Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/weC9TV7tMQBeYkgqnFJvjp4TpOQ.roa
File:                     weC9TV7tMQBeYkgqnFJvjp4TpOQ.roa (raw, json)
Hash identifier:          BnJim6Js1DpCciBnhEUzK2yxZFA0JJRrl6zzuBqjQQQ=
Subject key identifier:   C1:E0:BD:4D:5E:ED:31:00:5E:62:48:2A:9C:52:6F:8E:9E:13:A4:E4
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2278
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/weC9TV7tMQBeYkgqnFJvjp4TpOQ.roa
Signing time:             Mon 26 Aug 2024 05:34:02 +0000
ROA not before:           Mon 26 Aug 2024 05:34:02 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24163
IP address blocks:        115.165.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Sep 2024 03:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8824 (0x2278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:34:02 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C1E0BD4D5EED31005E62482A9C526F8E9E13A4E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:32:cd:6b:23:0e:4a:32:4f:34:64:c8:03:
                    74:ad:a5:fa:7b:ac:17:31:12:31:7e:ca:76:4e:53:
                    63:0d:e9:45:8d:62:8c:2e:31:3a:ff:c2:27:56:00:
                    50:53:3a:45:22:f8:ff:0a:5b:6d:e6:ad:d6:ee:51:
                    9a:3e:39:52:95:9f:53:39:8f:88:06:f1:11:cc:06:
                    57:99:bc:77:d2:c5:90:aa:1e:5b:ef:ca:71:49:4e:
                    04:9f:0d:9e:2f:bf:23:c5:80:50:de:71:13:d9:db:
                    87:67:b9:b0:b7:50:01:24:5a:57:01:a0:96:6a:2d:
                    b1:c7:55:85:5d:e2:4f:8a:2e:ea:54:a7:c8:e5:2c:
                    85:2e:f3:b2:32:bc:0e:be:38:f0:d5:0e:65:50:ef:
                    fa:72:e6:41:ef:9f:09:a0:0c:e6:79:fb:84:da:31:
                    05:ee:46:7d:1d:b2:dc:ad:25:dd:90:0b:6e:8a:5d:
                    d8:7d:b0:42:84:de:2e:f8:33:e6:d7:62:cc:8d:5e:
                    e2:4c:84:91:a9:48:d6:2b:55:b9:8d:5e:e1:3c:14:
                    17:62:bc:06:13:29:66:a5:84:da:a9:e1:35:5f:71:
                    b9:d0:15:d3:7f:01:7a:96:17:6f:92:57:a0:93:f5:
                    a0:7c:04:5c:a2:64:25:78:47:c1:9d:5a:17:51:3b:
                    27:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E0:BD:4D:5E:ED:31:00:5E:62:48:2A:9C:52:6F:8E:9E:13:A4:E4
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/weC9TV7tMQBeYkgqnFJvjp4TpOQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         02:8a:d9:9c:a6:15:39:10:b0:5e:8e:58:da:59:2b:73:50:e7:
         a1:0f:0b:13:9a:0b:b5:ad:8b:b8:67:20:2c:b7:0c:ec:34:f0:
         a6:d6:fd:65:71:09:b4:ce:6a:0f:4b:38:aa:10:36:32:20:eb:
         9c:bb:6b:04:c4:a4:f3:a5:56:a0:98:09:fa:22:0f:d3:ef:8b:
         92:cb:6a:a2:9a:8f:19:74:79:89:52:ce:c4:5a:99:3f:98:ba:
         95:08:a0:02:f4:cf:95:71:e8:d3:bd:aa:78:c2:e2:3a:35:ea:
         d0:0e:b7:bb:59:1a:1f:82:5c:fe:dd:06:87:e0:35:de:9a:c6:
         94:aa:8c:60:ad:ce:fd:9b:d1:e9:39:89:ef:8f:fa:fb:17:04:
         07:ba:17:59:2e:10:ad:0d:6f:08:c8:88:60:eb:23:07:af:de:
         d5:50:e4:f5:c3:1a:15:6b:2d:90:97:71:4b:91:8a:7e:21:15:
         6d:c4:d8:9d:30:29:3b:82:24:2f:66:af:5d:bd:43:9d:c0:be:
         8f:b1:29:0b:fe:78:8d:4d:28:b6:4b:c3:10:27:42:f5:9f:a1:
         18:65:2a:c7:4b:2a:2f:3b:77:2a:3b:88:ca:dd:de:88:66:09:
         28:e9:a7:64:93:0c:e0:55:bf:33:5b:d4:18:9c:d6:a9:9b:95:
         a2:8d:d5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:37:01 2024 by rpki-client on console-fra.rpki-client.org