Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wf9V6X_4mXt1Lfm4f-sStphMmnE.roa
File:                     wf9V6X_4mXt1Lfm4f-sStphMmnE.roa (raw, json)
Hash identifier:          yeMiVW7rtOLeuKvEw/QmaA+OrsnMUzmZQp1MLecGQCM=
Subject key identifier:   C1:FF:55:E9:7F:F8:99:7B:75:2D:F9:B8:7F:EB:12:B6:98:4C:9A:71
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E40
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wf9V6X_4mXt1Lfm4f-sStphMmnE.roa
Signing time:             Fri 01 Sep 2023 10:15:49 +0000
ROA not before:           Fri 01 Sep 2023 10:15:49 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24163
IP address blocks:        61.61.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 10:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7744 (0x1e40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:49 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C1FF55E97FF8997B752DF9B87FEB12B6984C9A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:55:1f:ba:7b:39:60:d4:64:76:18:4f:c5:
                    12:ad:6b:4c:7d:ab:a7:06:44:41:89:52:de:7d:c9:
                    ff:eb:27:ec:60:42:7b:3a:bc:19:33:7e:a1:57:a0:
                    cf:c5:79:b9:14:c3:ad:f7:d4:83:77:2e:b8:d8:b9:
                    f0:a1:f8:2e:66:39:30:17:53:90:b6:5b:02:53:43:
                    bb:7d:7d:85:51:fc:1b:2d:21:b0:07:1e:e4:dc:3b:
                    d2:e2:96:ba:f7:d1:b1:92:45:ea:4c:0a:ee:1e:ee:
                    be:3e:c0:bf:35:50:12:d5:a3:9f:29:95:f0:27:a1:
                    c1:d1:4a:ea:24:53:c2:61:fd:a9:69:8b:ea:31:cd:
                    6f:bc:68:d1:96:18:07:fb:70:71:8c:17:cb:16:c3:
                    c3:cf:7c:a9:2b:af:f5:b4:0e:a3:15:88:a7:66:70:
                    2d:29:d5:55:e8:f4:f7:bb:c2:5e:0b:eb:bb:89:b2:
                    56:a5:3c:0d:cd:7e:63:90:e7:db:f1:ef:fd:9c:38:
                    ed:2d:b9:e6:62:7c:ab:79:b0:36:3b:0e:ea:aa:d4:
                    32:be:89:f1:1b:23:81:2a:f9:37:23:81:7c:4c:10:
                    88:df:c3:61:b3:64:8a:79:90:8c:e4:45:a4:81:8e:
                    52:f1:be:e6:c7:d5:84:b8:ee:f6:f9:1d:75:e3:54:
                    74:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FF:55:E9:7F:F8:99:7B:75:2D:F9:B8:7F:EB:12:B6:98:4C:9A:71
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wf9V6X_4mXt1Lfm4f-sStphMmnE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:28:c6:37:31:c0:bd:7f:49:b2:94:c6:5a:3b:f1:20:29:2e:
         c9:a6:4f:6b:25:f8:79:af:03:14:00:6e:23:54:b9:1d:0d:90:
         98:8a:35:25:05:d9:e8:47:1e:80:e1:2a:cd:0f:fb:45:e5:28:
         65:d7:55:24:3e:97:8a:76:a4:5d:9e:ce:0c:0a:72:89:04:d6:
         0d:18:06:ac:b3:48:c9:10:41:bd:40:85:b7:e7:96:e9:6e:b4:
         9a:09:81:80:09:0c:6c:00:fb:69:64:c6:bc:d1:c0:01:1c:c1:
         d8:f3:28:43:b4:aa:c4:28:d8:98:e9:08:c9:a7:1e:b1:62:c4:
         a7:be:c6:06:4f:10:92:1f:0f:13:6a:a9:6d:77:ec:37:94:4e:
         64:20:0d:b3:4a:ca:9b:28:b5:bf:d1:03:a0:59:c8:ad:b6:d8:
         74:89:92:b4:36:b3:68:d2:17:e7:dd:4b:d1:b5:1c:3d:83:ac:
         14:26:1c:43:b0:21:08:ec:dd:50:95:ac:e8:13:c9:d0:f5:44:
         89:ec:b7:32:3c:0e:3e:21:19:40:64:fb:a6:61:38:41:8b:1b:
         f7:30:8f:07:44:9b:26:cb:81:29:25:ea:fa:fe:bd:c1:bc:c9:
         77:0e:6e:4d:38:bf:09:2d:91:6e:96:d8:f5:24:77:a2:9f:11:
         76:09:6c:94
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMxRkY1NUU5N0ZGODk5
N0I3NTJERjlCODdGRUIxMkI2OTg0QzlBNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4rFUfuns5YNRkdhhPxRKta0x9q6cGREGJUt59yf/rJ+xgQns6
vBkzfqFXoM/FebkUw6331IN3LrjYufCh+C5mOTAXU5C2WwJTQ7t9fYVR/BstIbAH
HuTcO9Lilrr30bGSRepMCu4e7r4+wL81UBLVo58plfAnocHRSuokU8Jh/alpi+ox
zW+8aNGWGAf7cHGMF8sWw8PPfKkrr/W0DqMViKdmcC0p1VXo9Pe7wl4L67uJslal
PA3NfmOQ59vx7/2cOO0tueZifKt5sDY7Duqq1DK+ifEbI4Eq+TcjgXxMEIjfw2Gz
ZIp5kIzkRaSBjlLxvubH1YS47vb5HXXjVHRPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUwf9V6X/4mXt1Lfm4f+sStphMmnEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3dmOVY2WF80bVh0MUxmbTRm
LXNTdHBoTW1uRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
PdgwDQYJKoZIhvcNAQELBQADggEBADQoxjcxwL1/SbKUxlo78SApLsmmT2sl+Hmv
AxQAbiNUuR0NkJiKNSUF2ehHHoDhKs0P+0XlKGXXVSQ+l4p2pF2ezgwKcokE1g0Y
BqyzSMkQQb1AhbfnlulutJoJgYAJDGwA+2lkxrzRwAEcwdjzKEO0qsQo2JjpCMmn
HrFixKe+xgZPEJIfDxNqqW137DeUTmQgDbNKypsotb/RA6BZyK222HSJkrQ2s2jS
F+fdS9G1HD2DrBQmHEOwIQjs3VCVrOgTydD1RInstzI8Dj4hGUBk+6ZhOEGLG/cw
jwdEmybLgSkl6vr+vcG8yXcObk04vwktkW6W2PUkd6KfEXYJbJQ=
-----END CERTIFICATE-----
Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org