Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CvP_toG6m_L2-dHkn6q5zy4oM9s.roa
File:                     CvP_toG6m_L2-dHkn6q5zy4oM9s.roa (raw, json)
Hash identifier:          G785UTWfx43zHIeIh1Qc6jCeh1zwmFqX8HZEF6SXNYw=
Subject key identifier:   0A:F3:FF:B6:81:BA:9B:F2:F6:F9:D1:E4:9F:AA:B9:CF:2E:28:33:DB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2287
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CvP_toG6m_L2-dHkn6q5zy4oM9s.roa
Signing time:             Mon 26 Aug 2024 05:34:06 +0000
ROA not before:           Mon 26 Aug 2024 05:34:06 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8839 (0x2287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:34:06 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0AF3FFB681BA9BF2F6F9D1E49FAAB9CF2E2833DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:ff:a4:99:ed:fa:fa:1e:10:1e:e7:cc:59:
                    0b:a8:5b:d7:10:2c:02:5b:7e:f1:37:00:8e:39:21:
                    f7:7a:7c:ef:43:01:33:c6:d2:2f:6e:2d:ec:51:b5:
                    b2:a4:4f:e7:2e:44:93:cf:74:9e:c3:8a:91:a3:16:
                    02:26:27:d8:fe:5b:50:b9:49:0f:85:a9:1c:a5:ec:
                    63:b0:08:43:d3:f3:cf:bc:b1:29:d0:ee:02:47:4a:
                    3b:06:92:d6:95:75:ea:88:e5:91:5f:aa:ab:dd:3a:
                    28:33:3c:d1:b5:8d:ce:de:e7:fb:ca:c9:f7:35:06:
                    2b:63:62:76:62:5d:b7:6b:26:a3:44:65:f9:c2:54:
                    df:7c:4d:31:b5:8f:91:63:e8:a1:3f:6b:69:0a:6c:
                    3f:6a:73:25:51:70:c0:f3:ef:4e:a7:f7:06:7c:9b:
                    cc:05:b1:3d:50:7d:f2:fa:a1:56:e3:45:b3:e5:72:
                    23:69:32:8a:7b:74:e5:2e:39:21:ae:1b:25:7f:ae:
                    0d:9f:b7:21:4b:90:e0:32:8c:4f:6a:34:01:f5:0d:
                    1e:17:36:57:34:7f:7d:51:0e:ee:8a:b9:e3:db:98:
                    bc:b6:50:3c:31:4b:ec:ce:87:26:d2:7b:ef:3e:ff:
                    85:b6:5b:f5:2c:3c:01:fe:98:10:1d:84:73:90:8b:
                    24:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F3:FF:B6:81:BA:9B:F2:F6:F9:D1:E4:9F:AA:B9:CF:2E:28:33:DB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CvP_toG6m_L2-dHkn6q5zy4oM9s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:15:44:4c:06:88:8c:8a:87:36:69:18:42:6c:83:7b:b8:84:
         7e:aa:29:c4:24:3a:18:90:ec:0c:cf:c1:17:7f:99:76:cf:ea:
         54:bd:ed:e5:a1:ee:4b:8c:59:f3:1e:64:c7:ba:7d:bf:ba:c3:
         59:bd:76:e2:fa:81:f1:f9:11:a5:f7:ca:d1:e4:76:8e:ae:75:
         b1:73:1a:b8:25:5b:6c:ed:6f:a3:aa:28:b6:e1:06:46:4f:9e:
         86:7f:c3:f8:2d:69:f3:a2:6d:9e:3f:8b:cd:37:29:36:4c:57:
         c8:e1:f5:8e:24:6e:04:6b:5f:ee:58:fe:6f:40:46:25:d0:70:
         83:01:b3:98:e1:a1:71:b0:9d:ca:7b:c5:42:54:14:2e:4c:3e:
         76:7f:89:c3:58:2c:79:49:75:9c:93:2e:8d:24:35:5d:2b:28:
         70:6c:7f:48:b8:62:2e:70:ae:cc:d0:8f:c8:cd:3d:da:a0:d3:
         ab:59:0b:d8:2c:ac:15:63:80:78:d5:a6:a9:49:0d:00:7a:ea:
         af:c6:50:72:7c:2b:c9:a4:57:c6:13:05:07:98:d1:85:db:e9:
         32:7e:1b:b5:6b:11:c7:b9:d5:a4:44:c0:ab:f0:cb:9c:87:8f:
         33:70:a9:5b:23:e3:77:1e:18:ff:c7:db:30:ae:42:d8:96:95:
         95:f7:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:13:18 2024 by rpki-client on console-fra.rpki-client.org