Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OIRrwzunVXkRAccplQkSN2paQU.roa
File:                     6OIRrwzunVXkRAccplQkSN2paQU.roa (raw, json)
Hash identifier:          rx/PXwEu3wonXbQ20+epGf2ainTMQUAABiSHXHCzWUk=
Subject key identifier:   E8:E2:11:AF:0C:EE:9D:55:E4:44:07:1C:A6:54:24:48:DD:A9:69:05
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E44
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OIRrwzunVXkRAccplQkSN2paQU.roa
Signing time:             Fri 01 Sep 2023 10:15:50 +0000
ROA not before:           Fri 01 Sep 2023 10:15:50 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        180.218.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7748 (0x1e44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:50 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E8E211AF0CEE9D55E444071CA6542448DDA96905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:0e:8b:c6:83:a8:14:cd:2e:3e:b9:f2:29:
                    af:09:bd:dd:ec:a4:fb:76:f0:f2:9f:15:ac:db:94:
                    6a:51:6c:56:e4:0e:32:bb:3d:a9:41:98:5c:bc:9a:
                    6a:4b:29:ac:bc:b2:00:b6:44:72:0d:b3:12:0c:d0:
                    be:cb:ec:e9:69:a0:6c:87:42:0b:74:e6:e8:cb:9e:
                    9c:7f:4e:16:e5:e4:23:53:b9:40:6a:76:15:5f:00:
                    14:63:30:97:5b:4f:91:fe:28:f8:65:e7:2f:c2:e9:
                    6d:0e:ce:39:c8:5d:e4:6a:2b:0e:70:69:a7:8b:77:
                    20:d2:be:2b:04:a0:84:a9:6b:83:42:e7:20:7c:d0:
                    2d:a7:4d:f2:db:dc:8a:11:8e:69:d3:d3:91:a2:bf:
                    c0:37:b9:2f:c6:54:f5:69:cd:4a:d2:5e:8b:5a:b7:
                    95:31:d8:be:ec:0b:58:21:b5:ac:ad:a7:4f:e1:d3:
                    36:86:9e:b4:a9:88:00:17:0f:36:49:20:b9:41:b1:
                    e5:c8:c3:e4:91:b1:3a:24:9f:89:33:df:55:31:e1:
                    bb:05:f8:7d:05:4f:f8:4a:7a:a5:f3:04:d0:d9:a4:
                    93:65:ae:68:3d:53:ff:92:03:78:44:3d:a6:58:80:
                    77:e5:d6:81:74:a2:f3:db:0b:ee:0f:76:cc:c3:20:
                    39:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E2:11:AF:0C:EE:9D:55:E4:44:07:1C:A6:54:24:48:DD:A9:69:05
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OIRrwzunVXkRAccplQkSN2paQU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:45:16:d5:a1:1d:c3:b1:9b:1b:15:32:69:ee:fe:30:b5:c9:
         14:f0:30:00:67:6b:c7:ac:2c:14:23:16:a2:91:20:93:04:39:
         ff:f1:bd:a5:fe:b1:21:20:fc:4a:01:fb:b2:31:fc:89:6c:8e:
         17:24:14:cf:d4:97:53:df:de:3d:56:4b:f7:dd:7d:3c:91:83:
         68:be:a8:dd:70:e0:09:4e:c8:45:f8:95:8d:ae:21:cc:fd:b6:
         96:22:de:8b:34:6c:1f:c1:27:d8:0b:92:84:97:f0:f7:c6:fa:
         e5:27:04:9e:ff:fd:f1:15:f1:9d:04:5c:d9:14:cb:cb:4d:3b:
         e3:a0:f6:d9:31:ef:95:fe:20:d8:2f:c6:55:d6:ee:cb:b0:0d:
         da:19:e9:13:f6:bc:35:30:ab:47:2b:d4:77:c9:01:20:a4:6b:
         7c:c3:7d:00:29:0d:e1:b3:86:ec:4a:dd:28:1b:7a:56:41:b9:
         46:7b:83:c6:82:58:fa:28:00:ff:36:dc:ad:d9:16:a3:1a:2e:
         89:aa:60:83:ac:b7:f0:b3:2c:46:e1:f7:48:c4:6c:b2:24:8f:
         74:e7:75:bc:72:ae:1d:81:ce:88:cd:3b:4a:7f:99:b6:d3:e6:
         64:bf:77:be:a4:2e:8e:c2:0b:19:5e:da:e4:34:79:a2:01:a4:
         84:3a:34:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org