Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Xmploe5TzHHkW6vKV56vm4LFESE.roa
File:                     Xmploe5TzHHkW6vKV56vm4LFESE.roa (raw, json)
Hash identifier:          IvNawGBRLJXKQA9gKvPl29rCo5THaXi8+jU57Hsj/sM=
Subject key identifier:   5E:6A:65:A1:EE:53:CC:71:E4:5B:AB:CA:57:9E:AF:9B:82:C5:11:21
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2216
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Xmploe5TzHHkW6vKV56vm4LFESE.roa
Signing time:             Mon 26 Aug 2024 05:33:39 +0000
ROA not before:           Mon 26 Aug 2024 05:33:39 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24163
IP address blocks:        61.58.96.0/20 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Sep 2024 03:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8726 (0x2216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:39 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=5E6A65A1EE53CC71E45BABCA579EAF9B82C51121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:07:db:57:37:e4:08:4e:21:c2:bf:d3:7d:
                    f5:af:5d:47:45:99:f3:8c:e2:50:74:f1:0a:79:b4:
                    3a:85:78:72:a2:ff:e5:6f:6f:fb:0d:89:3e:98:ce:
                    d3:4f:80:b5:05:eb:71:d2:91:9e:bf:63:e2:9f:08:
                    3c:44:cd:8f:7f:7a:8d:72:41:76:1f:63:ce:96:f0:
                    83:fa:ca:cb:45:7a:4b:2c:fc:87:74:25:8e:75:4f:
                    dd:de:92:66:8d:6c:32:94:83:98:bb:5d:8c:a8:46:
                    5a:18:66:ca:2f:65:8b:ee:b8:bb:33:2c:04:19:36:
                    82:58:8a:a7:d8:1c:85:1d:39:3b:aa:be:6e:9f:e2:
                    9d:b0:4d:e5:6a:53:ad:f9:98:9b:cb:fd:77:1c:06:
                    19:1c:00:92:2b:a9:13:3a:34:ec:ef:aa:49:0f:27:
                    4b:4b:87:70:ae:c4:25:0c:00:f7:89:92:06:5d:fe:
                    55:1c:b6:c6:54:9d:27:6e:d6:be:36:b1:3d:23:75:
                    17:d5:dd:32:ea:b7:86:52:10:26:0b:4e:65:f0:4a:
                    db:1a:29:79:55:35:a1:52:b9:d4:10:b6:71:fa:4f:
                    08:fd:95:34:d3:fc:53:f2:17:c2:29:98:c8:fa:69:
                    58:db:f9:5e:ad:7f:82:ff:1c:a2:9b:64:3f:ed:db:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6A:65:A1:EE:53:CC:71:E4:5B:AB:CA:57:9E:AF:9B:82:C5:11:21
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Xmploe5TzHHkW6vKV56vm4LFESE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:f6:ed:6e:2c:bd:6e:d8:94:b4:bc:ef:7b:f6:ce:2e:1b:47:
         5c:ba:03:24:74:50:fb:e5:37:6c:72:e0:31:b2:e2:db:b1:ab:
         67:95:cc:3f:27:b9:ab:89:4a:4b:75:42:41:79:21:cd:e3:02:
         df:98:13:69:be:3c:dc:c2:70:a3:91:57:b2:73:45:6d:b2:fc:
         30:7a:ee:8c:4f:a3:3c:a4:62:66:7e:db:56:4a:7b:95:da:13:
         86:23:be:72:08:6f:5f:0f:b4:92:14:be:d4:18:9d:8a:06:cb:
         7a:71:8c:dc:9e:e0:04:78:4b:c8:a0:5a:38:b5:b9:fc:0d:22:
         39:fc:b1:64:23:2a:d9:ce:d4:50:16:fb:d4:5c:f6:c5:04:6d:
         bf:ae:97:0f:71:93:ce:f8:3e:40:13:88:b6:9e:12:c8:bb:db:
         ac:66:70:4e:9f:e3:2b:80:30:6c:24:86:1a:ff:93:fa:38:38:
         cf:09:d6:27:15:b0:fe:5a:c8:80:03:06:95:f0:8b:08:1e:4f:
         7a:d7:73:89:4a:76:54:e7:d6:8f:a0:d5:f6:b5:99:6b:5a:b5:
         86:39:d3:d4:c9:d3:fd:4a:c8:e8:e7:07:a8:1e:15:f0:63:aa:
         a2:35:55:0f:fd:2b:64:1e:cd:6c:8c:5b:7a:3a:59:e1:27:1c:
         be:a2:da:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:37:00 2024 by rpki-client on console-fra.rpki-client.org