Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7rdKypCEKbElgyJxytplzIGl-pM.roa
File:                     7rdKypCEKbElgyJxytplzIGl-pM.roa (raw, json)
Hash identifier:          8LO84mBv28rRtNtoKsdQiHXKh/I/3jxi5ktfugDVwD8=
Subject key identifier:   EE:B7:4A:CA:90:84:29:B1:25:83:22:71:CA:DA:65:CC:81:A5:FA:93
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E31
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7rdKypCEKbElgyJxytplzIGl-pM.roa
Signing time:             Fri 01 Sep 2023 10:15:47 +0000
ROA not before:           Fri 01 Sep 2023 10:15:46 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24163
IP address blocks:        61.56.160.0/20 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7729 (0x1e31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:46 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=EEB74ACA908429B125832271CADA65CC81A5FA93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:94:e7:06:00:0e:8d:86:93:92:33:26:be:
                    54:cd:62:c6:f6:e2:e8:19:3b:97:35:9b:53:2c:8c:
                    67:7a:ff:ce:c2:16:d0:c8:23:a9:74:86:f3:68:1b:
                    13:f8:b4:05:8d:e5:22:23:52:ea:28:ea:20:5d:09:
                    00:22:8c:f3:d9:ce:35:c9:16:50:22:58:32:fe:05:
                    74:b9:38:e9:f8:5b:2c:18:f8:eb:c6:2f:7a:91:ae:
                    10:ea:81:de:bc:f9:1b:72:82:11:b9:1e:d0:1b:22:
                    9f:67:7a:4f:b7:02:04:d1:26:00:f2:27:34:a5:fd:
                    53:84:bc:50:6d:2a:3f:3b:8a:98:a4:b9:84:ac:d1:
                    37:c6:33:02:07:18:6a:dc:3f:ef:38:a0:ac:fc:af:
                    d7:63:f0:b1:dc:e3:d5:68:2c:a4:23:ea:c7:76:c6:
                    e0:4f:72:4a:31:7a:00:14:a8:0b:b3:c5:62:6d:a6:
                    ea:17:19:5e:90:fb:3c:42:24:d2:19:67:38:e6:2f:
                    b0:76:4b:bd:7a:e6:b2:9c:be:13:29:fb:f2:97:8d:
                    44:f4:13:75:0f:35:aa:24:1e:44:93:fc:61:5d:94:
                    4d:e5:b1:b3:94:d0:20:39:aa:ec:16:14:1f:74:60:
                    1f:42:12:25:dc:4e:e8:4f:bf:ad:a3:b5:6b:42:3e:
                    76:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B7:4A:CA:90:84:29:B1:25:83:22:71:CA:DA:65:CC:81:A5:FA:93
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7rdKypCEKbElgyJxytplzIGl-pM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:c5:5e:34:65:d5:c0:d3:09:4b:e7:31:6b:b7:fb:fe:de:1c:
         8e:e0:2a:d1:ab:cc:a2:b8:6c:1b:9b:a9:d6:41:b1:ba:66:50:
         d1:bb:77:46:3b:7c:6e:f7:cb:71:7b:e2:2e:68:dd:fb:b3:92:
         04:44:df:fd:db:62:64:d5:e4:b6:fc:ae:79:3f:47:67:f3:e6:
         66:38:c1:fc:c3:7d:3d:8a:9d:8c:40:96:e7:91:dd:39:e5:1b:
         08:29:47:7b:03:27:9c:c7:09:86:5d:b4:6c:c5:7b:56:77:4f:
         3f:1c:5f:fc:0f:22:19:3d:29:aa:23:fb:b3:aa:05:30:46:de:
         65:79:0e:b3:0c:82:22:4b:e3:5a:e1:17:67:20:78:ce:e9:94:
         eb:28:60:62:cf:78:1f:ea:ed:e7:1d:60:51:e3:50:2b:8a:42:
         64:b1:42:09:0b:14:df:81:4f:f7:dc:f4:2d:39:39:57:bc:9f:
         3a:c0:c2:54:7e:f1:4a:e4:3d:c0:a1:41:1d:a7:b3:9f:16:43:
         6d:6b:29:ee:6d:f2:55:8a:29:61:32:46:17:fd:20:15:5a:7a:
         8d:08:45:52:0d:81:a1:3f:f7:1e:eb:10:4f:e9:a7:e5:59:b1:
         b9:b8:2a:62:51:e9:3d:c9:4a:fd:8b:02:59:09:3a:78:a1:7e:
         11:e6:20:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org