Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FQVP6bkIfJoN9bEBVtNbsTBxLWw.roa
File:                     FQVP6bkIfJoN9bEBVtNbsTBxLWw.roa (raw, json)
Hash identifier:          afS7FrM3wVHHCcA0YerqWvStXzYtxDQnhHqJYL91ZQM=
Subject key identifier:   15:05:4F:E9:B9:08:7C:9A:0D:F5:B1:01:56:D3:5B:B1:30:71:2D:6C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E76
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FQVP6bkIfJoN9bEBVtNbsTBxLWw.roa
Signing time:             Fri 01 Sep 2023 10:16:05 +0000
ROA not before:           Fri 01 Sep 2023 10:16:05 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        49.158.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7798 (0x1e76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:16:05 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=15054FE9B9087C9A0DF5B10156D35BB130712D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:1e:16:fc:85:cb:e1:5d:c1:6f:0b:a1:98:
                    96:5d:5d:01:e5:82:57:10:fd:77:46:54:9c:b7:cd:
                    b1:c8:9f:dd:25:a4:ae:56:60:7e:b5:d5:e4:f3:ff:
                    3b:f8:cd:1b:f8:f5:d1:97:a1:41:c1:f3:a4:d8:b3:
                    0a:1e:6e:ff:1c:22:86:c0:d3:13:20:da:8b:78:a1:
                    92:9b:65:7b:0b:4f:a7:20:fb:e8:ee:b9:51:23:94:
                    cc:50:af:e7:e1:85:ef:47:80:91:8c:74:02:81:d1:
                    7f:a8:01:b1:d3:a6:4e:2d:3b:b3:1a:03:9d:90:27:
                    0e:4b:85:a6:10:2d:b1:ec:88:74:44:c3:28:9b:32:
                    03:03:cc:25:7b:2d:3d:e8:94:bb:64:47:98:fa:71:
                    8e:72:36:1f:90:d7:e7:3c:7a:58:cc:33:fe:83:b8:
                    1d:8c:35:79:cd:94:f1:a6:62:c8:30:e7:0c:53:34:
                    7c:0e:a2:29:15:d0:bd:ee:42:62:50:6c:36:b8:f4:
                    89:f1:67:23:0b:0a:cf:86:ae:2e:0b:8c:26:1c:39:
                    3c:36:27:9e:85:df:18:73:c6:8f:06:da:97:62:70:
                    d0:5f:26:73:7f:58:fa:09:ba:0a:8a:ec:4b:09:b8:
                    ec:c9:c5:70:3e:a1:12:be:bd:cc:08:ab:93:15:1b:
                    0a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:05:4F:E9:B9:08:7C:9A:0D:F5:B1:01:56:D3:5B:B1:30:71:2D:6C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FQVP6bkIfJoN9bEBVtNbsTBxLWw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:18:55:82:f1:b0:17:a8:31:51:00:dc:10:06:35:15:cd:76:
         ed:99:98:b7:d8:e4:11:23:75:4b:29:52:f9:0c:17:28:bb:f4:
         7b:77:fc:0e:fd:5b:b2:8b:57:c3:88:e3:8a:b1:cb:59:67:59:
         d7:55:c8:93:83:91:21:91:7c:38:d9:2d:0d:09:0e:7c:e5:66:
         0f:a1:39:f9:83:ca:94:40:90:6e:cb:54:e5:9e:04:69:b0:a6:
         f7:da:05:54:c7:dc:fb:42:a1:59:8f:03:89:34:f8:e8:d3:37:
         d1:7f:25:09:ad:5f:e6:da:ad:1e:45:ef:c0:2a:aa:5d:9b:76:
         bf:5d:9b:b0:73:2e:4f:83:02:de:ac:c3:15:6e:fe:85:bc:41:
         f4:e7:ab:1d:11:07:b7:86:49:e8:f0:38:5c:e7:ac:2b:5a:9a:
         5b:e3:20:ed:d5:4f:0c:66:66:36:ec:b1:ba:8e:d4:70:6d:8e:
         96:70:de:c6:03:0b:ed:5d:6d:de:5a:72:7a:96:3f:db:8a:22:
         25:0a:20:cb:9e:f1:cf:77:9b:fb:c2:a7:fb:03:d7:66:36:7b:
         88:15:48:8d:87:00:9a:d5:e9:78:d5:9c:82:34:53:b7:43:28:
         32:38:e4:45:03:d8:fc:9a:99:cb:de:f9:9a:ae:e8:f2:ad:f1:
         e0:af:37:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:22:02 2024 by rpki-client on console-ams.rpki-client.org