Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IWqZ_RqgcReOTG-wtjzUItGseFo.roa
File:                     IWqZ_RqgcReOTG-wtjzUItGseFo.roa (raw, json)
Hash identifier:          yqOGboXRBFaomL/aa2FtKge2EdT3C99IBEgY8GRtK0M=
Subject key identifier:   21:6A:99:FD:1A:A0:71:17:8E:4C:6F:B0:B6:3C:D4:22:D1:AC:78:5A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2207
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IWqZ_RqgcReOTG-wtjzUItGseFo.roa
Signing time:             Mon 26 Aug 2024 05:33:35 +0000
ROA not before:           Mon 26 Aug 2024 05:33:35 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8711 (0x2207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:35 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=216A99FD1AA071178E4C6FB0B63CD422D1AC785A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:22:c8:71:77:59:23:7b:39:61:58:f1:29:
                    7c:d2:0b:de:a4:53:5a:99:8f:9b:54:aa:c0:35:30:
                    e3:68:9c:32:f2:aa:ab:6d:c4:2b:24:37:3d:41:9d:
                    46:e5:df:61:84:af:40:9a:a1:16:94:f7:a6:6a:14:
                    5e:4f:08:69:e4:e7:9b:78:32:90:34:01:bc:0e:c3:
                    f1:cf:c0:f9:c3:a9:1a:db:bd:28:26:0a:fb:26:31:
                    8c:eb:ce:85:76:58:5e:21:94:48:1a:04:a8:92:8f:
                    13:9a:93:e2:07:c4:80:a6:7a:fc:6f:90:27:86:c0:
                    e7:ef:6e:02:9e:5e:71:05:f5:61:7b:47:ef:e2:d8:
                    d9:86:d3:55:6c:bc:94:74:a2:94:88:f7:0c:b4:5e:
                    94:a5:38:ac:af:6a:24:83:ae:d8:70:ec:b3:9b:aa:
                    81:3f:84:03:51:a9:d9:ca:d1:99:0d:7f:d1:93:d0:
                    7f:08:06:3f:a9:0b:7c:3e:3e:f5:05:03:25:ff:3c:
                    2a:a6:42:bc:27:43:8e:5e:a3:10:8f:e2:75:e7:e5:
                    ea:6c:e3:5a:c9:27:39:ab:e0:2b:bd:42:3b:1a:ad:
                    ab:19:5a:90:cd:90:a2:02:a7:7f:a6:11:11:a9:15:
                    22:d6:98:f2:d5:11:9f:d8:62:97:04:7d:33:dc:ae:
                    df:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6A:99:FD:1A:A0:71:17:8E:4C:6F:B0:B6:3C:D4:22:D1:AC:78:5A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IWqZ_RqgcReOTG-wtjzUItGseFo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:53:01:5f:f3:00:12:10:21:61:a8:98:61:70:31:6d:d9:e2:
         5b:98:3e:77:36:4d:40:6a:95:b8:50:83:70:53:4a:c0:1a:30:
         ef:0a:af:27:45:bd:08:1d:a6:f7:a1:de:52:5a:0c:ed:88:23:
         a8:ec:fa:87:f6:d9:c1:71:a8:6b:ad:00:81:1c:00:eb:1f:0c:
         dd:01:f8:4f:73:77:a2:20:e0:49:1f:c9:cc:4e:1e:bc:fa:2f:
         eb:f9:73:59:1c:ce:43:2d:cb:f6:66:1f:24:2d:b6:f6:04:03:
         98:07:2e:49:22:29:8a:81:aa:2b:97:f8:3a:2e:f9:7f:02:80:
         5d:f3:d5:80:cd:04:68:7e:47:0b:aa:42:58:43:cd:25:4f:28:
         9a:35:8c:be:da:01:9c:58:e7:77:0a:d2:58:5f:39:ee:46:25:
         24:0f:ef:d7:3f:14:41:92:93:0c:41:16:db:f8:15:a5:fe:7c:
         b0:b9:24:f3:aa:41:6d:5c:40:a7:f9:16:3d:63:d6:7d:b7:fb:
         8d:2c:95:35:e4:d0:99:c2:2c:2f:a9:5e:8e:66:f7:42:ff:f7:
         b4:6d:1c:fc:7a:66:32:a1:a8:87:d2:e2:16:d6:50:71:93:5c:
         5e:ec:17:27:d0:51:61:74:3f:7c:b2:44:f6:3a:6a:3e:c7:cf:
         dc:3b:cf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:25 2024 by rpki-client on console-ams.rpki-client.org