Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CW_7sxSdLd1UXxON4glxH_Qw_Wg.roa
File:                     CW_7sxSdLd1UXxON4glxH_Qw_Wg.roa (raw, json)
Hash identifier:          cHJYW9YTn9SIMlYFzc2sq3KoTEJCTL9Kxv3fJASudws=
Subject key identifier:   09:6F:FB:B3:14:9D:2D:DD:54:5F:13:8D:E2:09:71:1F:F4:30:FD:68
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DE6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CW_7sxSdLd1UXxON4glxH_Qw_Wg.roa
Signing time:             Fri 01 Sep 2023 10:15:26 +0000
ROA not before:           Fri 01 Sep 2023 10:15:26 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     4662
IP address blocks:        61.61.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 10:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7654 (0x1de6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:26 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=096FFBB3149D2DDD545F138DE209711FF430FD68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:f4:b7:d6:fa:b0:ea:d5:04:f2:2a:a2:1d:
                    4f:84:2e:e4:30:c1:04:35:61:5c:b5:43:47:94:1c:
                    ec:72:10:54:94:e1:89:11:ab:09:ee:6c:55:27:51:
                    42:1c:9b:5c:1c:58:c0:6d:93:7b:d8:6e:99:02:c2:
                    91:3b:df:3c:2b:22:4d:04:b7:12:41:cd:d8:86:79:
                    c8:d9:06:27:f6:76:2f:eb:ed:3c:e2:16:8e:89:0a:
                    80:33:23:e7:77:48:f8:83:2f:8b:84:47:6a:74:1f:
                    5d:e3:64:c5:df:4d:9c:d0:9a:d9:e3:f9:d4:5e:58:
                    09:14:5b:00:29:f0:97:68:2d:4a:ed:b2:a1:a3:4b:
                    e2:37:ee:18:4e:e6:3c:42:ae:65:62:29:c3:54:c5:
                    cb:1a:be:4b:11:b6:af:15:2e:40:bd:4d:ec:e5:34:
                    9f:86:30:c5:ae:4d:f7:82:ae:7c:73:cf:09:25:d1:
                    67:ab:8c:38:70:2e:cf:45:c9:7e:0f:29:3c:7c:44:
                    4d:50:dc:43:4f:d7:e1:3e:73:1e:a7:11:15:46:9e:
                    4e:9a:f5:fe:3d:27:c9:0d:11:08:42:fe:02:14:29:
                    61:e7:54:55:a1:35:33:cd:ef:2e:d0:07:6e:71:54:
                    37:ce:7a:97:19:63:bb:68:94:3d:c2:be:c4:40:f6:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6F:FB:B3:14:9D:2D:DD:54:5F:13:8D:E2:09:71:1F:F4:30:FD:68
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CW_7sxSdLd1UXxON4glxH_Qw_Wg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:4b:c5:79:85:de:1e:ad:2c:f0:6c:99:b4:2a:ed:ea:d9:69:
         5a:d5:60:9d:9d:3a:4f:c6:62:f1:81:96:81:8c:9e:93:c4:57:
         ee:47:2e:fc:83:39:e7:fe:04:fc:a6:c3:7e:73:af:1b:1d:b2:
         8a:a8:6a:9d:70:a0:b3:eb:67:b7:d5:10:aa:09:25:1c:f3:ae:
         31:ac:88:0d:e6:61:b7:17:07:e5:d0:8b:73:fb:22:fe:64:10:
         58:e1:8d:71:d3:1d:c7:c7:e2:d6:79:a6:af:ee:03:1e:82:fd:
         b9:a4:ad:ff:f3:c3:ea:21:ba:1d:93:ac:ef:41:1e:6b:b1:38:
         f8:10:25:46:b4:04:a8:cb:6f:57:a0:3b:08:96:70:8f:f9:9e:
         66:e3:b8:fd:a4:32:ad:88:45:d2:83:c7:e6:fe:f3:a5:c8:26:
         fd:0f:51:69:be:4d:66:b0:d0:66:79:bc:87:4f:bd:05:d5:18:
         d0:c3:e5:2a:f6:a9:e7:5c:22:f1:87:e4:66:fc:39:8d:bf:7b:
         d2:27:0d:19:ff:5d:d0:09:29:e9:d3:c8:1e:7a:40:15:4e:2a:
         66:52:5b:b3:5f:c2:38:f1:b3:da:f0:67:d1:07:4f:05:56:41:
         60:e6:07:c8:d4:40:df:04:6c:da:30:0d:f7:37:9f:1f:d9:71:
         0b:c6:c5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 13:13:49 2024 by rpki-client on console-fra.rpki-client.org