Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_LpMIpzC86WVDBSvH5du557Uczo.roa
File:                     _LpMIpzC86WVDBSvH5du557Uczo.roa (raw, json)
Hash identifier:          lwmwL2zEpVDc8aV1JUd6x0v6pIP7QlKFrAJMR6vajxk=
Subject key identifier:   FC:BA:4C:22:9C:C2:F3:A5:95:0C:14:AF:1F:97:6E:E7:9E:D4:73:3A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E6C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_LpMIpzC86WVDBSvH5du557Uczo.roa
Signing time:             Fri 01 Sep 2023 10:16:01 +0000
ROA not before:           Fri 01 Sep 2023 10:16:01 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        49.158.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 10:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7788 (0x1e6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:16:01 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=FCBA4C229CC2F3A5950C14AF1F976EE79ED4733A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d6:2f:79:7b:8e:9c:b2:fc:5a:0d:de:12:75:
                    4c:a8:75:cb:ce:fc:3f:6a:ad:8b:ab:b9:61:95:29:
                    78:af:45:b7:ba:7e:cc:ca:e4:ef:65:e7:bd:92:68:
                    b4:39:8a:97:c8:bd:f4:25:c5:18:4c:3d:a7:7d:fc:
                    11:68:40:dc:7c:3a:bf:7c:86:3e:07:db:11:5a:98:
                    a1:96:9d:b7:65:e7:bc:2e:1c:4c:aa:9b:23:6a:09:
                    eb:a0:32:f2:b7:8c:9d:7e:08:06:fb:c9:30:76:75:
                    38:52:0a:8f:88:7c:05:d9:ca:be:ed:0a:cd:1a:b4:
                    9e:ed:f0:16:f0:0d:8a:41:70:78:37:29:b5:93:8f:
                    0a:51:e7:1f:be:ac:9b:6d:37:5f:35:51:16:91:35:
                    53:d8:94:31:38:18:7b:ee:28:0d:e0:03:e8:98:09:
                    2a:cb:5f:45:8c:ac:9d:fb:3d:cd:fd:e1:f9:cc:d3:
                    98:54:9f:9f:2f:90:10:bd:12:64:bf:e0:8c:e5:f5:
                    88:a5:01:47:18:07:30:6f:81:fb:4e:3f:77:2a:53:
                    83:64:b9:2c:a7:be:3f:5a:7a:75:3e:0c:55:83:2f:
                    6f:a2:f9:14:01:02:a1:e6:8e:69:e6:2a:98:61:26:
                    4c:a5:3c:31:ab:68:02:60:de:ea:3e:ae:b9:ab:40:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BA:4C:22:9C:C2:F3:A5:95:0C:14:AF:1F:97:6E:E7:9E:D4:73:3A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_LpMIpzC86WVDBSvH5du557Uczo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:6a:9c:02:49:cb:3b:f1:5b:f2:37:49:76:41:5b:7f:4c:2b:
         72:eb:5c:77:4c:bb:cd:30:e2:21:66:20:cc:41:85:88:9e:6a:
         88:8f:8f:fc:45:fa:9b:68:72:ff:3e:fe:b2:d8:d1:72:33:66:
         a0:94:0f:44:96:df:1c:75:f0:89:4e:cf:67:c5:33:42:30:e0:
         41:3c:c5:98:32:65:db:08:48:4e:4c:c3:3b:54:c2:a5:7d:af:
         24:bd:d5:87:10:e3:14:06:d7:25:5f:87:c6:37:d4:42:51:ef:
         38:a0:8d:e6:7d:cc:0a:94:fe:68:53:d9:cd:8d:55:08:95:b0:
         62:1c:58:7f:6c:dc:68:dc:69:66:1d:21:b2:6d:7b:d8:b6:d0:
         d0:6a:86:94:44:d5:84:95:7e:a8:60:d2:68:05:64:9b:63:80:
         70:b8:cd:4d:fd:34:01:87:cc:22:c9:a5:15:fc:68:fd:84:36:
         ec:a0:34:0d:11:df:19:91:5e:ba:cb:5f:c4:3a:32:d8:2c:78:
         05:44:3a:5d:24:65:52:56:a8:1e:9d:a9:ff:09:83:0e:ed:80:
         36:ee:99:99:f8:85:2c:3b:ee:21:c7:cd:13:26:7a:12:36:6a:
         f7:cb:dc:c7:02:a1:49:4f:73:46:d4:a5:24:7d:d4:9a:9f:00:
         54:f6:28:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org