Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CCAnwPaSLZMDtDwDSoBSpZnfYYA.roa
File:                     CCAnwPaSLZMDtDwDSoBSpZnfYYA.roa (raw, json)
Hash identifier:          7jt3rkL90QRTJsggnGgS5VJ7lEGhAx8yonpQ492I0Fo=
Subject key identifier:   08:20:27:C0:F6:92:2D:93:03:B4:3C:03:4A:80:52:A5:99:DF:61:80
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DD8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CCAnwPaSLZMDtDwDSoBSpZnfYYA.roa
Signing time:             Fri 01 Sep 2023 10:15:22 +0000
ROA not before:           Fri 01 Sep 2023 10:15:22 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        180.218.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7640 (0x1dd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:22 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=082027C0F6922D9303B43C034A8052A599DF6180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:19:92:66:80:48:8d:33:97:7c:d8:6c:73:26:
                    14:5b:f7:64:14:eb:2b:de:bc:ef:64:e9:e5:80:f7:
                    b6:53:81:f2:6f:2b:65:48:41:95:a5:71:16:e2:89:
                    2f:cc:a3:4c:87:8b:12:55:ac:c4:61:5c:32:6e:0c:
                    6b:18:1a:83:d4:76:c5:7c:e5:e6:dc:83:bb:b8:34:
                    b4:11:4c:a0:3c:4c:ad:11:d1:1f:39:c3:ac:77:27:
                    8b:2c:a5:d1:09:d1:2b:4f:75:fb:1b:e5:cf:95:8c:
                    56:d5:ee:a6:3a:61:3a:b2:24:ee:84:9b:9d:b5:17:
                    d5:2b:b6:33:6e:9e:0d:91:62:68:fb:ee:ed:de:3d:
                    f2:1b:70:1d:44:6b:9f:fa:ff:2a:6a:a3:ee:9d:1e:
                    2c:d3:52:1d:d8:41:12:ee:0b:11:1b:54:d8:bc:1c:
                    c9:c9:7f:09:ab:b7:d2:c3:ae:87:f8:f3:a0:a7:b0:
                    e7:f0:90:fb:99:b9:95:51:bf:2c:d2:8c:bd:8a:cc:
                    f3:7b:69:02:62:8f:62:1f:c7:57:9e:c0:ad:6e:5c:
                    aa:79:35:a0:40:61:d5:46:b3:3e:ce:3a:90:d4:42:
                    46:4a:29:01:d6:84:15:74:2c:d7:8b:57:6b:22:59:
                    91:0a:03:5a:1a:9a:41:2d:08:47:86:09:48:ce:7e:
                    84:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:20:27:C0:F6:92:2D:93:03:B4:3C:03:4A:80:52:A5:99:DF:61:80
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CCAnwPaSLZMDtDwDSoBSpZnfYYA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:6a:d1:20:b2:f7:8c:a8:f2:13:a6:49:7c:71:88:09:3b:16:
         d4:3b:fc:7f:0e:81:6a:37:cc:96:e1:44:89:83:0e:5e:d7:7d:
         1e:3c:1d:fd:2b:af:99:8b:3c:a2:4c:e7:05:92:35:df:14:80:
         d9:1f:f9:aa:69:aa:2b:2b:93:3f:1e:9c:b7:18:27:9a:e1:db:
         9b:85:db:ea:1d:f5:a5:45:54:8e:a1:72:bc:5e:74:80:4c:71:
         ae:02:51:91:68:0e:bf:a2:82:3b:0e:65:da:13:24:41:00:74:
         e1:cd:9e:73:d1:f4:16:c0:2a:92:ba:1c:cd:d5:4b:5e:4f:63:
         76:fc:50:b5:05:23:00:66:e1:fa:7e:91:3b:6d:0f:d6:cf:e3:
         5a:68:18:72:23:ee:b3:74:f6:6a:58:7e:b3:41:f4:3f:37:5e:
         d9:f0:04:72:c4:f4:79:67:19:ac:4f:9d:b7:b5:d0:9d:52:5d:
         82:7a:15:0e:e3:4f:8a:5f:46:fe:af:38:65:5b:a9:0b:19:16:
         a5:9e:5a:0d:ff:cb:68:f1:64:42:46:3e:7e:96:da:ad:24:39:
         c2:80:ac:74:66:5d:f6:c3:a1:fb:e5:39:9d:59:7c:a2:9a:16:
         83:32:c7:eb:40:12:ab:18:b0:23:a8:f2:6b:10:30:05:2b:c3:
         fc:f2:e9:d7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA4MjAyN0MwRjY5MjJE
OTMwM0I0M0MwMzRBODA1MkE1OTlERjYxODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVGZJmgEiNM5d82GxzJhRb92QU6yvevO9k6eWA97ZTgfJvK2VI
QZWlcRbiiS/Mo0yHixJVrMRhXDJuDGsYGoPUdsV85ebcg7u4NLQRTKA8TK0R0R85
w6x3J4sspdEJ0StPdfsb5c+VjFbV7qY6YTqyJO6Em521F9UrtjNung2RYmj77u3e
PfIbcB1Ea5/6/ypqo+6dHizTUh3YQRLuCxEbVNi8HMnJfwmrt9LDrof486CnsOfw
kPuZuZVRvyzSjL2KzPN7aQJij2Ifx1eewK1uXKp5NaBAYdVGsz7OOpDUQkZKKQHW
hBV0LNeLV2siWZEKA1oamkEtCEeGCUjOfoTbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUCCAnwPaSLZMDtDwDSoBSpZnfYYAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0NDQW53UGFTTFpNRHREd0RT
b0JTcFpuZllZQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2ocwDQYJKoZIhvcNAQELBQADggEBACxq0SCy94yo8hOmSXxxiAk7FtQ7/H8OgWo3
zJbhRImDDl7XfR48Hf0rr5mLPKJM5wWSNd8UgNkf+appqisrkz8enLcYJ5rh25uF
2+od9aVFVI6hcrxedIBMca4CUZFoDr+igjsOZdoTJEEAdOHNnnPR9BbAKpK6HM3V
S15PY3b8ULUFIwBm4fp+kTttD9bP41poGHIj7rN09mpYfrNB9D83XtnwBHLE9Hln
GaxPnbe10J1SXYJ6FQ7jT4pfRv6vOGVbqQsZFqWeWg3/y2jxZEJGPn6W2q0kOcKA
rHRmXfbDofvlOZ1ZfKKaFoMyx+tAEqsYsCOo8msQMAUrw/zy6dc=
-----END CERTIFICATE-----
Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org