Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/j8CjSiduEiG62n9BMKX7VdMofp4.roa
File:                     j8CjSiduEiG62n9BMKX7VdMofp4.roa (raw, json)
Hash identifier:          qQkY6gz2frNH5v5dp7i6URCchvdgy7BlFjImMQbRttw=
Subject key identifier:   8F:C0:A3:4A:27:6E:12:21:BA:DA:7F:41:30:A5:FB:55:D3:28:7E:9E
Certificate issuer:       /CN=F95F0AA4EEE346F077A0CEEC8D06CC498F9B1AB9
Certificate serial:       0145
Authority key identifier: F9:5F:0A:A4:EE:E3:46:F0:77:A0:CE:EC:8D:06:CC:49:8F:9B:1A:B9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/j8CjSiduEiG62n9BMKX7VdMofp4.roa
Signing time:             Mon 10 Feb 2025 13:44:51 +0000
ROA not before:           Mon 10 Feb 2025 13:44:51 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     14874
IP address blocks:        202.47.172.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F95F0AA4EEE346F077A0CEEC8D06CC498F9B1AB9
        Validity
            Not Before: Feb 10 13:44:51 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8FC0A34A276E1221BADA7F4130A5FB55D3287E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:a2:62:69:91:6f:33:5d:62:85:a0:74:e6:
                    e8:a7:d0:62:8e:e9:d6:2c:e1:32:d8:83:9c:ab:be:
                    72:5b:fa:98:6d:15:38:f7:e5:5a:c1:0b:bd:b9:b0:
                    33:49:a3:f1:90:27:ff:cb:fc:94:51:59:f6:59:79:
                    fc:2e:03:8a:25:e3:f1:f0:90:93:a2:4d:76:22:03:
                    82:ed:6c:77:82:78:fe:74:a5:c0:db:62:1f:d5:90:
                    59:b7:63:3f:3b:1b:04:f3:b6:b6:ef:fe:0d:08:fc:
                    64:ca:f9:c8:b2:47:36:51:97:3f:17:91:b2:8a:00:
                    a7:55:5a:69:82:76:96:47:83:88:df:d6:cf:17:b2:
                    bf:41:f6:ec:23:a1:f6:76:ad:d9:cc:aa:46:a2:dd:
                    43:0f:59:38:1f:c6:6b:b3:eb:98:dd:a6:78:81:4f:
                    eb:70:f5:69:38:6b:ed:0a:15:2c:83:b7:83:4f:c3:
                    9c:fa:d1:ef:0e:87:a1:b4:c3:30:d6:92:9f:c8:d6:
                    ed:e9:a5:27:5f:1f:0c:89:ad:c6:04:09:56:bd:c2:
                    ae:8a:ca:a4:71:a7:fb:5d:50:fa:8d:92:0e:c6:24:
                    42:af:d5:02:f0:83:9c:42:42:e0:3f:69:d3:75:56:
                    ee:c2:9a:ae:d3:39:05:e9:79:a0:6d:11:b0:eb:4d:
                    da:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C0:A3:4A:27:6E:12:21:BA:DA:7F:41:30:A5:FB:55:D3:28:7E:9E
            X509v3 Authority Key Identifier:
                keyid:F9:5F:0A:A4:EE:E3:46:F0:77:A0:CE:EC:8D:06:CC:49:8F:9B:1A:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/j8CjSiduEiG62n9BMKX7VdMofp4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:b6:43:8f:5b:7d:b7:d1:a0:c5:ed:d9:23:93:bd:ca:d8:c1:
         22:4f:bb:18:07:43:fc:87:90:cc:87:45:0b:b0:a2:f6:16:18:
         82:79:a4:94:0d:3b:16:b0:36:00:f7:68:b9:3e:59:e8:6c:22:
         29:7c:c6:85:64:c0:be:b3:65:3b:9a:71:56:1c:be:e8:35:0b:
         fa:1b:79:0f:dd:e2:9d:9d:72:3a:81:a8:9f:bc:91:62:66:fb:
         b3:84:0a:e7:a3:94:dc:42:2e:fc:f7:55:4a:91:e2:8b:10:b3:
         c1:26:9d:07:aa:5c:eb:db:32:21:c8:c0:c1:70:43:ba:9d:f1:
         b8:10:e6:5d:2d:33:a3:7e:42:d2:8f:f7:7c:56:f1:4d:f7:fa:
         5c:2e:91:ab:7e:1f:8e:10:d0:ed:07:89:00:48:c3:11:9f:b3:
         03:1b:09:e7:04:2d:cc:ae:a6:42:8c:80:39:d4:a9:bf:35:9b:
         31:2b:4f:45:16:42:6a:47:c1:06:88:3a:d4:76:0b:dc:d5:3f:
         98:8f:70:dd:bb:5e:0e:5d:ba:59:c4:3f:86:eb:1c:b9:65:cd:
         cd:28:51:d6:c6:ac:65:33:b5:32:42:17:bf:1d:71:a2:21:d3:
         f0:8f:b2:51:cc:7e:66:67:14:d4:6f:e8:cc:c9:2c:4f:a2:a5:
         12:20:25:8d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjk1
RjBBQTRFRUUzNDZGMDc3QTBDRUVDOEQwNkNDNDk4RjlCMUFCOTAeFw0yNTAyMTAx
MzQ0NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhGQzBBMzRBMjc2RTEy
MjFCQURBN0Y0MTMwQTVGQjU1RDMyODdFOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC14KJiaZFvM11ihaB05uin0GKO6dYs4TLYg5yrvnJb+phtFTj3
5VrBC725sDNJo/GQJ//L/JRRWfZZefwuA4ol4/HwkJOiTXYiA4LtbHeCeP50pcDb
Yh/VkFm3Yz87GwTztrbv/g0I/GTK+ciyRzZRlz8XkbKKAKdVWmmCdpZHg4jf1s8X
sr9B9uwjofZ2rdnMqkai3UMPWTgfxmuz65jdpniBT+tw9Wk4a+0KFSyDt4NPw5z6
0e8Oh6G0wzDWkp/I1u3ppSdfHwyJrcYECVa9wq6KyqRxp/tdUPqNkg7GJEKv1QLw
g5xCQuA/adN1Vu7Cmq7TOQXpeaBtEbDrTdqRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUj8CjSiduEiG62n9BMKX7VdMofp4wHwYDVR0jBBgwFoAU+V8KpO7jRvB3oM7s
jQbMSY+bGrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0FJV0VJ
Ly1WOEtwTzdqUnZCM29NN3NqUWJNU1ktYkdyay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvLVY4S3BPN2pSdkIzb003c2pRYk1TWS1iR3JrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0FJV0VJL2o4Q2pTaWR1RWlHNjJuOUJN
S1g3VmRNb2ZwNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHK
L6wwDQYJKoZIhvcNAQELBQADggEBAIe2Q49bfbfRoMXt2SOTvcrYwSJPuxgHQ/yH
kMyHRQuwovYWGIJ5pJQNOxawNgD3aLk+WehsIil8xoVkwL6zZTuacVYcvug1C/ob
eQ/d4p2dcjqBqJ+8kWJm+7OECuejlNxCLvz3VUqR4osQs8EmnQeqXOvbMiHIwMFw
Q7qd8bgQ5l0tM6N+QtKP93xW8U33+lwukat+H44Q0O0HiQBIwxGfswMbCecELcyu
pkKMgDnUqb81mzErT0UWQmpHwQaIOtR2C9zVP5iPcN27Xg5dulnEP4brHLllzc0o
UdbGrGUztTJCF78dcaIh0/CPslHMfmZnFNRv6MzJLE+ipRIgJY0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net