Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/olRGVNao7ukqWNth7suSau0xNa4.roa
File:                     olRGVNao7ukqWNth7suSau0xNa4.roa (raw, json)
Hash identifier:          aaVvBIWkYh6mF9JgUq77aJ2HCevxxzfAE1Skgbqe8KI=
Subject key identifier:   A2:54:46:54:D6:A8:EE:E9:2A:58:DB:61:EE:CB:92:6A:ED:31:35:AE
Certificate issuer:       /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Certificate serial:       0F3B
Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/olRGVNao7ukqWNth7suSau0xNa4.roa
Signing time:             Mon 26 Aug 2024 05:35:18 +0000
ROA not before:           Mon 26 Aug 2024 05:35:18 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     134823
IP address blocks:        103.134.80.0/22 maxlen: 30

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3899 (0xf3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
        Validity
            Not Before: Aug 26 05:35:18 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=A2544654D6A8EEE92A58DB61EECB926AED3135AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:87:6f:12:3f:23:fd:69:3f:cd:d6:c7:7e:
                    17:84:35:09:37:bd:10:04:84:b5:3e:a5:ec:f4:5d:
                    a3:34:32:be:a5:76:c2:28:a0:1e:b3:08:79:9a:f9:
                    94:66:fc:c5:4e:78:2b:f4:07:df:05:77:7f:f5:5f:
                    7b:9d:9a:ea:b0:d2:18:00:56:1a:15:e7:db:29:43:
                    e0:34:ff:f0:13:e0:f4:59:3b:74:73:c5:37:05:58:
                    86:43:a2:24:f5:74:bd:0b:41:8d:f2:f0:56:90:ea:
                    31:ab:4a:ec:63:16:61:2a:73:39:9c:bb:50:1c:97:
                    cf:bd:ec:20:5b:41:1b:68:a1:48:f4:cc:75:ae:83:
                    49:40:07:6a:64:18:dc:0d:db:f0:2d:89:98:f9:bb:
                    b0:98:a0:e3:56:0c:d1:be:be:b7:e2:5b:df:ca:62:
                    3c:3b:7c:98:23:2e:6c:81:0a:50:47:14:a2:20:79:
                    67:69:d0:81:70:8a:25:3c:05:8a:c3:d8:64:85:d0:
                    38:ef:f2:3e:62:de:15:2e:e3:86:fa:b1:51:3a:71:
                    9f:aa:8a:48:44:6b:47:f9:09:42:18:3f:23:83:0b:
                    72:4b:91:32:9b:ae:0d:0d:ab:7f:5c:2e:92:ab:8d:
                    5d:1a:ce:4d:a2:66:12:55:f2:96:cb:b9:93:17:06:
                    e7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:54:46:54:D6:A8:EE:E9:2A:58:DB:61:EE:CB:92:6A:ED:31:35:AE
            X509v3 Authority Key Identifier:
                keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/olRGVNao7ukqWNth7suSau0xNa4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:95:86:6d:f7:6e:5a:ad:8e:64:3a:d6:72:26:5a:7a:8e:2d:
         dc:83:8c:14:90:65:9e:1a:e2:cb:75:de:93:a1:d4:47:c6:dd:
         4a:5d:46:68:ce:d3:35:00:35:47:cf:0d:86:10:15:dc:9e:a4:
         7b:3b:52:67:25:9d:04:1a:20:34:8e:25:2f:dc:63:ac:c7:5b:
         1d:d1:61:ad:62:13:c2:ef:c2:4a:cb:4a:9f:0c:40:c5:d5:96:
         c8:e3:56:09:df:9c:82:a6:c2:d9:12:1c:b4:ab:b9:cb:7c:d8:
         e0:4c:8d:30:dc:4e:a6:82:52:45:66:45:58:bd:31:84:e9:c5:
         31:aa:0d:6e:6b:c1:05:0c:42:64:47:a3:7a:f9:66:20:a1:e4:
         ef:0a:59:c5:f2:6d:fb:9c:50:e6:67:c2:74:32:b4:9d:cc:91:
         96:b5:91:c4:32:63:b2:34:10:b1:f9:34:ee:22:cf:fe:08:b1:
         69:0d:61:b4:53:47:88:8b:09:5f:11:2a:01:80:33:2a:d2:92:
         6e:48:7a:d8:b1:56:8b:6d:0b:59:11:84:70:df:22:39:92:89:
         5c:9a:72:7c:61:b0:11:48:ea:38:92:83:97:70:97:79:9a:bf:
         d4:d1:23:ee:f3:b9:8f:38:d1:61:c1:f3:f2:0b:c8:53:6b:12:
         9c:30:b0:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:49 2024 by rpki-client on console-ams.rpki-client.org