Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5mjMr0eypUlJ4H7u1jaEowkdb_w.roa
File:                     5mjMr0eypUlJ4H7u1jaEowkdb_w.roa (raw, json)
Hash identifier:          AOwryd25IaAqQOE0zsMKNVw8jMseOXOW2nIy5L69vjM=
Subject key identifier:   E6:68:CC:AF:47:B2:A5:49:49:E0:7E:EE:D6:36:84:A3:09:1D:6F:FC
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DA2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5mjMr0eypUlJ4H7u1jaEowkdb_w.roa
Signing time:             Fri 01 Sep 2023 10:15:06 +0000
ROA not before:           Fri 01 Sep 2023 10:15:06 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24165
IP address blocks:        61.64.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 10:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7586 (0x1da2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:06 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E668CCAF47B2A54949E07EEED63684A3091D6FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:71:8c:08:a9:9e:e1:0f:6e:7c:de:aa:f9:39:
                    b5:7e:be:40:e2:7c:8d:1f:3c:20:07:96:87:cb:7a:
                    c2:5f:81:6f:06:41:39:21:8e:9d:45:d7:02:7b:12:
                    67:4f:e9:5c:9e:d0:79:51:36:c4:91:4e:5d:7f:6b:
                    a0:1a:41:28:23:4a:97:cf:9d:e5:c1:0a:5f:9f:7b:
                    bd:18:3d:44:b1:9f:4a:4d:2e:ee:f0:a5:a9:f8:aa:
                    ca:75:26:cf:98:16:bc:bb:fc:16:4b:c1:d0:f1:45:
                    02:3a:3f:9d:43:df:25:f4:57:59:4a:18:a2:7d:c7:
                    2f:f4:ed:04:69:9d:50:a6:a6:71:2d:7b:e6:b6:ab:
                    9c:00:bd:e3:6e:63:5e:e1:4a:ff:62:ad:c6:62:d0:
                    bd:fe:85:46:5c:37:85:1b:3d:9b:ed:f6:a0:cd:13:
                    9a:73:19:0b:02:41:84:b9:b9:a3:b6:6d:56:53:67:
                    fc:fb:7f:44:15:1a:63:c1:9a:bd:f4:71:61:60:42:
                    a5:ea:ec:05:56:a0:c2:d1:24:ba:71:10:62:c4:53:
                    13:5f:60:57:37:8a:f2:48:9b:d9:e4:5a:04:48:c4:
                    31:f3:83:a6:f6:ca:00:ae:ea:49:81:8a:de:f1:eb:
                    47:ed:52:13:66:e8:c5:bd:f8:05:ea:48:dd:bf:92:
                    86:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:68:CC:AF:47:B2:A5:49:49:E0:7E:EE:D6:36:84:A3:09:1D:6F:FC
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5mjMr0eypUlJ4H7u1jaEowkdb_w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:24:9f:8f:dd:38:c1:e2:31:ff:29:e8:d4:34:95:33:dd:0a:
         2c:df:01:ce:42:e1:9f:42:97:81:87:60:e4:b9:93:f1:99:02:
         a5:c4:9c:f9:10:67:a9:30:70:81:39:a9:e2:2c:f2:d4:8e:ed:
         9c:28:6e:39:ca:d1:11:ad:1b:6d:41:1d:9c:3f:cb:7e:68:5d:
         df:98:84:c2:08:44:9d:ef:de:bc:70:87:de:15:25:5f:46:56:
         e2:f4:03:f8:43:73:f9:3f:dd:86:dd:45:2f:a3:82:ed:d0:57:
         a7:72:3d:8e:78:f2:1f:1e:b6:34:91:9e:87:a8:7c:0e:cc:a3:
         04:24:eb:6b:02:7e:32:c3:49:1c:de:88:ec:12:a6:76:38:18:
         e8:5b:49:25:43:c2:35:e5:b6:e8:8b:84:63:cb:84:c8:bf:78:
         39:4c:13:e8:3c:14:84:0e:da:d8:e3:6d:dc:7b:58:32:24:3b:
         6f:68:29:98:47:a3:42:de:18:8d:1f:75:34:86:29:bd:c3:df:
         8a:a3:17:a3:fe:2f:da:28:ae:d4:1c:36:0d:f5:f8:a0:03:3f:
         7f:b3:f4:7d:8d:c8:0b:d3:93:98:c1:38:45:4f:11:37:12:ad:
         08:9d:66:24:44:83:99:fa:d3:6d:0a:f2:77:2d:76:ea:63:db:
         1e:b7:3e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 13:13:49 2024 by rpki-client on console-fra.rpki-client.org