Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-u9Vezn5l2N9RRGH3OEzptjZ7gk.roa
File:                     -u9Vezn5l2N9RRGH3OEzptjZ7gk.roa (raw, json)
Hash identifier:          3+ttScCKeEhAEUcybyIdycwfkeu2MrhATGkUcyH1t3A=
Subject key identifier:   FA:EF:55:7B:39:F9:97:63:7D:45:11:87:DC:E1:33:A6:D8:D9:EE:09
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2288
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-u9Vezn5l2N9RRGH3OEzptjZ7gk.roa
Signing time:             Mon 26 Aug 2024 05:34:06 +0000
ROA not before:           Mon 26 Aug 2024 05:34:06 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        124.6.0.0/19 maxlen: 20

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8840 (0x2288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:34:06 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=FAEF557B39F997637D451187DCE133A6D8D9EE09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:93:2f:8d:36:08:8f:82:ef:2b:dc:ca:91:4b:
                    1c:c3:5f:6c:69:ef:3a:96:63:1b:04:3e:20:c0:b7:
                    9d:c4:2f:f3:e2:1d:53:ee:a7:cd:9c:76:6d:4f:6a:
                    e2:ef:03:c9:9e:9e:6b:98:a5:3c:58:6a:53:82:bd:
                    bc:f9:79:ce:19:ff:fe:af:77:f5:8a:4e:a5:27:80:
                    3c:cd:9e:b1:b8:c2:58:d3:e7:c4:3a:a5:65:3c:e8:
                    97:1c:12:b8:6e:7d:99:ec:cf:91:c2:0e:0f:7f:b8:
                    d5:1f:75:4e:41:0a:a6:e5:35:2f:77:6d:2c:ba:b4:
                    e0:22:5b:84:48:20:48:b5:ff:28:c1:17:ff:5e:df:
                    7f:06:58:cb:6d:1d:f1:f6:30:19:7a:0b:b8:9e:58:
                    3c:f6:4e:76:9c:14:35:a2:d4:62:4a:65:65:90:76:
                    33:7a:8c:eb:c1:13:54:96:90:98:31:b1:cb:84:e5:
                    19:ed:8c:9e:72:28:79:6f:e8:e4:4f:7c:63:1e:64:
                    6e:84:3b:9a:12:29:97:10:22:79:d7:ba:88:d1:61:
                    18:04:57:71:51:e8:35:2e:b7:76:ba:51:29:00:92:
                    20:b4:d0:6b:a4:81:5d:11:ef:b8:ff:2a:c0:cf:fb:
                    21:5b:89:3d:4e:b0:64:b6:d4:31:04:76:eb:72:91:
                    77:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EF:55:7B:39:F9:97:63:7D:45:11:87:DC:E1:33:A6:D8:D9:EE:09
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-u9Vezn5l2N9RRGH3OEzptjZ7gk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:97:77:2b:11:70:fb:a2:16:69:39:ff:1e:0d:a2:f1:b2:4c:
         ad:80:12:8c:b2:b5:74:96:6f:51:64:ec:83:69:89:ee:be:56:
         90:e6:67:87:6c:97:26:5a:a6:c7:92:17:fe:65:31:c1:51:59:
         8e:2b:85:fc:66:00:6d:f0:68:1c:a0:c5:91:26:26:cd:64:1a:
         36:bf:6d:c0:24:06:11:da:22:86:ad:90:48:03:51:d2:5e:41:
         68:31:c2:fd:51:f7:df:e5:2b:eb:28:2b:ef:ed:92:1a:7a:f7:
         2f:45:51:a6:1f:e4:ec:35:fc:24:13:16:08:e2:97:24:9f:54:
         87:21:06:8a:e0:5e:42:5a:bd:14:17:3f:34:f1:e5:f1:43:99:
         f9:51:08:e4:6c:a3:5c:cb:18:56:bc:7b:dc:d2:8f:9e:25:12:
         61:d6:5c:7f:4c:7e:a0:6e:c8:67:2d:8c:8b:49:ad:05:31:e1:
         40:69:3a:93:09:0e:3d:88:4a:b9:e7:bc:f6:5a:96:69:ac:7d:
         25:dc:b5:de:c1:19:19:50:df:ea:8f:f7:7c:07:12:bb:68:c9:
         39:0f:84:8a:94:c1:30:30:c0:0d:63:84:35:1b:b9:7e:06:59:
         72:b1:d6:ae:dd:1e:9d:c6:21:b5:06:dd:39:28:27:99:5e:a3:
         af:e9:6e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:24 2024 by rpki-client on console-ams.rpki-client.org