Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dE75FSgLpMikON5c9zznAobTNMo.roa
File:                     dE75FSgLpMikON5c9zznAobTNMo.roa (raw, json)
Hash identifier:          QlI1rfmymPQUYF8JeHAVyzKZZUAeNb80wuhuIw5e6/w=
Subject key identifier:   74:4E:F9:15:28:0B:A4:C8:A4:38:DE:5C:F7:3C:E7:02:86:D3:34:CA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E87
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dE75FSgLpMikON5c9zznAobTNMo.roa
Signing time:             Fri 01 Sep 2023 10:16:10 +0000
ROA not before:           Fri 01 Sep 2023 10:16:10 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24165
IP address blocks:        61.58.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 10:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7815 (0x1e87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:16:10 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=744EF915280BA4C8A438DE5CF73CE70286D334CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:f5:21:0f:f3:70:22:43:66:b4:a3:b8:83:
                    df:60:09:1b:46:d0:c0:61:22:66:eb:f1:c5:34:61:
                    56:73:c3:39:20:d1:eb:53:d4:f7:82:d4:3b:80:c6:
                    3a:2a:01:42:ce:ee:fb:9f:db:e7:aa:f3:0d:61:da:
                    85:11:fa:f2:ce:16:36:2f:a3:d3:d5:23:02:3e:4c:
                    4a:52:26:f0:e0:6e:80:e6:39:c6:fb:15:38:3e:de:
                    7a:e0:3a:9f:8b:4e:4f:20:ab:e3:51:49:c1:94:02:
                    fa:2a:31:a1:37:9d:8a:c9:ba:2d:ec:e4:a8:4f:ab:
                    e2:dc:d5:a5:ba:33:0d:09:2d:a8:f8:61:d0:56:e3:
                    40:81:55:25:a7:9a:be:76:1e:9d:b7:0f:99:4d:c3:
                    60:53:ea:1e:6d:f7:11:0d:b2:56:f5:6f:31:18:63:
                    32:dd:e1:63:f8:5f:23:4c:cd:c2:a9:43:bf:99:e2:
                    57:4b:2f:ba:93:e8:58:6e:ec:fa:66:e8:b9:cc:10:
                    e0:7a:72:dd:b3:b9:c7:8a:25:0d:28:ab:d3:81:29:
                    49:0c:61:e4:c2:65:83:4a:be:bf:33:f6:34:0a:e4:
                    84:e1:be:de:49:27:da:57:8e:c2:9b:8a:3b:db:a0:
                    f4:23:eb:7d:aa:88:15:dc:a1:a8:56:6f:86:12:ed:
                    f5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4E:F9:15:28:0B:A4:C8:A4:38:DE:5C:F7:3C:E7:02:86:D3:34:CA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dE75FSgLpMikON5c9zznAobTNMo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:60:a5:f7:a3:b5:c9:ba:26:ec:9c:b7:10:d4:4f:d8:d0:b2:
         3f:d5:1e:84:18:5f:67:a0:70:e8:be:b6:f1:ff:fe:72:40:96:
         47:26:77:60:07:69:fa:d5:a2:50:a4:14:26:63:89:a5:99:86:
         1b:42:4b:cc:44:7c:c4:7e:c1:6f:d9:bc:ea:67:f3:18:76:fe:
         1d:f2:ce:68:f5:b5:5e:2e:6d:4b:14:29:8b:34:70:6c:7c:82:
         30:e6:63:43:54:ef:d4:fe:13:28:01:c2:6f:e6:b4:0f:64:c0:
         3f:a2:b1:f7:4f:25:8d:fe:5f:40:97:a8:e1:e0:cc:c4:ee:84:
         c8:1a:8d:2f:d3:27:8a:fb:52:ba:c3:bc:48:f2:18:4e:ab:2a:
         e1:c0:da:dd:41:7b:a1:e3:44:78:03:d2:74:ac:49:c1:50:ba:
         c7:b8:a3:58:55:e6:cd:10:99:0e:3b:33:17:5d:2c:11:e0:a8:
         57:01:09:aa:f5:0a:98:f5:78:1e:72:97:87:d3:e5:3c:65:0b:
         62:05:49:97:71:20:8e:f7:56:a1:ed:31:7f:e8:9a:e4:01:d2:
         b0:c3:06:d1:92:90:52:1c:fe:36:c6:4f:87:b6:e6:95:cb:99:
         e4:39:ac:69:1a:b2:a1:76:1a:1e:9c:c4:3d:43:38:ad:20:c9:
         12:57:5c:b5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE2MTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc0NEVGOTE1MjgwQkE0
QzhBNDM4REU1Q0Y3M0NFNzAyODZEMzM0Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzqfUhD/NwIkNmtKO4g99gCRtG0MBhImbr8cU0YVZzwzkg0etT
1PeC1DuAxjoqAULO7vuf2+eq8w1h2oUR+vLOFjYvo9PVIwI+TEpSJvDgboDmOcb7
FTg+3nrgOp+LTk8gq+NRScGUAvoqMaE3nYrJui3s5KhPq+Lc1aW6Mw0JLaj4YdBW
40CBVSWnmr52Hp23D5lNw2BT6h5t9xENslb1bzEYYzLd4WP4XyNMzcKpQ7+Z4ldL
L7qT6Fhu7Ppm6LnMEOB6ct2zuceKJQ0oq9OBKUkMYeTCZYNKvr8z9jQK5IThvt5J
J9pXjsKbijvboPQj632qiBXcoahWb4YS7fVnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUdE75FSgLpMikON5c9zznAobTNMowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2RFNzVGU2dMcE1pa09ONWM5
enpuQW9iVE5Nby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
OnwwDQYJKoZIhvcNAQELBQADggEBAEBgpfejtcm6JuyctxDUT9jQsj/VHoQYX2eg
cOi+tvH//nJAlkcmd2AHafrVolCkFCZjiaWZhhtCS8xEfMR+wW/ZvOpn8xh2/h3y
zmj1tV4ubUsUKYs0cGx8gjDmY0NU79T+EygBwm/mtA9kwD+isfdPJY3+X0CXqOHg
zMTuhMgajS/TJ4r7UrrDvEjyGE6rKuHA2t1Be6HjRHgD0nSsScFQuse4o1hV5s0Q
mQ47MxddLBHgqFcBCar1Cpj1eB5yl4fT5TxlC2IFSZdxII73VqHtMX/omuQB0rDD
BtGSkFIc/jbGT4e25pXLmeQ5rGkasqF2Gh6cxD1DOK0gyRJXXLU=
-----END CERTIFICATE-----
Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org