Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e6KH-YLo-5Lf7dAlnMADcKU63ck.roa
File:                     e6KH-YLo-5Lf7dAlnMADcKU63ck.roa (raw, json)
Hash identifier:          B2XRwqLQ0Qmp4HlJxmX/tzR6iY4GUTqiKBmKM1wDOXg=
Subject key identifier:   7B:A2:87:F9:82:E8:FB:92:DF:ED:D0:25:9C:C0:03:70:A5:3A:DD:C9
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DCA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e6KH-YLo-5Lf7dAlnMADcKU63ck.roa
Signing time:             Fri 01 Sep 2023 10:15:18 +0000
ROA not before:           Fri 01 Sep 2023 10:15:18 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24165
IP address blocks:        180.218.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 10:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7626 (0x1dca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:18 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7BA287F982E8FB92DFEDD0259CC00370A53ADDC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:c6:60:98:22:91:d0:a4:72:c0:f8:51:b9:
                    cb:5e:7b:29:e2:e9:44:33:88:24:e2:16:30:c4:87:
                    26:9b:15:3a:10:46:ab:82:08:dc:2c:e6:9b:b6:d0:
                    7d:18:87:c6:58:f3:1a:74:e5:17:c4:3d:68:ff:3f:
                    06:31:2b:87:95:9d:d7:75:f5:25:b3:3e:a8:5c:9a:
                    9c:d5:ad:dc:dc:e9:7f:f8:4e:e2:5d:e9:a9:80:e4:
                    3e:d6:71:41:ec:e5:00:7e:2b:70:da:89:bf:02:09:
                    de:70:00:60:35:b3:37:5e:0a:91:29:d1:2f:e8:6e:
                    1d:a0:87:e1:ff:61:04:7e:44:30:ff:ef:55:50:5b:
                    66:01:4e:53:ea:b4:4a:78:d8:a4:30:c5:af:81:76:
                    8e:83:50:ca:47:9d:a4:10:fb:2d:0c:29:7b:42:85:
                    68:87:eb:c4:a2:4a:c4:18:0c:c6:ce:d5:c9:92:02:
                    a3:9c:50:16:17:f1:5d:8f:91:0b:6d:74:9a:8e:d9:
                    56:de:80:e2:73:48:90:05:22:76:89:d5:92:34:fc:
                    25:5a:b3:8d:5f:bd:e4:5a:51:77:27:2d:f5:a3:81:
                    01:58:be:28:25:c4:a4:22:16:d3:74:d3:b9:4a:9f:
                    4f:7f:df:62:9a:46:b5:55:61:fd:ad:68:15:17:07:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A2:87:F9:82:E8:FB:92:DF:ED:D0:25:9C:C0:03:70:A5:3A:DD:C9
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e6KH-YLo-5Lf7dAlnMADcKU63ck.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:5c:8b:ab:af:7a:9d:06:5e:54:a6:f8:ee:50:a7:5a:fd:19:
         e1:39:39:cd:30:d6:99:4c:18:7e:34:e6:6f:ad:a7:28:b0:8a:
         f1:0a:02:a0:34:02:c5:dc:8a:26:99:1f:94:69:83:88:f9:ee:
         67:bd:e2:d6:29:46:0a:99:4c:3b:af:fb:06:09:08:4d:51:6e:
         f6:09:39:0f:2e:e9:5e:dd:80:7c:1c:9c:dc:64:bf:bd:09:8e:
         1f:b8:c4:17:c3:31:e9:ef:86:ee:29:9e:a6:79:b3:7f:47:82:
         8e:20:f6:b7:a7:89:f7:34:b9:f1:bc:a2:09:96:3b:fa:0d:1c:
         d0:60:0a:b7:d5:34:6a:1f:6c:8b:29:4b:14:63:be:f7:3b:c5:
         80:77:6d:7b:f6:d3:5e:f3:77:77:9b:95:b4:6d:71:4f:7e:23:
         8b:8e:ea:87:48:e7:f0:2a:ae:8e:20:8c:3c:05:77:dd:89:d5:
         f1:9c:8b:fe:1a:f3:1e:e5:45:13:fa:14:31:b2:99:0a:c7:c9:
         87:10:6a:42:43:50:be:ff:8b:fa:7d:73:64:b5:6c:1c:f8:c3:
         97:9d:8a:da:4c:78:4c:23:34:da:a6:34:cc:86:99:3f:87:f0:
         c3:7c:92:4a:8c:1d:62:d3:9f:45:cc:ef:6b:69:58:1a:76:b1:
         81:6d:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:54:12 2024 by rpki-client on console-ams.rpki-client.org