Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/InLSAu2ZKUDJ8Zqz8nAQnkW-dbQ.roa
File:                     InLSAu2ZKUDJ8Zqz8nAQnkW-dbQ.roa (raw, json)
Hash identifier:          zimti8whDET+kWfGjFEbYsUW6kv2TL9whEJtRUV93wE=
Subject key identifier:   22:72:D2:02:ED:99:29:40:C9:F1:9A:B3:F2:70:10:9E:45:BE:75:B4
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1F2D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/InLSAu2ZKUDJ8Zqz8nAQnkW-dbQ.roa
Signing time:             Tue 30 Jan 2024 08:38:55 +0000
ROA not before:           Tue 30 Jan 2024 08:38:55 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        122.254.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7981 (0x1f2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 30 08:38:55 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=2272D202ED992940C9F19AB3F270109E45BE75B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:28:ab:fa:07:a5:b9:02:44:1d:44:55:08:
                    bc:eb:78:a8:04:3d:86:a2:e6:85:02:d3:87:74:4a:
                    d6:16:0d:ae:8f:cf:3d:65:f5:f8:8e:55:c7:a0:2a:
                    e7:4c:14:02:0e:69:f1:d3:73:f2:5c:e4:0e:51:c0:
                    de:08:2d:2c:a1:72:cc:9f:50:bf:93:91:2f:0c:c9:
                    c9:18:78:9b:00:23:e4:91:05:92:67:7b:c7:c0:e4:
                    1c:00:ad:4a:fb:b1:ee:45:7b:fd:c3:e7:af:9f:35:
                    e9:f8:d8:6e:cd:9d:f3:31:0a:82:7a:87:d5:2c:7d:
                    c5:ce:e5:73:60:73:5d:38:66:5b:a9:55:5d:90:2e:
                    8f:15:31:ea:90:c9:ba:ee:c1:3c:ec:6d:5d:31:c3:
                    f2:c0:8a:e6:02:60:a7:9f:57:cb:d2:d8:7f:54:ba:
                    58:3b:2e:4e:ec:ca:de:15:97:1a:b0:50:e8:84:72:
                    46:b9:74:ee:22:26:3f:a2:8c:ed:93:76:2d:0e:66:
                    1c:a2:05:f2:be:b3:bb:47:79:ad:ff:c3:37:27:44:
                    68:39:6a:bf:02:b5:16:8c:a9:f0:88:b2:ac:9a:c5:
                    78:7d:fa:af:ff:11:11:9a:b3:a4:07:a3:33:dc:69:
                    64:01:06:19:5d:7a:ac:d2:c5:30:9c:c3:55:c6:1a:
                    f8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:72:D2:02:ED:99:29:40:C9:F1:9A:B3:F2:70:10:9E:45:BE:75:B4
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/InLSAu2ZKUDJ8Zqz8nAQnkW-dbQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6b:f8:05:f0:6b:99:78:d3:bc:55:c8:d2:3c:11:03:da:65:0e:
         17:b8:d6:d5:a0:c5:78:46:2a:f5:83:9e:3d:9e:d2:9f:12:bb:
         3a:74:0f:db:85:a6:8a:70:22:98:d1:fb:ad:89:14:c2:40:58:
         69:73:dc:75:cb:76:81:e6:8c:30:4a:b7:eb:a4:82:67:0d:24:
         c9:34:50:98:53:a1:7c:70:84:8a:6a:87:73:9f:3e:a7:5d:fc:
         84:75:65:8e:3c:89:24:22:6a:cc:61:88:6b:84:0f:89:f5:e8:
         81:1e:17:92:42:01:48:49:1e:62:ef:27:80:04:b2:7e:d6:40:
         09:af:d5:47:7b:ba:8b:b5:47:c5:b7:46:b1:a0:71:ca:ee:ad:
         1a:b6:93:90:ac:8c:44:b8:47:59:87:08:ff:52:fc:e4:82:26:
         af:ef:e6:44:44:48:eb:73:33:a4:03:be:c8:71:91:a6:2e:0c:
         3c:a4:68:e2:03:a2:c8:33:20:f4:2d:30:e3:a1:9e:22:9e:ce:
         d4:8e:6f:64:45:a1:48:0d:ad:55:f3:30:66:f3:f4:74:ef:77:
         f1:6b:c1:a2:2d:f9:c9:42:55:79:d6:29:20:9c:6e:1c:8e:84:
         54:31:b6:07:16:ea:d8:1c:11:fd:cd:94:42:3e:65:46:ae:ec:
         8f:5a:c2:1d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHy0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDAxMzAw
ODM4NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIyNzJEMjAyRUQ5OTI5
NDBDOUYxOUFCM0YyNzAxMDlFNDVCRTc1QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtjCir+geluQJEHURVCLzreKgEPYai5oUC04d0StYWDa6Pzz1l
9fiOVcegKudMFAIOafHTc/Jc5A5RwN4ILSyhcsyfUL+TkS8MyckYeJsAI+SRBZJn
e8fA5BwArUr7se5Fe/3D56+fNen42G7NnfMxCoJ6h9UsfcXO5XNgc104ZlupVV2Q
Lo8VMeqQybruwTzsbV0xw/LAiuYCYKefV8vS2H9Uulg7Lk7syt4VlxqwUOiEcka5
dO4iJj+ijO2Tdi0OZhyiBfK+s7tHea3/wzcnRGg5ar8CtRaMqfCIsqyaxXh9+q//
ERGas6QHozPcaWQBBhldeqzSxTCcw1XGGvhfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUInLSAu2ZKUDJ8Zqz8nAQnkW+dbQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0luTFNBdTJaS1VESjhacXo4
bkFRbmtXLWRiUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6
/gAwDQYJKoZIhvcNAQELBQADggEBAGv4BfBrmXjTvFXI0jwRA9plDhe41tWgxXhG
KvWDnj2e0p8Suzp0D9uFpopwIpjR+62JFMJAWGlz3HXLdoHmjDBKt+ukgmcNJMk0
UJhToXxwhIpqh3OfPqdd/IR1ZY48iSQiasxhiGuED4n16IEeF5JCAUhJHmLvJ4AE
sn7WQAmv1Ud7uou1R8W3RrGgccrurRq2k5CsjES4R1mHCP9S/OSCJq/v5kRESOtz
M6QDvshxkaYuDDykaOIDosgzIPQtMOOhniKeztSOb2RFoUgNrVXzMGbz9HTvd/Fr
waIt+clCVXnWKSCcbhyOhFQxtgcW6tgcEf3NlEI+ZUau7I9awh0=
-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org