Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5ferTHZCeST_vUGwFu0U360ANOE.roa
File:                     5ferTHZCeST_vUGwFu0U360ANOE.roa (raw, json)
Hash identifier:          k9LcKVaLyJSd7T8/2OzmydX01uohJJmMMxmU+zrMLFs=
Subject key identifier:   E5:F7:AB:4C:76:42:79:24:FF:BD:41:B0:16:ED:14:DF:AD:00:34:E1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1D6D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5ferTHZCeST_vUGwFu0U360ANOE.roa
Signing time:             Fri 01 Sep 2023 10:14:48 +0000
ROA not before:           Fri 01 Sep 2023 10:14:48 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        49.158.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 10:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7533 (0x1d6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:14:48 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E5F7AB4C76427924FFBD41B016ED14DFAD0034E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:82:94:2d:63:69:8c:1b:e3:7c:ec:86:7a:f4:
                    55:77:84:de:8d:dd:f6:be:14:8b:e3:c8:ff:ab:7f:
                    cc:2a:1f:1e:38:e8:55:e2:e4:62:44:1a:30:13:fc:
                    65:4b:56:c5:a4:43:10:ac:33:92:fc:5b:b5:63:34:
                    e1:aa:ae:c9:f0:6a:ed:65:5e:fe:3b:28:f4:b2:4f:
                    21:07:d4:27:ea:12:0e:00:d7:b6:a4:9e:f3:e8:37:
                    02:ec:49:7c:8c:cc:6d:06:8c:c7:fc:90:24:b1:28:
                    8c:f2:52:77:7d:21:8d:dc:8e:9d:e6:5c:61:a0:bc:
                    44:bd:fb:50:5e:cc:fb:db:71:b9:b6:52:f3:3e:7a:
                    ed:ba:eb:4d:05:3a:2d:7a:76:ba:ed:25:1d:af:57:
                    14:2c:85:e2:b6:9a:eb:60:aa:8d:3e:2f:75:0d:08:
                    62:df:31:ae:05:a4:02:30:99:38:c8:16:2f:4d:f1:
                    0b:83:db:62:17:7a:37:5a:a6:6e:e0:61:97:f8:c1:
                    34:51:47:81:47:d4:cb:d6:a8:2a:a0:63:8d:2d:cf:
                    79:b2:d5:35:e0:33:e3:d1:95:6d:a4:90:21:5a:5f:
                    6f:80:b9:d9:62:28:93:9c:b6:6c:91:1a:5d:06:4b:
                    78:e2:01:96:e4:e5:57:c8:27:8f:e6:87:b5:84:63:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F7:AB:4C:76:42:79:24:FF:BD:41:B0:16:ED:14:DF:AD:00:34:E1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5ferTHZCeST_vUGwFu0U360ANOE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:7a:43:20:cf:8b:e6:eb:75:6c:29:ab:dd:54:17:9d:75:3f:
         a5:df:7a:6c:de:0d:6a:d0:d8:b9:c6:d4:39:40:ff:8e:08:45:
         5e:ec:40:3c:50:6f:d1:22:00:5d:15:6c:df:51:84:cc:2d:4e:
         0d:bd:7d:82:81:bf:43:92:db:d2:53:b7:08:32:13:92:60:f0:
         ee:44:b9:35:c0:4f:fb:4c:0a:53:1c:9f:2f:46:df:ef:9d:60:
         5b:30:0a:f3:c6:7a:48:ca:ab:c6:fa:f2:64:19:de:97:63:32:
         5f:ea:b2:07:b2:30:56:d9:39:d2:67:7c:e2:98:af:1c:79:24:
         2a:d2:79:f3:ea:48:54:2a:98:e7:71:d4:8b:5b:de:b5:39:f5:
         00:c7:8b:6d:06:58:d9:1b:13:0d:52:b3:96:fd:91:dd:1f:f5:
         8a:ac:ae:24:40:49:66:65:6e:b4:5d:28:2e:a3:b0:8b:31:48:
         24:82:68:ee:cc:fc:74:c5:34:27:36:ea:b4:d6:ce:a5:28:ad:
         bb:b2:9c:7b:68:8b:35:7e:94:22:fe:d8:0b:c3:ce:16:f3:b7:
         b5:4f:f4:8b:bf:71:65:52:d1:a1:bf:18:79:b5:a5:e5:75:cf:
         26:b8:12:ca:2d:01:d9:13:e0:30:e3:1a:d4:ec:2f:d4:44:77:
         dc:a1:b2:51
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE0NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU1RjdBQjRDNzY0Mjc5
MjRGRkJENDFCMDE2RUQxNERGQUQwMDM0RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTgpQtY2mMG+N87IZ69FV3hN6N3fa+FIvjyP+rf8wqHx446FXi
5GJEGjAT/GVLVsWkQxCsM5L8W7VjNOGqrsnwau1lXv47KPSyTyEH1CfqEg4A17ak
nvPoNwLsSXyMzG0GjMf8kCSxKIzyUnd9IY3cjp3mXGGgvES9+1BezPvbcbm2UvM+
eu26600FOi16drrtJR2vVxQsheK2mutgqo0+L3UNCGLfMa4FpAIwmTjIFi9N8QuD
22IXejdapm7gYZf4wTRRR4FH1MvWqCqgY40tz3my1TXgM+PRlW2kkCFaX2+Audli
KJOctmyRGl0GS3jiAZbk5VfIJ4/mh7WEY5qNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU5ferTHZCeST/vUGwFu0U360ANOEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzVmZXJUSFpDZVNUX3ZVR3dG
dTBVMzYwQU5PRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQx
njAwDQYJKoZIhvcNAQELBQADggEBADV6QyDPi+brdWwpq91UF511P6XfemzeDWrQ
2LnG1DlA/44IRV7sQDxQb9EiAF0VbN9RhMwtTg29fYKBv0OS29JTtwgyE5Jg8O5E
uTXAT/tMClMcny9G3++dYFswCvPGekjKq8b68mQZ3pdjMl/qsgeyMFbZOdJnfOKY
rxx5JCrSefPqSFQqmOdx1Itb3rU59QDHi20GWNkbEw1Ss5b9kd0f9YqsriRASWZl
brRdKC6jsIsxSCSCaO7M/HTFNCc26rTWzqUorbuynHtoizV+lCL+2AvDzhbzt7VP
9Iu/cWVS0aG/GHm1peV1zya4EsotAdkT4DDjGtTsL9REd9yhslE=
-----END CERTIFICATE-----
Generated at Tue Jun 18 13:13:49 2024 by rpki-client on console-fra.rpki-client.org