Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JuEs7pS-Rs9dASsOIyOa2x2jZyI.roa
File:                     JuEs7pS-Rs9dASsOIyOa2x2jZyI.roa (raw, json)
Hash identifier:          rI1eu+xkebsemtao0U7PIXXlQYF7h+mxsKJOm6prfaI=
Subject key identifier:   26:E1:2C:EE:94:BE:46:CF:5D:01:2B:0E:23:23:9A:DB:1D:A3:67:22
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2222
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JuEs7pS-Rs9dASsOIyOa2x2jZyI.roa
Signing time:             Mon 26 Aug 2024 05:33:43 +0000
ROA not before:           Mon 26 Aug 2024 05:33:43 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        123.0.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8738 (0x2222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:43 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=26E12CEE94BE46CF5D012B0E23239ADB1DA36722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:40:1f:f1:9f:d3:45:84:50:06:63:79:9f:
                    86:83:89:96:7c:c0:97:73:66:e6:07:77:36:44:77:
                    5a:f9:20:71:b1:34:72:0e:b4:ea:a6:1e:bf:8f:ac:
                    aa:ce:35:58:3e:bf:fe:f1:39:ce:7f:07:98:d8:1f:
                    86:50:d1:e9:8e:af:46:a7:fb:a0:15:ca:4a:10:4c:
                    5c:b3:7d:7c:b9:42:fc:9b:16:06:1f:3a:33:27:51:
                    88:ed:e3:3f:a5:3c:08:8a:e4:e3:b8:b3:67:91:e2:
                    d7:62:60:6a:04:19:05:71:02:d6:c6:3c:c8:a1:47:
                    07:1b:51:64:28:a9:e3:5c:c8:8a:bf:1a:8a:83:a0:
                    c0:9d:c7:c8:a7:61:6c:5a:d7:93:71:1c:c7:36:92:
                    5f:fe:56:56:a0:53:66:71:b5:68:49:6b:1e:b3:c1:
                    5f:a2:c8:0f:02:bc:6e:d2:f4:70:70:1d:7c:32:44:
                    fd:4f:26:91:03:81:50:49:c8:e5:0f:66:69:a3:0e:
                    df:9c:e6:ce:c7:94:53:09:6f:2f:c3:91:2c:b4:9a:
                    fa:dc:45:ed:81:a4:46:04:59:f3:9b:13:80:30:d8:
                    70:9f:ad:a4:78:bd:ea:bf:02:f7:6c:3b:d3:dd:75:
                    ec:dc:53:4b:ee:2d:2a:3d:d4:cc:68:91:4d:4d:26:
                    69:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E1:2C:EE:94:BE:46:CF:5D:01:2B:0E:23:23:9A:DB:1D:A3:67:22
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JuEs7pS-Rs9dASsOIyOa2x2jZyI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:0e:95:ed:7e:9c:28:66:7c:e9:be:08:bd:d8:52:39:94:c8:
         09:57:c6:f2:94:59:d6:50:31:04:a8:ef:74:69:7e:29:cd:2b:
         2f:0f:97:d5:bc:84:08:2b:39:aa:38:8d:cf:77:c6:b3:75:df:
         1e:98:2b:00:c9:d5:fa:35:88:a1:68:1b:38:fd:31:67:18:eb:
         f2:63:b4:00:e9:f0:ab:ae:0b:c8:0b:5d:f8:6f:e6:aa:70:1a:
         b2:b5:12:e5:cc:ab:a3:44:5b:90:9b:07:ee:6c:ea:8c:42:eb:
         7f:3b:f4:5a:18:b6:73:b6:b2:82:d1:45:46:00:b3:c2:06:d3:
         1c:1d:29:e6:6a:c6:ad:e2:65:94:40:35:95:25:80:6c:aa:f8:
         54:ed:9a:f0:27:f7:3f:d2:d1:06:a2:a9:2d:74:29:6d:42:4f:
         8b:38:6f:7d:ed:57:11:ec:3d:da:10:5f:56:46:ca:1b:54:e9:
         4c:77:f7:01:72:ad:ac:02:4e:c2:24:6a:c2:e7:3c:0a:97:d3:
         d6:44:58:57:6a:8c:57:1d:40:e7:be:cf:7e:fc:7b:84:c4:58:
         c8:38:b4:cc:43:60:59:e4:1c:09:47:cf:8d:5b:75:ec:5a:a8:
         fa:06:45:91:c3:59:5f:a7:d3:56:29:74:f8:06:a2:cd:d6:20:
         39:f7:e7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org