Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B18581EmyaJmnb0aon_47FnSoJU.roa
File:                     B18581EmyaJmnb0aon_47FnSoJU.roa (raw, json)
Hash identifier:          /nzBi7MGZXp2euTZugk8RWySjroLOvMKSQ81VoyCDmU=
Subject key identifier:   07:5F:39:F3:51:26:C9:A2:66:9D:BD:1A:A2:7F:F8:EC:59:D2:A0:95
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DD7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B18581EmyaJmnb0aon_47FnSoJU.roa
Signing time:             Fri 01 Sep 2023 10:15:22 +0000
ROA not before:           Fri 01 Sep 2023 10:15:22 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        180.218.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7639 (0x1dd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:22 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=075F39F35126C9A2669DBD1AA27FF8EC59D2A095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:bc:c0:28:58:02:dc:2c:85:17:e6:b6:8f:
                    86:c3:ab:5f:d4:d0:d6:e7:24:c5:ca:53:d0:f5:3a:
                    9c:f3:a0:5d:4a:37:5c:c7:c8:21:95:61:67:d8:99:
                    9a:34:49:37:22:62:14:08:c5:41:07:98:41:82:fd:
                    51:77:33:7f:c3:c1:c8:f2:7a:d0:aa:cd:c6:d5:aa:
                    42:36:9b:50:74:95:8b:fb:e8:1e:4a:7f:6f:98:37:
                    88:4c:fb:e6:bc:eb:56:0d:fe:d0:14:da:2b:30:35:
                    3d:17:e5:36:15:45:5c:68:35:da:e9:86:83:0a:3f:
                    18:fb:46:cd:85:c1:e2:8b:76:0a:4c:78:6b:c7:08:
                    be:39:ec:3c:7a:6a:b8:f3:52:04:70:23:8a:53:60:
                    44:78:29:eb:af:be:10:5e:15:7a:0b:bf:06:1d:dc:
                    9d:b8:9f:9c:65:5f:f6:7b:89:a8:45:68:4f:fa:43:
                    8d:c7:a4:20:78:2f:bf:3f:3d:0a:6d:e7:c3:e9:4f:
                    70:7c:bb:0a:aa:a0:57:af:e6:0d:06:92:b3:ac:7a:
                    5d:33:bf:66:f8:fc:85:ca:6e:5a:d5:72:4b:cb:b5:
                    3a:d0:ea:b8:aa:f3:db:58:91:a8:4a:a0:82:94:c7:
                    ce:17:22:c5:92:70:df:8d:8b:0b:a6:ea:b2:8f:60:
                    f2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5F:39:F3:51:26:C9:A2:66:9D:BD:1A:A2:7F:F8:EC:59:D2:A0:95
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B18581EmyaJmnb0aon_47FnSoJU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:21:83:84:4a:47:66:32:45:6b:ae:80:93:2f:20:71:1e:c7:
         96:f5:3e:a3:12:51:1a:1a:83:3c:96:60:d6:2e:3f:d7:b3:62:
         88:e1:12:95:60:36:67:ef:d2:45:3d:5a:85:df:27:c4:71:58:
         66:02:14:07:f9:29:41:46:97:5f:74:59:72:c1:54:fa:7e:11:
         a9:ef:30:9e:61:dd:bf:79:9e:1e:ab:42:cb:5a:a7:75:aa:72:
         b9:76:2f:d5:eb:cb:6a:da:b6:ac:be:89:a4:52:1b:b7:be:3b:
         9c:37:fb:ac:0b:4a:49:86:49:04:95:2c:46:d3:59:92:74:b0:
         42:d5:7b:61:fa:4b:1b:56:98:42:56:02:a0:e9:80:50:73:a0:
         31:20:85:b6:62:63:57:51:64:57:bc:46:a2:6b:91:0f:0a:b6:
         3b:6f:bc:e2:79:2d:04:56:62:70:20:2e:90:75:d5:cb:e9:18:
         8d:74:7c:72:76:a3:d5:01:e5:b4:26:f7:55:21:e3:b1:87:a7:
         01:d2:bc:fe:04:f2:c5:56:03:e9:75:d5:c5:d9:b9:b7:76:ba:
         25:78:9d:81:91:c7:3c:1c:0c:f2:61:3d:6a:a6:5a:bd:14:73:
         6d:1d:35:28:e9:b1:63:7c:0e:f8:2e:c2:0d:40:3d:c3:75:69:
         2f:7a:44:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org