Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6ScBrscfknunckMIxwfkMFPolKc.roa
File:                     6ScBrscfknunckMIxwfkMFPolKc.roa (raw, json)
Hash identifier:          b82Hmhb40QImT1a5Qhe6D1upKJUI8Feiv00Q9WF6CQM=
Subject key identifier:   E9:27:01:AE:C7:1F:92:7B:A7:72:43:08:C7:07:E4:30:53:E8:94:A7
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E02
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6ScBrscfknunckMIxwfkMFPolKc.roa
Signing time:             Fri 01 Sep 2023 10:15:34 +0000
ROA not before:           Fri 01 Sep 2023 10:15:34 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        123.0.32.0/19 maxlen: 20

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7682 (0x1e02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:34 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E92701AEC71F927BA7724308C707E43053E894A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:38:51:ed:58:15:d6:4f:b7:fa:5b:4e:fb:f4:
                    7a:49:ec:82:4d:6a:d5:f1:51:32:4e:fe:4a:70:d7:
                    f6:c0:9c:da:2a:c6:a2:85:07:ec:c6:31:88:cd:a8:
                    42:33:da:a7:e3:4f:c5:01:57:48:f1:bd:eb:30:94:
                    15:e3:b1:c3:62:02:0e:1a:ab:af:41:65:12:37:66:
                    da:64:8d:d9:e9:b7:f7:0c:1a:f9:28:41:3e:66:39:
                    86:30:a7:24:8e:91:2e:65:f2:7c:51:37:0d:02:98:
                    9c:46:a4:b8:db:e3:16:63:f4:be:3f:33:ea:f6:60:
                    64:98:22:76:d1:6f:67:57:96:d0:8b:e1:d1:31:bb:
                    fd:40:3a:11:5e:11:05:fe:6d:f7:a6:de:b9:8d:08:
                    64:2b:70:02:8a:23:fe:d9:54:56:98:b4:72:f0:03:
                    d2:9b:04:2c:31:76:15:2e:ce:00:ea:fc:e2:20:24:
                    01:91:52:3d:8d:cc:bf:07:2a:27:65:f8:2d:cd:9f:
                    65:04:f6:dd:17:3d:39:a0:1a:8c:1e:8c:50:b2:76:
                    cb:6a:fc:9f:6e:14:3d:00:bf:d5:3e:96:91:bf:43:
                    65:ad:5f:b7:73:72:15:d7:a0:a0:43:36:e1:91:e3:
                    6b:9c:95:04:c2:a7:84:93:bd:07:24:dc:31:eb:5b:
                    34:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:27:01:AE:C7:1F:92:7B:A7:72:43:08:C7:07:E4:30:53:E8:94:A7
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6ScBrscfknunckMIxwfkMFPolKc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:6a:e8:b1:33:58:c9:5a:e6:9d:47:22:09:53:3d:a9:aa:49:
         59:19:37:5c:30:4d:fc:fd:a1:45:81:41:95:2f:18:5f:99:ad:
         af:6b:3a:e5:4b:f5:ef:dd:5c:ad:91:d8:f0:73:00:04:2a:13:
         4d:a8:d5:98:af:9a:88:3b:dd:e6:b3:e8:f8:fb:94:c1:5d:b1:
         f1:2b:1a:9c:2a:c6:d7:a4:08:3e:a7:9a:75:da:db:15:88:1b:
         ce:bc:08:ef:ea:c5:da:96:a8:e0:d2:7b:77:7a:7d:7c:8e:ad:
         17:dc:1d:7d:6d:3f:50:3f:02:33:8b:f1:40:55:3a:ed:04:a1:
         53:f3:ad:1e:86:4a:21:6e:08:b5:09:e0:f4:7a:bf:63:12:8f:
         bb:d7:ef:69:08:93:65:1a:89:54:82:46:9a:af:c7:13:ac:32:
         bd:5d:bb:66:a8:1f:9e:80:f5:48:d2:bd:1c:ff:26:39:2a:69:
         ee:17:e6:a0:c1:cf:3d:40:40:c7:79:da:df:f0:cf:31:6f:b6:
         eb:ed:ce:54:90:ce:30:7d:30:14:8e:fb:0a:7d:bb:86:9e:ce:
         48:c1:4f:2d:56:d3:72:cd:7b:4b:1e:19:a4:e0:8e:52:2f:57:
         54:49:02:0f:e1:b1:c9:c5:5a:88:9c:a5:c0:56:25:aa:9b:39:
         88:a8:df:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org