Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/eL_Wyl7GGWxGSGGyL8PKZGhHteU.roa
File:                     eL_Wyl7GGWxGSGGyL8PKZGhHteU.roa (raw, json)
Hash identifier:          f2p7cwTC3/GVzfLMoKPhHBCBFuChEDYtCchgetGy/NY=
Subject key identifier:   78:BF:D6:CA:5E:C6:19:6C:46:48:61:B2:2F:C3:CA:64:68:47:B5:E5
Certificate issuer:       /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial:       0D17
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/eL_Wyl7GGWxGSGGyL8PKZGhHteU.roa
Signing time:             Mon 10 Feb 2025 14:02:30 +0000
ROA not before:           Mon 10 Feb 2025 14:02:30 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18182
IP address blocks:        2404:80::/28 maxlen: 48

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3351 (0xd17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
        Validity
            Not Before: Feb 10 14:02:30 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=78BFD6CA5EC6196C464861B22FC3CA646847B5E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c9:f1:ba:a0:a1:87:b9:e0:22:89:62:1a:94:
                    0f:96:70:ef:53:9a:bf:88:59:a2:3c:26:0f:07:c3:
                    be:a9:ea:f5:08:72:5a:ad:93:51:a6:2b:44:53:ed:
                    ed:5a:1b:b9:c6:f9:1a:09:85:50:ff:54:57:09:99:
                    41:71:4a:5d:1b:70:f4:e5:93:ee:35:0b:1e:73:b7:
                    94:b2:5e:79:f6:be:46:c2:64:d4:72:c6:9a:5b:60:
                    ad:25:55:a0:f1:7d:46:2c:54:8b:a6:7d:30:df:ce:
                    3b:48:b1:2c:3b:92:98:9c:41:e0:6e:51:c1:cc:31:
                    fa:f4:28:59:de:3e:81:60:6e:35:32:91:21:de:3c:
                    87:60:01:1f:88:88:08:78:1a:d4:27:3a:93:29:db:
                    9d:6e:9c:85:ec:ac:15:d6:51:a2:dc:d5:37:47:b1:
                    b3:e9:5d:83:53:b6:4b:2a:82:61:c0:c0:5f:ef:de:
                    49:15:1c:40:78:60:6d:c9:a5:93:0e:25:57:2a:67:
                    cd:2f:c5:69:21:57:5a:24:e0:a0:6b:4b:c2:76:9f:
                    b6:68:c0:d4:c7:4e:c0:03:67:0f:c9:4b:ae:b3:7e:
                    8c:d9:76:50:d3:4c:b4:8d:a8:05:fd:9b:18:6b:84:
                    42:d0:30:97:0e:cb:15:cd:e9:ac:95:42:27:32:56:
                    ce:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BF:D6:CA:5E:C6:19:6C:46:48:61:B2:2F:C3:CA:64:68:47:B5:E5
            X509v3 Authority Key Identifier:
                keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/eL_Wyl7GGWxGSGGyL8PKZGhHteU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:80::/28

    Signature Algorithm: sha256WithRSAEncryption
         28:e0:0b:1c:90:b2:5a:e9:c6:a2:10:d9:03:93:b1:b2:a2:e4:
         12:2f:a5:7a:3d:f2:69:e3:3c:95:ad:6b:77:73:c6:3e:52:00:
         47:0f:b9:cc:7d:77:12:61:ef:17:4b:e2:5a:20:55:48:ff:31:
         7d:c3:7e:78:3a:b9:14:4e:d3:52:fc:9a:f2:51:d1:25:b5:d7:
         b6:a8:9f:a6:c2:18:a4:fb:00:82:6f:50:3e:ad:b3:0d:88:97:
         02:e6:1e:c6:a0:a0:9b:e6:58:bb:be:2c:54:6f:34:9c:76:37:
         04:22:51:40:c1:3d:0f:83:a2:d3:f4:0d:cf:42:84:70:17:d6:
         52:5c:4b:cd:06:8e:81:7a:b6:e7:08:a9:23:12:03:3e:3f:37:
         0f:f6:dd:02:51:0a:30:de:7c:79:9a:76:e9:4a:e3:e0:ca:1f:
         87:d5:21:aa:fc:41:91:f3:b1:f4:6c:2f:35:46:44:11:22:56:
         4a:9b:6a:65:cc:92:4d:4f:bb:6a:fd:bf:69:4d:83:e5:de:14:
         94:b9:34:01:5d:d7:45:b9:6a:e4:64:7f:11:d1:5a:aa:44:74:
         4d:a6:a7:79:08:2c:8c:d4:3b:8a:98:ac:2e:33:33:06:16:6b:
         80:42:c1:cb:95:b6:21:a3:92:24:db:c0:d7:d5:fd:09:bd:48:
         81:e2:a0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net