Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Nuke4b_nT-C7saPRBd-Jkgpfbko.roa
File:                     Nuke4b_nT-C7saPRBd-Jkgpfbko.roa (raw, json)
Hash identifier:          B+D1uQIICIEVlhuH4NNE2tndDzi9E2GdvBXxUojRbBA=
Subject key identifier:   36:E9:1E:E1:BF:E7:4F:E0:BB:B1:A3:D1:05:DF:89:92:0A:5F:6E:4A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E22
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Nuke4b_nT-C7saPRBd-Jkgpfbko.roa
Signing time:             Fri 01 Sep 2023 10:15:43 +0000
ROA not before:           Fri 01 Sep 2023 10:15:43 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        180.218.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 10:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7714 (0x1e22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:43 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=36E91EE1BFE74FE0BBB1A3D105DF89920A5F6E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e5:21:5d:1c:1c:46:8f:fa:1f:a9:e1:ed:88:
                    37:54:25:27:7b:84:b1:5e:4d:1b:e9:26:3b:43:34:
                    1d:62:27:4f:49:ee:4d:cb:7b:68:4a:fc:a5:5c:9a:
                    63:0e:5b:07:09:6a:5b:d2:b4:8c:0a:8c:d4:e6:06:
                    3a:80:c9:00:8f:15:e7:a6:66:5b:45:c6:15:af:ed:
                    8e:c3:2d:69:c4:4f:b1:97:bd:0a:39:8f:22:2f:01:
                    e5:71:b5:e8:0e:31:b0:b0:09:d8:74:4e:05:27:f0:
                    26:c8:c9:44:95:88:19:f7:d5:5e:94:8b:6f:3c:47:
                    5d:28:54:8e:00:bb:a9:58:e9:31:42:e5:35:72:d0:
                    8e:45:cb:81:b9:24:b9:84:4f:91:34:31:99:31:76:
                    7e:63:9e:cb:c6:e2:1c:f4:00:89:9f:21:ec:03:4d:
                    bc:33:fb:e0:32:e4:6e:d3:61:67:8a:9d:03:a0:1c:
                    ce:81:55:a5:17:2c:a7:63:0b:f0:a5:36:f0:71:5d:
                    d3:33:f4:59:c1:b3:72:a5:51:d6:77:87:13:37:0f:
                    52:41:bf:3f:68:98:8e:17:6b:39:6f:25:fc:be:d7:
                    b8:4e:f9:c9:20:55:83:90:dc:30:08:e2:9f:d3:cb:
                    b6:17:95:31:4f:19:c1:02:71:36:07:37:56:b0:86:
                    16:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E9:1E:E1:BF:E7:4F:E0:BB:B1:A3:D1:05:DF:89:92:0A:5F:6E:4A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Nuke4b_nT-C7saPRBd-Jkgpfbko.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:4c:87:64:09:49:6c:97:f2:ca:c1:f4:a4:dc:d2:e9:55:0e:
         27:c3:5e:00:a3:3d:5d:e2:66:40:32:17:62:4c:9c:c2:34:af:
         2d:d4:a0:4c:f2:af:b6:a2:14:2f:64:be:0b:23:79:49:e6:9e:
         26:83:f7:15:5d:74:bf:75:0f:8b:8f:d4:4f:f8:d7:42:db:39:
         99:02:83:e9:6c:d6:14:ee:c5:b7:ed:58:c1:19:3c:f4:41:89:
         31:ca:ed:95:05:71:15:bd:bd:52:8e:f6:4d:9e:de:e1:0e:7b:
         c2:35:dc:39:33:0f:d7:42:9c:d2:37:a9:f5:f1:4b:0f:e0:1d:
         66:56:0b:25:23:27:68:fa:21:60:ce:b3:cd:47:4f:18:4d:25:
         1f:7c:8f:be:e4:20:92:b6:24:21:41:45:82:ed:e5:58:79:df:
         a6:19:99:6f:1c:8d:7d:3b:de:06:2e:2e:9a:63:14:07:47:60:
         48:78:bb:2a:4b:26:f2:17:68:5a:ee:b0:e6:e4:03:72:c2:a3:
         9f:f1:b7:7c:98:4a:26:3e:97:6b:31:bc:00:3b:44:30:7c:f1:
         0f:ff:95:7e:33:12:1b:34:e1:ed:b0:5c:14:c1:e3:9c:fb:bf:
         57:2b:a2:90:67:be:6b:a9:28:d6:71:62:df:74:6c:26:a0:57:
         40:e3:c8:7b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM2RTkxRUUxQkZFNzRG
RTBCQkIxQTNEMTA1REY4OTkyMEE1RjZFNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDc5SFdHBxGj/ofqeHtiDdUJSd7hLFeTRvpJjtDNB1iJ09J7k3L
e2hK/KVcmmMOWwcJalvStIwKjNTmBjqAyQCPFeemZltFxhWv7Y7DLWnET7GXvQo5
jyIvAeVxtegOMbCwCdh0TgUn8CbIyUSViBn31V6Ui288R10oVI4Au6lY6TFC5TVy
0I5Fy4G5JLmET5E0MZkxdn5jnsvG4hz0AImfIewDTbwz++Ay5G7TYWeKnQOgHM6B
VaUXLKdjC/ClNvBxXdMz9FnBs3KlUdZ3hxM3D1JBvz9omI4XazlvJfy+17hO+ckg
VYOQ3DAI4p/Ty7YXlTFPGcECcTYHN1awhhZvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUNuke4b/nT+C7saPRBd+JkgpfbkowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL051a2U0Yl9uVC1DN3NhUFJC
ZC1Ka2dwZmJrby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2sgwDQYJKoZIhvcNAQELBQADggEBAFBMh2QJSWyX8srB9KTc0ulVDifDXgCjPV3i
ZkAyF2JMnMI0ry3UoEzyr7aiFC9kvgsjeUnmniaD9xVddL91D4uP1E/410LbOZkC
g+ls1hTuxbftWMEZPPRBiTHK7ZUFcRW9vVKO9k2e3uEOe8I13DkzD9dCnNI3qfXx
Sw/gHWZWCyUjJ2j6IWDOs81HTxhNJR98j77kIJK2JCFBRYLt5Vh536YZmW8cjX07
3gYuLppjFAdHYEh4uypLJvIXaFrusObkA3LCo5/xt3yYSiY+l2sxvAA7RDB88Q//
lX4zEhs04e2wXBTB45z7v1cropBnvmupKNZxYt90bCagV0DjyHs=
-----END CERTIFICATE-----
Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org