Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6BoGM2fwTMMPnlB8ZLU_z7q6Puo.roa
File:                     6BoGM2fwTMMPnlB8ZLU_z7q6Puo.roa (raw, json)
Hash identifier:          bCheVEA9PDYrccttKbt93pW6EtvEzf+3aEu3ub2ZNKY=
Subject key identifier:   E8:1A:06:33:67:F0:4C:C3:0F:9E:50:7C:64:B5:3F:CF:BA:BA:3E:EA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1D7A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6BoGM2fwTMMPnlB8ZLU_z7q6Puo.roa
Signing time:             Fri 01 Sep 2023 10:14:53 +0000
ROA not before:           Fri 01 Sep 2023 10:14:53 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24165
IP address blocks:        180.218.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 10:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7546 (0x1d7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:14:53 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E81A063367F04CC30F9E507C64B53FCFBABA3EEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:31:aa:1f:2e:c9:88:07:56:1a:f9:de:3f:
                    21:91:2a:40:59:dd:c4:d8:49:ed:c8:1c:d0:bc:da:
                    65:1c:68:8a:38:c6:16:95:db:3c:31:8e:fd:ed:7c:
                    72:f7:ab:6d:0e:93:1f:8f:00:fe:a2:75:c7:48:8c:
                    1a:ca:ab:90:ff:03:c8:56:1c:f6:4c:ab:dd:dc:14:
                    c5:7e:1a:bf:d7:49:8c:ec:0a:28:2a:5a:94:26:a1:
                    27:5d:08:c0:8e:a7:31:0f:11:36:f5:26:b6:b0:52:
                    be:9a:54:06:6d:a7:d3:9b:3f:d1:a5:bd:15:f7:75:
                    b4:62:72:fd:ad:66:89:ef:2e:a0:a3:8f:3c:61:37:
                    2a:1e:3b:a2:0f:d0:6f:64:4d:b9:61:bd:b5:a8:82:
                    aa:4a:5d:d4:26:40:53:49:6d:a9:db:fa:6b:2e:0c:
                    63:f1:46:d6:cb:8c:aa:db:7a:6c:e0:c8:d5:c4:73:
                    62:f6:6a:53:70:2c:2a:7e:83:19:d6:14:93:89:22:
                    88:d7:2b:58:9b:d1:04:6f:fc:55:75:61:05:9e:5e:
                    98:1f:f4:e8:35:e5:56:aa:64:d6:7f:ae:13:47:c4:
                    36:08:10:5d:be:17:b6:57:fa:f7:9c:2e:f6:a6:a2:
                    ee:5e:24:57:9b:c1:26:d3:ab:c9:96:d1:82:2a:59:
                    da:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1A:06:33:67:F0:4C:C3:0F:9E:50:7C:64:B5:3F:CF:BA:BA:3E:EA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6BoGM2fwTMMPnlB8ZLU_z7q6Puo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:fa:37:35:8b:9a:14:ea:d1:13:67:e5:31:5b:a7:05:e0:f6:
         3e:be:9e:a0:4c:90:7b:91:2d:be:4f:40:05:fa:78:76:9e:0d:
         53:8f:69:29:d3:a1:05:f9:53:80:63:ca:41:80:30:08:d6:0d:
         6f:3c:74:88:6f:6f:63:4b:f9:50:30:c8:9a:67:ed:9a:fb:04:
         a5:7f:2d:10:e8:52:11:51:fa:f9:a0:d8:3b:98:77:26:bf:3f:
         78:f4:9a:89:b5:ff:1a:b2:91:bc:d3:d6:89:b9:03:2f:c2:7f:
         ec:fa:b4:76:d2:6c:a0:5e:db:a1:5c:82:90:27:65:79:02:e1:
         71:70:07:fc:6a:d0:23:55:94:b5:52:62:74:1a:b0:99:d8:00:
         b3:fc:15:91:e4:5e:e2:61:1b:da:7d:38:68:52:1c:8c:73:e7:
         cc:26:5b:b6:f3:b0:4a:ad:c3:88:1e:a1:12:23:5d:56:bc:a1:
         57:4a:89:51:09:5d:1f:3d:e6:1c:32:94:09:0d:11:38:15:45:
         fc:70:18:7f:85:30:15:60:6c:79:5f:84:32:5b:4d:ea:57:69:
         5d:72:32:38:53:76:98:f9:2d:0c:5a:7b:9d:18:49:c4:7a:7c:
         64:9b:11:fd:2c:da:a8:31:95:f3:a3:f4:bb:c5:af:03:25:85:
         4f:c6:25:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 13:13:49 2024 by rpki-client on console-fra.rpki-client.org