Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/El1XB-GEyPCgoj7voajx1MRd4Dk.roa
File:                     El1XB-GEyPCgoj7voajx1MRd4Dk.roa (raw, json)
Hash identifier:          Nscd7CK+K3z138cYxKzLDQ1gc1y+xtjEJcnCG8iXdpw=
Subject key identifier:   12:5D:57:07:E1:84:C8:F0:A0:A2:3E:EF:A1:A8:F1:D4:C4:5D:E0:39
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0E0B
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/El1XB-GEyPCgoj7voajx1MRd4Dk.roa
Signing time:             Mon 10 Feb 2025 14:22:06 +0000
ROA not before:           Mon 10 Feb 2025 14:22:06 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18424
IP address blocks:        103.30.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3595 (0xe0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb 10 14:22:06 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=125D5707E184C8F0A0A23EEFA1A8F1D4C45DE039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:cb:66:bb:93:16:d9:1f:9f:97:ca:fa:e4:
                    7e:1f:71:6e:b3:01:33:00:68:9d:1a:d9:25:99:3e:
                    bf:ae:64:33:c2:2b:10:70:e2:ed:a0:84:00:c8:88:
                    f3:a1:8d:a2:ce:fc:a4:4b:91:07:4b:01:3c:db:e9:
                    35:6f:21:03:54:1d:a6:12:25:54:9e:3d:4a:90:62:
                    af:4b:2d:9d:8e:63:0e:6a:b6:77:31:72:02:d7:62:
                    a5:90:a7:d8:4b:c4:58:06:56:fc:d7:95:03:54:a0:
                    75:bd:be:d5:1a:72:d9:c5:13:2c:3c:4c:9a:95:10:
                    0a:0c:1a:10:11:40:0b:e7:c8:1b:7b:9f:4b:5e:c2:
                    63:9f:87:6a:14:a0:ea:6d:72:4a:a6:29:83:de:ba:
                    2a:ed:cb:74:a3:d9:11:64:67:ad:93:1b:6a:8c:9b:
                    fe:7c:ef:ac:db:ab:67:98:fb:d3:f8:31:d1:c1:0a:
                    57:6a:6c:34:93:9c:15:ce:46:c9:2a:4f:8d:3e:5d:
                    5e:e5:e0:5f:65:39:a2:fb:3c:eb:5c:1b:dd:14:cf:
                    da:4a:ba:9a:5b:06:a1:81:4c:a8:ee:bf:df:55:81:
                    e7:d8:96:d0:01:16:02:16:71:74:73:d8:94:2e:07:
                    af:80:6b:3d:d9:72:49:ee:65:4c:fd:32:8d:82:df:
                    12:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5D:57:07:E1:84:C8:F0:A0:A2:3E:EF:A1:A8:F1:D4:C4:5D:E0:39
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/El1XB-GEyPCgoj7voajx1MRd4Dk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:0c:75:2f:8f:5d:52:34:90:d7:f5:04:89:bc:9b:ab:e5:06:
         17:fd:23:df:ea:49:a7:32:89:89:90:ca:19:57:b5:a2:b0:10:
         2b:70:8d:1b:64:5c:3f:c6:04:df:30:5c:ea:a3:3e:aa:99:1a:
         cd:8b:8c:ac:11:f5:a3:b5:1d:e7:dd:89:37:91:1b:8d:40:2c:
         32:39:84:db:c1:1e:05:28:69:b0:55:c0:9a:01:d8:b5:9a:c8:
         71:5e:b3:eb:d2:1b:7e:8f:60:61:29:d5:4f:94:94:bd:3f:f2:
         73:c8:1b:7c:e5:14:af:21:95:72:8d:1b:c3:75:e1:8a:95:8f:
         01:6c:20:3b:47:af:7b:c9:01:c5:50:6e:46:d9:0a:6a:b9:fe:
         20:3a:dd:bd:8e:4f:21:4a:17:21:c5:69:94:5c:64:1c:9d:38:
         ee:5a:3b:e9:7c:08:35:ad:5f:c4:1c:e1:48:5b:38:16:09:ec:
         b7:ba:a7:8e:f1:d3:54:1d:52:cf:21:e9:56:6e:45:1e:98:47:
         98:af:a4:4f:2b:f0:c2:90:c4:3f:79:9a:2f:51:8f:2e:a8:cf:
         6d:a1:20:44:3d:2f:93:57:ad:01:34:a1:60:35:20:e5:5c:5a:
         a3:97:cc:b9:43:6f:f1:0a:6a:00:2f:4b:ec:1b:53:dd:2a:70:
         da:78:9b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:56 2025 by rpki-client on console.sobornost.net