Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QI_AWt_nGMcO84kw1NpUmrHIEm8.roa
File:                     QI_AWt_nGMcO84kw1NpUmrHIEm8.roa (raw, json)
Hash identifier:          rSa9PDgvkNVw6tXqboCcp8Fv/dLO2z34m/5RDOhCs/E=
Subject key identifier:   40:8F:C0:5A:DF:E7:18:C7:0E:F3:89:30:D4:DA:54:9A:B1:C8:12:6F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E85
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QI_AWt_nGMcO84kw1NpUmrHIEm8.roa
Signing time:             Fri 01 Sep 2023 10:16:10 +0000
ROA not before:           Fri 01 Sep 2023 10:16:10 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        180.218.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 10:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7813 (0x1e85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:16:10 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=408FC05ADFE718C70EF38930D4DA549AB1C8126F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:1e:56:47:7a:e5:d2:c9:da:ff:7f:6a:ff:
                    b2:85:8e:d6:89:d2:98:09:4b:96:e9:a6:57:96:a3:
                    13:9f:22:2f:05:9c:c6:3b:32:23:d6:d2:8f:82:61:
                    25:d3:9d:a3:62:f7:ae:e5:f4:6e:ba:58:78:ff:81:
                    64:d3:f7:cc:d5:6b:02:d6:8b:e2:36:95:13:f9:de:
                    8d:e7:1b:2c:94:24:8f:5c:27:cd:12:f7:65:f3:24:
                    15:4f:ae:62:07:39:d9:bf:6d:3e:82:c6:2c:89:07:
                    9c:2b:ed:85:1c:8e:80:37:62:e3:d8:da:8c:27:08:
                    dc:85:f9:ff:a3:ca:32:60:bd:93:40:a9:48:b6:b0:
                    86:ff:a4:1b:b6:ba:95:7f:5d:b3:9e:d4:94:7b:ac:
                    a1:0b:50:19:e2:98:97:7c:de:24:5a:89:0f:aa:aa:
                    a2:09:30:55:26:29:9b:a7:c6:69:8a:ca:b7:5a:1e:
                    11:af:ca:48:1e:ba:b0:f7:d1:d4:b1:25:5c:53:49:
                    44:55:58:9a:a5:73:d7:14:77:3c:ad:5d:94:ff:02:
                    c3:d9:63:ff:34:67:75:54:cf:19:43:97:5f:8e:0e:
                    bc:7c:de:1a:38:d4:b9:eb:80:11:27:ff:49:6e:58:
                    07:2a:75:50:54:d2:70:62:fb:19:78:3a:7b:88:48:
                    7e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8F:C0:5A:DF:E7:18:C7:0E:F3:89:30:D4:DA:54:9A:B1:C8:12:6F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QI_AWt_nGMcO84kw1NpUmrHIEm8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:6d:cd:28:c9:a3:f5:77:15:ce:b1:73:b8:4e:5e:4b:27:8f:
         2a:67:29:de:44:dc:07:96:fe:d7:df:16:40:3e:73:33:8f:eb:
         9f:78:e5:61:c4:26:7d:b1:81:30:e2:bd:35:51:d2:90:18:20:
         c4:a9:12:62:59:6f:f7:63:d0:ab:1a:c6:e2:6e:6f:78:0d:a2:
         20:f2:fc:79:15:66:f4:e6:f3:c2:91:f5:2d:90:8c:f4:ac:49:
         6c:c9:12:f9:38:93:43:0b:b2:51:7d:b4:eb:35:10:93:81:a4:
         af:60:31:85:19:42:fe:ca:3a:99:34:82:8a:92:a4:50:50:50:
         f0:9b:41:10:b0:16:31:6b:24:17:c5:63:3b:85:01:c9:83:29:
         22:1a:54:b2:d2:5c:13:d6:01:0e:33:ce:a6:76:c8:2f:5c:d8:
         5f:e3:7f:05:e4:d1:26:73:b5:eb:5c:21:16:3d:2d:fb:a6:f0:
         4f:27:5f:2f:08:22:b7:03:87:a1:9a:4b:7c:53:56:01:1e:25:
         fe:30:fa:d1:9e:71:86:bd:a4:6a:6d:a1:e9:bc:36:c7:db:95:
         bb:f2:d2:11:eb:83:50:99:61:5e:e2:18:e0:b1:d6:09:b8:dd:
         71:6e:b9:5b:d3:fb:d9:2c:63:41:27:b3:48:d7:24:c5:a2:b0:
         62:a8:e1:30
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHoUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE2MTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQwOEZDMDVBREZFNzE4
QzcwRUYzODkzMEQ0REE1NDlBQjFDODEyNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtMR5WR3rl0sna/39q/7KFjtaJ0pgJS5bppleWoxOfIi8FnMY7
MiPW0o+CYSXTnaNi967l9G66WHj/gWTT98zVawLWi+I2lRP53o3nGyyUJI9cJ80S
92XzJBVPrmIHOdm/bT6CxiyJB5wr7YUcjoA3YuPY2ownCNyF+f+jyjJgvZNAqUi2
sIb/pBu2upV/XbOe1JR7rKELUBnimJd83iRaiQ+qqqIJMFUmKZunxmmKyrdaHhGv
ykgeurD30dSxJVxTSURVWJqlc9cUdzytXZT/AsPZY/80Z3VUzxlDl1+ODrx83ho4
1LnrgBEn/0luWAcqdVBU0nBi+xl4OnuISH4XAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUQI/AWt/nGMcO84kw1NpUmrHIEm8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FJX0FXdF9uR01jTzg0a3cx
TnBVbXJISUVtOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2oAwDQYJKoZIhvcNAQELBQADggEBAABtzSjJo/V3Fc6xc7hOXksnjypnKd5E3AeW
/tffFkA+czOP65945WHEJn2xgTDivTVR0pAYIMSpEmJZb/dj0KsaxuJub3gNoiDy
/HkVZvTm88KR9S2QjPSsSWzJEvk4k0MLslF9tOs1EJOBpK9gMYUZQv7KOpk0goqS
pFBQUPCbQRCwFjFrJBfFYzuFAcmDKSIaVLLSXBPWAQ4zzqZ2yC9c2F/jfwXk0SZz
tetcIRY9Lfum8E8nXy8IIrcDh6GaS3xTVgEeJf4w+tGecYa9pGptoem8Nsfblbvy
0hHrg1CZYV7iGOCx1gm43XFuuVvT+9ksY0Ens0jXJMWisGKo4TA=
-----END CERTIFICATE-----
Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org