Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/wu6Ld1QjXu-I1LhI0YRjjwISu7s.roa
File:                     wu6Ld1QjXu-I1LhI0YRjjwISu7s.roa (raw, json)
Hash identifier:          XhIuXX9fd319TOXXQIiCMVY8n0m/0YoboT20DI0mR8Q=
Subject key identifier:   C2:EE:8B:77:54:23:5E:EF:88:D4:B8:48:D1:84:63:8F:02:12:BB:BB
Certificate issuer:       /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial:       023D
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/wu6Ld1QjXu-I1LhI0YRjjwISu7s.roa
Signing time:             Fri 01 Sep 2023 10:21:07 +0000
ROA not before:           Fri 01 Sep 2023 10:21:07 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     138997
IP address blocks:        103.169.126.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 19:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
        Validity
            Not Before: Sep  1 10:21:07 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C2EE8B7754235EEF88D4B848D184638F0212BBBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2c:30:48:ea:44:4d:76:be:ef:a9:6f:42:d3:
                    f0:91:eb:51:cf:09:da:a8:90:1f:43:14:ed:4b:2d:
                    a6:d3:27:79:b1:9e:14:b7:06:ab:0d:38:64:9f:a6:
                    d8:a1:f5:71:c4:da:96:08:a9:16:ee:c8:b3:62:8e:
                    9f:69:63:a9:14:1c:35:de:25:05:af:e4:3f:66:a5:
                    5d:a8:77:30:bf:24:0b:82:d1:0b:53:4a:3c:a1:6c:
                    6d:b3:c0:82:be:03:80:88:d1:1e:36:12:e1:f4:ee:
                    ed:b0:98:4b:c0:91:b3:ad:08:55:1c:29:da:f0:57:
                    b1:38:6c:fb:23:87:4b:ba:c8:ea:a5:e1:01:bd:0a:
                    af:95:ee:ad:06:c4:86:a1:ce:82:fc:b1:54:89:85:
                    e0:b6:eb:08:d7:31:38:46:f1:db:0a:b5:cf:1b:a5:
                    dc:16:43:a5:23:7b:b1:50:24:44:94:b2:29:5e:00:
                    06:69:50:0e:2f:c2:11:e5:41:56:2a:26:f1:84:69:
                    f5:12:1f:cd:86:cb:67:a9:f3:d7:8f:3e:34:d6:2e:
                    e8:ab:15:df:43:23:ea:7a:e6:1c:f3:70:59:3e:0e:
                    35:01:ec:c1:63:06:dc:81:48:cb:e6:19:69:d5:6f:
                    e2:17:3c:61:dd:d7:6c:19:44:ad:d6:06:41:18:ab:
                    0f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EE:8B:77:54:23:5E:EF:88:D4:B8:48:D1:84:63:8F:02:12:BB:BB
            X509v3 Authority Key Identifier:
                keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/wu6Ld1QjXu-I1LhI0YRjjwISu7s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:3a:f4:38:96:be:84:32:54:ec:d1:02:0f:81:2e:63:52:c8:
         cd:67:47:d1:96:d2:1b:17:0c:6e:d7:2a:d4:4e:b5:d7:30:3e:
         08:eb:f4:ab:a1:d1:df:4d:45:41:87:48:39:13:88:94:8a:74:
         e6:ea:d5:b2:3b:68:d3:60:fa:51:90:c1:9d:35:f5:74:d8:27:
         8f:80:82:00:1e:55:88:26:76:1a:ff:f6:b8:60:a6:e8:dd:88:
         57:10:40:49:d9:de:04:cf:a1:e4:f3:56:be:6f:28:da:48:85:
         d2:85:73:e3:7c:f7:75:c0:87:bf:3b:08:59:a2:ba:44:7f:aa:
         1a:ef:f9:3c:2c:48:7f:3d:b3:15:cc:7f:9e:16:bd:80:11:0d:
         97:97:06:1f:e6:3c:5c:39:24:59:72:3b:82:32:d6:28:06:b6:
         75:79:cf:d2:b9:93:4a:f4:54:77:f1:9a:82:c5:7d:88:92:e9:
         fc:ac:ac:68:30:08:14:7c:40:38:e9:f9:5c:e0:8b:42:41:1b:
         f9:f8:2a:8c:3e:17:86:ac:37:2c:6a:29:df:a5:45:58:16:98:
         90:89:c9:f7:06:b2:bb:eb:bf:68:5d:50:12:7f:a6:57:c5:02:
         eb:47:b7:6c:be:36:d0:d5:b2:c0:31:13:10:6c:c9:f7:95:41:
         02:c9:58:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 18:35:48 2024 by rpki-client on console-fra.rpki-client.org