe:5d:e3:41:98:bc:17:9f:74:8e:c3:12:5f:09:26:b2:41:
         3d:9d:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:13:19 2024 by rpki-client on console-fra.rpki-client.org