Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FmUylf_YOFoUzBoE13ypbaw8-O4.roa
File:                     FmUylf_YOFoUzBoE13ypbaw8-O4.roa (raw, json)
Hash identifier:          XWfqdILGpeH0ua+OdHlEohmyziaYEga2pJq+dY6wWyQ=
Subject key identifier:   16:65:32:95:FF:D8:38:5A:14:CC:1A:04:D7:7C:A9:6D:AC:3C:F8:EE
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       221D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FmUylf_YOFoUzBoE13ypbaw8-O4.roa
Signing time:             Mon 26 Aug 2024 05:33:41 +0000
ROA not before:           Mon 26 Aug 2024 05:33:41 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        49.158.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8733 (0x221d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:41 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=16653295FFD8385A14CC1A04D77CA96DAC3CF8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a7:5d:67:d2:c6:77:bb:51:10:59:a0:50:74:
                    6d:f0:6e:f4:37:4d:2f:b2:0e:a4:d5:e4:d1:66:53:
                    63:51:86:00:47:ac:6d:bb:bc:23:c5:6d:d0:32:fc:
                    e9:5d:48:75:b1:d0:ba:b0:c3:63:89:62:51:c2:6d:
                    8a:02:a5:e8:6d:2e:2d:5e:50:05:2b:54:cd:ce:63:
                    8f:60:2c:87:35:39:11:d9:fa:f1:bb:61:f1:08:f7:
                    f8:5f:82:e1:c2:e7:37:d1:72:30:2b:07:50:ef:88:
                    ae:1d:91:61:25:1d:bb:c5:6f:34:4b:ff:94:42:61:
                    85:74:98:80:96:8e:7a:13:37:12:c4:d9:61:c8:2a:
                    98:e6:d6:67:33:84:27:b9:60:54:ea:04:46:1a:5c:
                    44:ad:fa:e9:6e:2a:1f:4c:2d:e4:9d:28:eb:2e:15:
                    2d:28:b9:3d:c0:d7:27:6f:44:43:c6:d6:4c:59:bd:
                    2b:99:5c:bc:3a:e3:58:e1:fa:eb:97:f5:c5:cd:2d:
                    16:67:d9:12:e2:44:80:59:f7:ad:48:1a:3f:00:23:
                    0a:26:0d:a0:70:8e:03:9d:ca:11:c3:b5:1b:ef:4a:
                    c1:91:f4:8b:ff:f5:fd:69:4b:c6:8c:89:87:14:4a:
                    f3:63:a8:e0:ce:ce:e5:27:7b:21:ee:c1:0f:0f:fd:
                    0b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:65:32:95:FF:D8:38:5A:14:CC:1A:04:D7:7C:A9:6D:AC:3C:F8:EE
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FmUylf_YOFoUzBoE13ypbaw8-O4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:74:5b:45:99:54:2a:76:31:34:d0:5b:dd:69:5f:97:22:ce:
         64:09:a7:05:ab:82:52:0f:2c:64:96:87:72:ff:c0:de:9f:35:
         b7:51:d4:11:bb:0c:d9:ee:52:1a:38:f1:dd:98:92:75:36:64:
         c6:79:1e:b4:27:6e:0a:ca:b9:de:97:dd:b7:38:a8:8b:8d:0c:
         5e:57:44:d4:12:0d:aa:1d:f0:c8:45:68:23:e5:3a:04:4f:a1:
         f8:c6:7c:2b:b5:dc:63:cd:bd:e4:3b:34:bd:68:c6:b1:16:97:
         ad:f6:04:12:73:2d:53:ab:d3:e5:5d:c1:44:89:0d:d7:99:1e:
         75:70:f8:44:1b:39:85:a7:42:dd:f4:a1:b4:ae:23:65:a9:28:
         91:3f:7b:b1:90:fa:e9:a1:09:76:c8:92:7f:8a:be:e3:70:a2:
         19:00:ce:f3:3c:75:49:12:87:0a:86:c4:4a:2c:14:5b:fa:f5:
         f4:ea:4c:1f:20:5a:c6:af:1f:9c:6a:a4:d2:80:c1:0b:1d:ac:
         9e:ca:17:4e:b0:d7:40:11:23:77:4f:d4:6d:70:3a:85:81:24:
         e6:97:78:2c:d9:2a:28:52:c7:88:88:4b:d9:f5:83:f6:fa:64:
         87:f2:cb:ae:77:cb:77:6b:05:3a:29:43:f7:52:44:f2:1d:5a:
         d3:0d:46:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org