Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5BeeycLod4inwzO1uige--xiOWM.roa
File:                     5BeeycLod4inwzO1uige--xiOWM.roa (raw, json)
Hash identifier:          JNviZucEMvlQekInDHqmIaCSPRkpDLt/Yc4Sa7u11Go=
Subject key identifier:   E4:17:9E:C9:C2:E8:77:88:A7:C3:33:B5:BA:28:1E:FB:EC:62:39:63
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DAC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5BeeycLod4inwzO1uige--xiOWM.roa
Signing time:             Fri 01 Sep 2023 10:15:08 +0000
ROA not before:           Fri 01 Sep 2023 10:15:08 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     4662
IP address blocks:        124.6.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 10:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7596 (0x1dac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:08 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E4179EC9C2E87788A7C333B5BA281EFBEC623963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:86:35:94:f3:0c:07:cb:db:78:dc:d3:d0:52:
                    07:5e:b3:b4:cf:a4:24:9d:f2:6a:18:0c:83:f1:45:
                    00:8e:55:a4:6a:d2:11:f7:ce:94:e1:0a:db:d2:f6:
                    c4:ed:33:14:2e:a3:36:c0:49:ad:19:37:8a:13:96:
                    29:ef:2a:d0:04:63:2f:fb:90:00:df:2e:f1:c1:9c:
                    b8:67:3a:0c:1e:b2:0d:36:df:57:8e:bb:4f:b5:bc:
                    8f:13:02:b5:72:12:d9:8a:86:af:4e:97:9b:e4:4b:
                    ad:cf:7b:24:68:9e:d8:4d:c1:e7:5d:4e:8d:ca:0f:
                    ae:84:ca:ec:8f:55:ee:28:f9:a1:4e:6c:b2:90:3d:
                    09:bc:cf:b7:68:aa:19:29:1e:76:ab:8b:88:44:9a:
                    76:cc:e7:6d:98:2c:57:d5:b8:16:c4:99:c2:12:56:
                    c9:d8:01:aa:f0:a1:c2:ab:8c:e3:a8:af:4b:50:c2:
                    17:36:08:0c:9d:40:b6:2c:af:96:c9:63:01:d1:a4:
                    72:3e:e8:ec:21:e0:52:4c:99:04:ab:b5:9e:a2:94:
                    19:6e:36:d0:73:33:70:c6:1d:8f:25:2d:6e:78:c9:
                    12:9e:30:03:91:f8:c6:f6:36:86:8e:9b:eb:d8:75:
                    38:78:db:43:ad:01:0b:ef:93:2b:41:5a:3b:46:7c:
                    5f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:17:9E:C9:C2:E8:77:88:A7:C3:33:B5:BA:28:1E:FB:EC:62:39:63
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5BeeycLod4inwzO1uige--xiOWM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:4d:c4:57:27:41:8d:87:54:a9:9d:8c:39:f4:32:22:31:7f:
         e6:11:5d:0a:8c:06:e1:81:f8:fd:1b:25:d5:5e:d2:02:30:1f:
         42:74:e6:37:39:db:17:2a:86:ec:cb:25:e0:88:74:49:06:54:
         6d:c5:37:58:ef:f1:05:46:49:1d:ad:6d:0e:a3:9a:3e:61:f7:
         2e:45:c6:ab:6c:75:f3:b9:bb:e8:8d:99:67:98:ea:e8:86:af:
         db:0d:d7:16:d8:0b:19:d3:56:b0:d2:8d:13:f8:01:76:2c:be:
         b4:5f:0b:2c:7a:90:11:c9:69:b9:20:39:c5:f3:0e:54:c5:de:
         70:a6:10:77:83:db:c6:27:77:38:05:ee:9d:e1:c5:13:44:0b:
         7a:e1:a9:81:9a:e5:ab:32:fb:7c:ca:df:b1:f0:6d:10:04:93:
         dd:fa:2e:3b:f9:da:0d:60:40:a2:29:20:c3:29:f8:e7:32:54:
         03:b1:fb:f7:a1:fa:c2:bb:9d:c9:18:6c:35:11:58:e8:b7:4c:
         17:53:a6:d8:2d:e3:a1:56:02:a5:97:8d:b2:ae:8f:84:78:68:
         01:08:78:ad:58:0c:01:6c:50:47:c5:c0:ec:0f:d2:a4:1d:61:
         e0:27:00:a6:b3:c9:63:7c:80:dc:4e:94:c9:81:85:fd:0d:b1:
         26:f5:97:1f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU0MTc5RUM5QzJFODc3
ODhBN0MzMzNCNUJBMjgxRUZCRUM2MjM5NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhhjWU8wwHy9t43NPQUgdes7TPpCSd8moYDIPxRQCOVaRq0hH3
zpThCtvS9sTtMxQuozbASa0ZN4oTlinvKtAEYy/7kADfLvHBnLhnOgwesg0231eO
u0+1vI8TArVyEtmKhq9Ol5vkS63PeyRonthNweddTo3KD66EyuyPVe4o+aFObLKQ
PQm8z7doqhkpHnari4hEmnbM522YLFfVuBbEmcISVsnYAarwocKrjOOor0tQwhc2
CAydQLYsr5bJYwHRpHI+6Owh4FJMmQSrtZ6ilBluNtBzM3DGHY8lLW54yRKeMAOR
+Mb2NoaOm+vYdTh420OtAQvvkytBWjtGfF+HAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU5BeeycLod4inwzO1uige++xiOWMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzVCZWV5Y0xvZDRpbnd6TzF1
aWdlLS14aU9XTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV8
BgAwDQYJKoZIhvcNAQELBQADggEBABdNxFcnQY2HVKmdjDn0MiIxf+YRXQqMBuGB
+P0bJdVe0gIwH0J05jc52xcqhuzLJeCIdEkGVG3FN1jv8QVGSR2tbQ6jmj5h9y5F
xqtsdfO5u+iNmWeY6uiGr9sN1xbYCxnTVrDSjRP4AXYsvrRfCyx6kBHJabkgOcXz
DlTF3nCmEHeD28YndzgF7p3hxRNEC3rhqYGa5asy+3zK37HwbRAEk936Ljv52g1g
QKIpIMMp+OcyVAOx+/eh+sK7nckYbDURWOi3TBdTptgt46FWAqWXjbKuj4R4aAEI
eK1YDAFsUEfFwOwP0qQdYeAnAKazyWN8gNxOlMmBhf0NsSb1lx8=
-----END CERTIFICATE-----
Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org