Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8H_mfpbcQlURBEAvn5DBE2dMke0.roa
File:                     8H_mfpbcQlURBEAvn5DBE2dMke0.roa (raw, json)
Hash identifier:          tnFkdtL2JFPUnV0LVWKImjrQmbPjgQmrOL1xcZ0x3Gw=
Subject key identifier:   F0:7F:E6:7E:96:DC:42:55:11:04:40:2F:9F:90:C1:13:67:4C:91:ED
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       222A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8H_mfpbcQlURBEAvn5DBE2dMke0.roa
Signing time:             Mon 26 Aug 2024 05:33:45 +0000
ROA not before:           Mon 26 Aug 2024 05:33:45 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24163
IP address blocks:        180.218.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 00:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8746 (0x222a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:45 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F07FE67E96DC42551104402F9F90C113674C91ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d1:fe:02:67:2c:8f:a5:a6:a7:84:64:b6:43:
                    08:79:0e:44:55:bb:17:e1:13:2a:14:76:34:bd:36:
                    57:a8:3e:f7:89:62:5f:06:3a:4c:ef:1e:70:ee:63:
                    11:06:9a:59:38:50:77:ce:10:f5:00:3b:df:26:3e:
                    4f:c4:92:b3:ff:7c:0f:ba:b6:a4:f1:95:04:eb:79:
                    fa:0d:38:e9:26:89:dd:60:51:4d:10:22:17:49:88:
                    10:5d:9a:d0:25:12:98:23:fb:ea:93:4e:91:6c:42:
                    d5:e8:98:69:0a:12:6d:f2:85:e0:6c:92:ce:d8:c4:
                    4f:de:58:00:67:14:38:58:f6:f7:fb:9e:14:87:b8:
                    69:bd:27:69:07:08:d5:49:c6:36:34:10:65:36:8c:
                    ab:ee:02:eb:60:91:09:4e:78:a2:f1:7c:78:5f:d3:
                    a1:5c:fb:c7:b5:c1:07:6b:46:92:c8:f5:45:e4:e7:
                    67:7c:a7:38:f0:0a:14:f3:5a:b5:ea:8d:2b:1a:06:
                    aa:50:6a:15:b1:d8:ec:30:8b:57:80:cf:88:44:1b:
                    16:3f:b2:ee:63:1a:c0:8d:67:0d:88:f0:8b:78:4f:
                    78:50:a0:df:1f:6a:dc:ff:83:a9:fd:2e:8c:e7:7c:
                    8d:e0:2c:0b:cf:ce:75:95:66:14:f9:9d:4a:08:b2:
                    68:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7F:E6:7E:96:DC:42:55:11:04:40:2F:9F:90:C1:13:67:4C:91:ED
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8H_mfpbcQlURBEAvn5DBE2dMke0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:f4:06:5a:9b:e0:d2:1e:8d:11:1c:eb:8c:31:ff:c9:c9:8f:
         ed:15:dd:8d:9c:6e:91:af:a9:28:2b:ff:f3:b1:fc:ea:2e:ae:
         43:1c:40:50:67:39:7d:85:b6:91:2d:71:5b:f9:1f:74:47:50:
         3a:e6:ad:ec:16:ee:30:4e:a4:13:2a:a0:b0:3b:ad:c7:89:89:
         30:d7:76:91:1c:6f:3f:8e:d1:07:0a:b3:91:fe:69:3c:f7:01:
         1d:b4:07:e2:28:6d:6c:de:fe:43:d9:c7:3f:f0:ba:59:63:22:
         c5:6b:e2:de:d4:04:de:92:0b:41:43:05:7c:c8:cf:29:b6:72:
         04:8b:bc:c1:9c:7f:a9:25:6d:d6:f8:04:72:ce:af:85:b8:51:
         56:4b:f0:57:2f:72:a3:a0:94:e6:b1:6b:a5:f8:0b:ce:fa:f1:
         62:7f:bf:da:11:77:73:22:91:67:52:df:a3:ae:cb:6f:01:a1:
         f5:0a:f9:68:e0:b1:41:d3:c4:3b:30:34:bf:74:55:60:c1:7d:
         50:9b:2e:10:5b:75:b1:29:29:f6:c7:18:15:8f:db:ed:65:86:
         67:45:28:66:32:5e:94:f9:4e:85:b6:4c:24:82:cb:ef:dd:2c:
         71:7c:10:41:36:f3:f1:52:44:fb:e6:e1:ce:ec:bb:3e:a4:b5:
         a1:63:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:56:44 2024 by rpki-client on console-fra.rpki-client.org