Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6woAxXhWw6JQ7za2_fBM_j-yyLM.roa
File:                     6woAxXhWw6JQ7za2_fBM_j-yyLM.roa (raw, json)
Hash identifier:          JuPpNP6yFPh5fQC0g6/AN3311EfiNM16IJEFYEKarj8=
Subject key identifier:   EB:0A:00:C5:78:56:C3:A2:50:EF:36:B6:FD:F0:4C:FE:3F:B2:C8:B3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       217D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6woAxXhWw6JQ7za2_fBM_j-yyLM.roa
Signing time:             Mon 26 Aug 2024 05:33:03 +0000
ROA not before:           Mon 26 Aug 2024 05:33:03 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        49.158.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8573 (0x217d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:03 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=EB0A00C57856C3A250EF36B6FDF04CFE3FB2C8B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8c:c7:2b:a3:91:a2:0e:ed:f5:11:4d:7e:b3:
                    93:15:8f:11:f3:62:b0:29:8a:c3:5e:08:0c:8c:a0:
                    a0:9c:f8:16:02:77:54:6a:70:ba:d4:00:24:6e:cf:
                    ae:31:7f:e7:14:6b:da:82:66:76:38:94:5a:3a:66:
                    1a:95:0b:b6:a3:ca:dd:2c:c6:ea:a3:e4:ea:2d:3c:
                    d2:6b:bf:84:ba:bf:b6:5c:49:ed:eb:9d:bb:04:3f:
                    08:f3:d5:58:40:6c:98:18:27:2a:96:9a:8a:98:ba:
                    40:a8:65:1a:1a:07:8b:bb:21:27:52:1a:f3:fb:40:
                    e3:86:61:4a:bb:10:19:60:b6:6d:fb:69:8c:14:9f:
                    9d:90:e4:de:97:54:64:69:2c:c4:48:d2:7c:eb:a1:
                    5d:99:8e:f5:41:29:92:b3:18:b9:ae:fd:5d:c9:46:
                    df:88:4a:19:d9:26:5c:fa:8b:c8:6b:cf:cd:ec:a5:
                    f4:1b:6a:35:36:78:bb:0f:01:be:f4:5e:dc:34:8f:
                    42:52:39:33:04:38:68:8e:82:f0:80:29:b9:f5:ce:
                    04:bf:bb:71:6a:b3:d9:78:2c:2c:7b:14:89:36:2e:
                    9b:12:61:e7:b3:24:29:c1:69:2e:52:59:dd:3c:69:
                    07:3b:01:54:42:8b:f8:4d:66:46:c0:01:b8:1d:38:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0A:00:C5:78:56:C3:A2:50:EF:36:B6:FD:F0:4C:FE:3F:B2:C8:B3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6woAxXhWw6JQ7za2_fBM_j-yyLM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:ff:a7:54:a5:fc:3e:b6:51:25:c1:b8:8e:12:28:5d:3e:65:
         fb:cf:b8:91:c8:73:eb:bb:59:4b:b2:07:2c:d6:5c:6c:ca:ed:
         3a:6b:67:40:4b:32:1d:ee:3f:1c:d0:08:33:08:db:91:36:f2:
         71:e6:da:8b:ba:1a:bb:db:40:ea:99:da:34:bf:73:5b:91:7a:
         d1:48:8b:06:fb:c6:a0:4f:bd:fe:f2:f4:81:0c:e9:6f:8d:1e:
         bc:bf:d4:3f:15:f8:b1:f1:80:43:40:ca:e9:03:dc:3d:f7:5e:
         c4:c8:57:66:13:d6:cb:67:2a:f3:58:af:4d:f1:3f:66:fd:62:
         42:40:78:e6:92:78:9a:a2:a3:95:69:49:fb:98:36:7e:0f:2a:
         d0:2f:61:80:b7:3d:30:06:2d:2f:c7:39:5e:f9:75:ec:8c:81:
         f3:83:3f:9c:24:1e:c8:89:1a:4e:c5:0f:89:48:83:7a:a4:a8:
         02:94:78:6c:c7:60:11:e0:00:cd:02:f2:66:52:5e:9a:68:dd:
         ab:12:cc:14:e4:38:ef:e0:7b:ce:a0:70:a0:71:35:4e:62:b2:
         78:07:23:dd:54:4f:12:58:2f:ca:a5:37:50:61:df:01:aa:fd:
         c5:62:12:0f:ad:dc:31:ef:e1:46:f8:ab:06:c5:81:7c:f9:9d:
         0f:d0:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:54 2024 by rpki-client on console-fra.rpki-client.org