Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wvMed5q9Q08jbYhp_E38IBogZSQ.roa
File:                     wvMed5q9Q08jbYhp_E38IBogZSQ.roa (raw, json)
Hash identifier:          uySuhInRnUu1Ief6yFu+NHI8nUuY1dspyJ2XR74ukhY=
Subject key identifier:   C2:F3:1E:77:9A:BD:43:4F:23:6D:88:69:FC:4D:FC:20:1A:20:65:24
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1EA7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wvMed5q9Q08jbYhp_E38IBogZSQ.roa
Signing time:             Fri 01 Sep 2023 10:16:19 +0000
ROA not before:           Fri 01 Sep 2023 10:16:19 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24163
IP address blocks:        49.158.152.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 10:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7847 (0x1ea7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:16:19 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C2F31E779ABD434F236D8869FC4DFC201A206524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:64:29:78:8e:48:42:99:9a:78:72:d3:76:69:
                    c1:6c:cc:e7:67:5d:73:a9:c4:ab:b5:e9:c7:aa:19:
                    03:2b:70:c4:34:56:f5:2f:7b:f4:16:70:43:69:0e:
                    26:96:ca:32:f6:97:39:dd:bd:bc:e0:7c:ef:ab:6f:
                    78:e2:1e:64:bf:b1:1f:57:e1:58:cf:be:5b:eb:65:
                    9b:3b:ef:fe:9e:9b:7f:b9:7f:ec:9a:2a:74:83:84:
                    09:dd:a1:05:b8:b9:d5:0b:24:da:78:6e:54:f4:1a:
                    14:99:54:7a:2d:9e:87:a1:e2:25:76:47:58:d2:ed:
                    9b:ba:52:9f:1b:0a:e0:58:90:5d:7f:4b:e3:db:51:
                    a5:16:b8:8b:8a:e4:4e:44:63:be:fa:66:4c:b9:d7:
                    41:17:30:52:b4:51:86:af:80:74:2e:c3:e3:7a:cb:
                    06:07:d8:3b:65:6a:a0:0e:89:19:e9:28:a2:14:70:
                    7f:81:00:77:2f:35:d0:06:3d:92:86:5e:c4:2b:9d:
                    c0:81:43:2e:2f:2e:16:e4:de:2a:07:f0:0c:52:34:
                    63:8a:89:a3:36:51:38:4c:7a:fb:96:a1:34:1d:43:
                    30:df:a1:7b:31:35:9e:eb:09:d3:12:19:39:45:94:
                    61:33:1e:4b:1d:f4:c7:cf:0b:95:c3:c1:06:00:24:
                    9b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F3:1E:77:9A:BD:43:4F:23:6D:88:69:FC:4D:FC:20:1A:20:65:24
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wvMed5q9Q08jbYhp_E38IBogZSQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:c4:eb:bd:62:9d:eb:34:88:73:8a:09:92:c3:50:90:40:c5:
         42:6c:ab:ea:40:6b:3a:12:ef:0e:d0:d1:d3:95:2d:b0:c8:a6:
         ed:62:42:31:41:bc:fb:72:03:6d:3b:2d:5a:84:80:8f:44:b5:
         24:a3:5f:ac:18:9c:36:1a:42:9e:c3:19:b2:94:91:1e:99:10:
         03:2b:7c:09:5f:fa:fc:3c:41:26:04:cd:07:e1:ec:ca:40:62:
         f0:e3:71:e4:62:87:73:b5:10:cc:72:be:06:78:a2:32:b1:ce:
         01:37:f5:85:5c:8a:36:11:30:ae:57:26:61:52:a3:10:06:79:
         b3:a3:75:67:4e:f6:d9:9e:92:27:07:e6:9f:27:25:da:60:98:
         55:0e:66:d6:9b:a3:c6:2b:43:23:9f:9e:f6:4f:d6:79:01:98:
         45:b0:56:54:95:5f:50:b7:3c:c2:72:55:fa:b2:dd:37:cd:27:
         d3:27:5e:04:f2:55:88:02:30:b1:ac:bb:06:78:f8:fb:dd:cc:
         db:e1:ae:52:b8:71:37:8a:e7:58:71:d4:27:f9:2b:90:15:93:
         e4:62:a1:6e:65:d3:d9:b7:1d:10:36:05:72:1f:23:07:68:c2:
         f3:a6:aa:80:09:75:9b:6d:19:32:5e:31:96:57:86:66:be:28:
         47:07:1c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 13:13:50 2024 by rpki-client on console-fra.rpki-client.org