Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/LEIh_Yaq3qgoy55T3LEvb8YOgxY.roa
File:                     LEIh_Yaq3qgoy55T3LEvb8YOgxY.roa (raw, json)
Hash identifier:          ZdCLK9qKLdxfzRyQ5cQSI7LaoRdHul86XO3r13f9OuE=
Subject key identifier:   2C:42:21:FD:86:AA:DE:A8:28:CB:9E:53:DC:B1:2F:6F:C6:0E:83:16
Certificate issuer:       /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Certificate serial:       0CA1
Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/LEIh_Yaq3qgoy55T3LEvb8YOgxY.roa
Signing time:             Wed 16 Oct 2024 01:55:05 +0000
ROA not before:           Wed 16 Oct 2024 01:55:05 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     7483
IP address blocks:        103.129.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3233 (0xca1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
        Validity
            Not Before: Oct 16 01:55:05 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=2C4221FD86AADEA828CB9E53DCB12F6FC60E8316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:12:fe:0d:33:23:86:d9:7a:cb:41:24:b8:c9:
                    58:8b:1d:c7:49:6f:98:c4:70:b5:b4:b4:50:3b:d6:
                    0c:73:73:af:41:5c:c1:46:a4:a8:11:23:7d:28:72:
                    3d:e5:96:fe:6b:e8:54:73:46:d3:5d:c5:dd:d2:9c:
                    82:80:40:a9:44:f2:39:d4:6c:7f:5f:b0:b2:cc:2f:
                    9d:76:db:c2:3e:83:0c:8b:e2:c0:63:59:9e:e4:b8:
                    2f:2a:86:4a:df:68:34:da:95:77:0c:ef:35:50:2f:
                    cd:cc:42:1e:10:b8:8f:ce:a2:91:eb:0a:3d:5b:42:
                    b4:84:b8:92:26:59:e8:f1:99:36:fc:7e:bd:d9:03:
                    4b:a8:d5:e3:9e:8b:be:6c:45:7a:9c:39:21:79:25:
                    41:8b:df:95:78:07:ff:6c:dd:5c:4f:5c:0b:d2:d2:
                    23:17:82:6b:02:7a:60:c5:d9:c2:93:fd:c8:40:31:
                    57:32:49:ca:c9:4a:c4:00:fd:7f:80:36:a0:88:6c:
                    8b:ca:6c:db:8c:a3:c7:74:ed:2a:db:80:d7:2a:7e:
                    35:f2:eb:8a:57:21:f9:88:67:0f:47:b1:43:46:e4:
                    c3:47:b9:0a:e1:5a:5f:62:42:87:8e:c0:03:9c:af:
                    54:b3:b8:a3:91:9d:4c:79:5b:70:2b:8c:d0:22:ed:
                    46:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:42:21:FD:86:AA:DE:A8:28:CB:9E:53:DC:B1:2F:6F:C6:0E:83:16
            X509v3 Authority Key Identifier:
                keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/LEIh_Yaq3qgoy55T3LEvb8YOgxY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:87:aa:66:47:06:41:47:3c:60:08:c5:8d:78:a3:86:49:ba:
         4e:04:af:29:b7:63:31:b9:97:ec:2e:d5:08:37:25:88:7f:87:
         ae:a5:94:c0:fa:4f:b0:29:3a:ad:f4:a3:97:cf:85:36:68:df:
         bb:e7:a4:f1:96:3a:d5:d7:1a:b6:ee:2f:62:81:a9:23:c1:ac:
         3d:cd:63:5e:5a:3e:bb:f8:45:80:e4:2c:72:93:34:5e:13:22:
         b2:10:06:d0:f8:b3:38:59:12:96:41:ea:0c:f6:d6:52:cf:c8:
         fa:22:4d:f0:8c:b4:9a:36:33:3f:dd:02:db:a3:4c:21:8e:20:
         9b:d7:2f:dc:67:6f:73:46:f7:c5:86:33:1d:c0:d0:ce:4c:b0:
         ac:d2:5d:1a:be:dd:a3:f8:28:f2:88:62:16:f4:0e:62:95:0c:
         e1:b8:6b:79:10:ad:df:75:3a:7d:81:75:67:e6:37:66:e2:c7:
         ec:2f:2e:c2:89:b9:30:20:97:4e:5d:59:0e:86:e4:13:00:7c:
         38:da:06:36:4b:a1:40:38:52:42:2a:27:0c:67:ba:f6:06:fb:
         d8:6f:cd:f6:ee:76:01:1f:7f:ca:90:06:17:d0:59:7c:a5:53:
         94:fe:63:ea:fc:85:ed:11:c9:c1:d9:d7:b3:16:0c:c5:61:2e:
         c6:b6:92:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:57 2024 by rpki-client on console-fra.rpki-client.org