Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AgcCTWdqgLrfXP2C323RTdipIn4.roa
File:                     AgcCTWdqgLrfXP2C323RTdipIn4.roa (raw, json)
Hash identifier:          mL2HXuulS7u4JBp7JN0RyxZv0pl/QPvrKz86kSgqx7M=
Subject key identifier:   02:07:02:4D:67:6A:80:BA:DF:5C:FD:82:DF:6D:D1:4D:D8:A9:22:7E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       22AC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AgcCTWdqgLrfXP2C323RTdipIn4.roa
Signing time:             Mon 26 Aug 2024 05:34:14 +0000
ROA not before:           Mon 26 Aug 2024 05:34:14 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.160.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8876 (0x22ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:34:14 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0207024D676A80BADF5CFD82DF6DD14DD8A9227E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:93:d4:56:92:91:dd:ca:9c:ab:50:16:53:
                    4b:51:74:b2:29:cc:af:7e:fb:dd:7b:ee:bc:3f:8e:
                    9c:02:88:7d:91:b9:ab:33:52:63:d1:ce:6e:3a:2f:
                    b3:8c:63:48:62:74:d1:ad:3c:89:d0:a3:ed:42:77:
                    84:d2:30:3e:15:d2:66:76:fb:49:63:f7:2c:31:a1:
                    3a:d8:a3:ed:94:b2:72:b6:26:ea:17:c4:d9:bb:3b:
                    f7:f8:a2:4c:cb:ba:1b:b1:7a:01:29:e7:bc:27:c3:
                    5d:70:cb:af:5c:b6:28:17:52:fa:bd:32:f1:89:e0:
                    92:9a:81:da:87:f2:31:09:c0:52:bc:d3:ae:47:df:
                    3e:a3:7f:5c:0c:33:26:4f:d0:a1:83:fc:e1:e4:21:
                    14:98:e7:7d:83:3e:a6:97:d5:e8:59:72:d0:fb:3e:
                    82:36:62:d6:5b:fe:fe:78:4c:15:85:29:87:23:4e:
                    0b:f1:df:d5:5e:4c:a2:21:45:08:34:c6:c1:bd:3a:
                    66:dd:1d:e4:6b:a8:36:a8:5d:46:ff:1a:70:fa:a7:
                    26:6f:ed:86:ca:e2:68:15:94:2f:1c:f0:57:c8:28:
                    d5:82:97:26:12:a8:22:4e:96:b2:74:14:9a:74:17:
                    a8:10:3f:1e:eb:62:58:1b:62:fb:1c:d4:94:0c:9e:
                    fa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:07:02:4D:67:6A:80:BA:DF:5C:FD:82:DF:6D:D1:4D:D8:A9:22:7E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AgcCTWdqgLrfXP2C323RTdipIn4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:00:b6:9c:44:1b:15:b2:75:70:a5:cd:0b:4a:f9:cf:63:42:
         bc:b6:07:9f:e2:bd:d9:07:7b:48:f6:a1:a4:10:1c:e7:c2:1a:
         c8:75:28:4e:21:e6:d1:99:24:77:a7:22:8e:9b:35:08:dd:8a:
         87:fd:03:3f:ac:a0:5e:0d:30:c6:b2:ee:92:dd:a7:57:6e:57:
         8c:90:86:0d:b1:39:c6:ad:bf:dd:4c:ae:70:21:a1:0d:89:4d:
         7d:1b:c6:3e:5e:5c:54:3f:03:b7:91:3f:01:0c:12:5a:c4:d9:
         15:bd:40:8d:36:13:f9:20:09:ca:05:ef:d7:33:d9:68:e2:bd:
         74:b9:9a:49:ea:cc:43:01:fc:0a:0f:d1:2c:42:5c:88:f0:22:
         50:e3:6a:01:30:66:57:ac:e9:be:f0:c4:05:69:19:81:ec:82:
         90:e0:55:93:3d:4c:af:32:e8:61:aa:0a:45:74:4f:08:82:46:
         1a:21:03:56:9d:6c:db:ee:f5:5b:5d:b2:a8:e1:d0:86:0d:fe:
         7c:30:85:a8:96:6c:f1:c7:e0:be:8c:5b:ea:69:e4:58:39:1b:
         fd:e2:35:50:e7:c6:f2:2f:b2:a7:f3:08:6a:78:cb:72:d3:74:
         58:b2:82:fd:26:65:98:ba:ba:1e:3b:01:89:7c:bb:4d:e3:20:
         17:7a:98:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:54 2024 by rpki-client on console-fra.rpki-client.org