Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DV2G7Iabljx-hvh_G_pMrE9jU00.roa
File:                     DV2G7Iabljx-hvh_G_pMrE9jU00.roa (raw, json)
Hash identifier:          ez+lgUCpdIJO0tyieZoZdDsFK/A8erjnUW3rszyvRiI=
Subject key identifier:   0D:5D:86:EC:86:9B:96:3C:7E:86:F8:7F:1B:FA:4C:AC:4F:63:53:4D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       227A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DV2G7Iabljx-hvh_G_pMrE9jU00.roa
Signing time:             Mon 26 Aug 2024 05:34:02 +0000
ROA not before:           Mon 26 Aug 2024 05:34:02 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     4662
IP address blocks:        61.58.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8826 (0x227a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:34:02 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0D5D86EC869B963C7E86F87F1BFA4CAC4F63534D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:dc:13:80:f6:ff:a8:94:12:67:6e:f5:23:
                    e2:f0:1a:ba:da:0e:bb:2a:cb:03:30:6e:5e:30:07:
                    be:f2:2c:93:28:1c:70:28:26:95:01:bc:6e:01:8c:
                    04:65:bf:aa:92:92:7e:d0:cd:ca:57:fe:6d:fd:a3:
                    7f:9f:24:b4:24:8c:2c:14:53:1a:15:4b:3d:b6:4d:
                    33:d9:26:c7:2d:2a:45:7d:4a:87:52:7e:88:a9:b0:
                    eb:89:42:f6:0a:76:35:7c:fd:bb:3d:30:ed:e7:38:
                    d9:36:28:ae:93:fb:e1:3b:4c:93:01:e9:db:1c:76:
                    8c:2c:15:59:9d:e4:eb:73:ba:fb:10:64:e7:d4:65:
                    85:45:46:e7:a7:f4:88:5b:77:99:f3:81:0b:d6:cf:
                    8b:c3:9f:53:61:66:d0:46:cf:5b:3c:f7:b4:32:e3:
                    3c:e3:94:7d:04:93:4c:42:37:05:29:59:e9:1f:22:
                    23:b1:44:d4:ec:d6:60:52:6d:7b:2a:e5:6f:24:5c:
                    39:48:3b:8b:a5:c5:76:a7:67:ed:cf:20:82:2d:f2:
                    89:81:3c:07:1a:07:d3:29:de:d8:bb:00:25:73:2c:
                    b9:5f:7a:a2:09:12:70:39:2b:0a:23:64:3c:e4:ca:
                    bb:08:6f:74:44:4c:c7:4d:14:da:3a:cb:6e:e2:7b:
                    7a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5D:86:EC:86:9B:96:3C:7E:86:F8:7F:1B:FA:4C:AC:4F:63:53:4D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DV2G7Iabljx-hvh_G_pMrE9jU00.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:0a:00:88:aa:d9:96:9f:cc:35:62:9c:a5:4a:9d:18:94:fa:
         ab:82:07:a3:83:36:73:c5:12:6f:dc:ef:fd:46:ed:bc:39:a8:
         c9:c0:4c:52:6d:94:56:d0:ba:4e:ea:64:66:87:3a:95:b2:c6:
         bc:d6:28:43:d5:cb:9a:a6:81:0e:bf:57:f2:70:1e:b0:c1:08:
         fe:62:84:03:94:26:78:78:9d:a1:5c:32:69:af:bb:64:04:b5:
         11:c4:9e:0f:94:f3:a3:25:e8:b7:dd:da:e7:dc:f5:39:eb:58:
         dd:c6:af:2a:f1:7a:a5:8f:52:85:80:9c:71:3f:02:7b:b7:2f:
         b6:8b:8c:69:56:f7:91:29:31:6a:36:61:e1:5c:cd:f3:45:ba:
         43:fd:c1:a9:4e:fb:e1:06:18:fa:18:8a:94:65:67:c4:69:72:
         31:4c:39:35:e9:a1:9d:e6:64:e1:53:7c:01:ab:27:57:d4:1c:
         96:0d:dd:ed:60:8f:61:a6:19:5c:93:76:6c:37:0e:3a:e6:fe:
         9d:82:d8:83:0c:3e:0b:b0:94:10:15:6c:b1:f1:3c:b9:63:36:
         9a:8e:d5:6e:a0:5c:e2:aa:cd:33:bb:9b:20:9d:3f:9f:a2:b7:
         a7:88:99:e1:b3:37:04:c7:8e:9e:cc:8c:8b:0d:26:91:c2:c4:
         04:a5:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org