Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/gP15891EwBibcLrHcWmIePfupRI.roa
File:                     gP15891EwBibcLrHcWmIePfupRI.roa (raw, json)
Hash identifier:          6yDyfYjxUC6Sq+tSUouEEUusD5izK4uWui79HwElUlk=
Subject key identifier:   80:FD:79:F3:DD:44:C0:18:9B:70:BA:C7:71:69:88:78:F7:EE:A5:12
Certificate issuer:       /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial:       0A31
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/gP15891EwBibcLrHcWmIePfupRI.roa
Signing time:             Mon 10 Feb 2025 13:46:33 +0000
ROA not before:           Mon 10 Feb 2025 13:46:33 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131671
IP address blocks:        103.146.212.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2609 (0xa31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
        Validity
            Not Before: Feb 10 13:46:33 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=80FD79F3DD44C0189B70BAC771698878F7EEA512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:a9:70:d5:09:96:92:53:e9:c5:bb:cd:d1:
                    cd:05:fe:55:bc:84:51:f2:5c:94:b1:04:7e:e3:c3:
                    16:68:5d:01:04:14:b0:da:1f:4d:af:cb:2e:db:99:
                    c8:af:0b:6d:82:61:c1:e7:11:a6:6c:f6:f1:83:8c:
                    89:06:94:68:d0:c0:73:d6:f2:83:5d:e8:74:b5:fd:
                    2d:a8:85:da:8b:b8:2e:17:ae:db:dd:c0:2e:2f:10:
                    82:4b:b5:12:15:49:72:c2:71:08:cc:d4:84:b6:31:
                    14:fd:8a:fd:37:65:a8:f3:82:e3:35:c1:cc:22:9b:
                    10:34:11:ac:0f:b6:0d:67:02:57:e4:c1:17:d5:f1:
                    b6:e0:b4:ee:51:9c:12:4f:0b:b8:8b:fc:78:b1:5a:
                    81:2f:e0:cc:5e:4f:f5:6c:fd:66:e4:d9:35:4e:dd:
                    1a:37:cb:57:cb:37:fd:27:8b:9c:74:fe:e6:b1:28:
                    1e:8d:df:39:a1:1e:9d:85:ae:ea:95:b9:72:c9:f0:
                    98:18:33:43:27:bd:33:e0:da:5c:bb:8d:67:21:4c:
                    c2:d8:cf:16:e6:3a:7f:fc:5f:ab:d9:cb:4f:13:6d:
                    f7:e4:0a:08:5a:c6:94:21:2b:d3:a0:7c:65:a9:e5:
                    ff:c9:7d:3f:d2:b5:b2:a7:7e:57:3f:d5:29:fc:58:
                    b1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FD:79:F3:DD:44:C0:18:9B:70:BA:C7:71:69:88:78:F7:EE:A5:12
            X509v3 Authority Key Identifier:
                keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/gP15891EwBibcLrHcWmIePfupRI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:3c:8a:c9:d9:10:5c:c5:02:77:59:79:8c:8a:c2:c2:09:5f:
         17:e7:4b:a9:95:d0:b8:cd:a3:0d:e7:0d:36:d7:2a:c1:46:87:
         cb:14:c3:bd:b9:cf:83:f3:5b:f5:ea:ee:17:4d:2e:b6:4f:da:
         a8:3d:3b:b4:47:3e:c5:cf:37:86:9d:40:0d:ac:a1:29:6a:0d:
         dc:b9:55:53:1a:74:8d:b0:62:d5:df:f1:0c:57:31:8c:83:b9:
         85:a1:1f:2f:fa:63:6d:7e:3b:a4:a7:ad:c1:68:65:2f:71:9e:
         7f:84:58:d1:f3:26:9f:70:af:a9:ed:be:fd:2b:70:1c:05:f3:
         9a:b6:23:c4:a1:ef:92:2f:1d:08:a2:1e:5a:d5:9d:3c:58:c8:
         63:0c:31:98:aa:db:cb:15:ef:4f:cb:79:9b:e5:fd:4b:3d:8e:
         80:27:47:2b:36:25:9b:c2:43:58:46:a8:53:f1:54:8b:65:29:
         a8:5f:12:5f:86:ce:b2:bc:d5:62:7f:fc:96:b8:40:d3:d5:0a:
         30:49:c0:02:5d:f8:54:d7:69:5f:39:fb:93:ef:cd:cf:39:f0:
         85:be:fc:53:f0:90:74:b2:15:17:fe:84:44:dc:eb:a0:0a:e9:
         5a:63:76:4a:84:87:2b:11:b7:6f:ce:5d:fb:a8:db:1b:4c:95:
         d4:dc:e6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net