Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ln4P-c6x-e7gIb3tg_zteI1ryss.roa
File:                     Ln4P-c6x-e7gIb3tg_zteI1ryss.roa (raw, json)
Hash identifier:          CloSwVodeU9wml7aXS1kTlNWxUUPeOLnaY4EUS4q7Qw=
Subject key identifier:   2E:7E:0F:F9:CE:B1:F9:EE:E0:21:BD:ED:83:FC:ED:78:8D:6B:CA:CB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       21C5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ln4P-c6x-e7gIb3tg_zteI1ryss.roa
Signing time:             Mon 26 Aug 2024 05:33:20 +0000
ROA not before:           Mon 26 Aug 2024 05:33:20 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24163
IP address blocks:        61.56.160.0/19 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8645 (0x21c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:20 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=2E7E0FF9CEB1F9EEE021BDED83FCED788D6BCACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:43:62:ec:b3:50:9e:9d:9c:40:56:f7:73:5b:
                    8b:2a:a7:b5:07:ce:09:5e:c3:63:b6:cd:3a:9d:fe:
                    c5:0e:9d:5d:58:52:46:0e:1e:7b:86:29:99:1a:21:
                    2a:50:98:05:a6:77:69:44:cf:0d:99:97:f2:1f:2b:
                    88:c9:e4:33:ea:10:38:f4:dc:b7:5a:d1:94:5c:7c:
                    ac:0e:08:62:55:a2:8e:cd:51:a3:ae:c9:5c:8d:a4:
                    be:9d:05:db:eb:a5:ae:3b:03:18:93:ea:b4:26:5a:
                    69:f4:ab:56:c0:f8:a1:f2:c8:fd:0f:e9:04:8a:6d:
                    40:9f:72:ea:97:0b:40:42:77:ab:ea:b0:2c:fb:bf:
                    f4:c8:df:82:64:d6:e9:f2:8a:9c:fe:fc:db:ff:47:
                    8c:0b:3b:57:14:d8:03:10:ca:3f:ec:91:6f:0d:23:
                    d4:3e:a6:79:9e:33:21:91:fd:d2:5e:0c:8d:73:6e:
                    b7:67:92:55:34:f4:e2:0a:b5:fd:75:a2:19:96:db:
                    7a:6b:e2:27:9b:25:e1:04:3b:29:ef:d1:58:80:40:
                    88:76:e0:22:d7:b3:36:07:6a:51:cb:dc:3c:33:1c:
                    90:c3:51:5e:eb:61:73:02:45:67:de:8a:99:68:b1:
                    71:c1:01:86:2b:9a:19:60:69:0c:73:cb:9f:69:31:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7E:0F:F9:CE:B1:F9:EE:E0:21:BD:ED:83:FC:ED:78:8D:6B:CA:CB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ln4P-c6x-e7gIb3tg_zteI1ryss.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:72:25:1a:a1:5d:b9:d3:9e:b4:f3:c7:75:f2:e6:f2:16:d8:
         c7:30:8e:1e:a3:34:39:69:7e:80:4d:11:83:be:bb:97:87:8b:
         bc:b4:6c:b4:90:a7:d9:12:e5:e9:af:28:50:d8:1c:30:13:7c:
         4c:73:88:a6:57:ae:26:8d:33:4a:d1:b9:6c:6d:70:4d:a8:90:
         d2:1c:99:08:47:3f:e5:4f:34:7d:4a:a0:bf:90:51:c1:bf:d1:
         69:85:07:08:cc:3c:e3:b5:08:de:68:21:d9:35:d6:77:a8:7b:
         d2:52:ae:47:4e:2e:b4:8c:6f:0b:ff:cd:57:4e:79:b8:59:ea:
         69:6d:f8:9f:c2:39:b6:d7:7a:ab:29:e1:56:3a:25:90:fe:07:
         2c:40:4e:00:27:70:3d:ae:c1:00:28:78:1d:7d:d1:b3:6e:71:
         0b:bd:79:f2:84:60:4e:10:0e:c8:e4:be:ce:fa:fd:db:e5:03:
         0e:85:3d:47:f2:4f:34:d7:40:40:f5:a8:6e:6a:2e:c4:ca:1d:
         80:e9:7c:a1:fd:83:cf:0c:84:ba:39:b9:1d:f1:81:ce:69:40:
         30:24:bb:a9:19:84:47:95:48:c7:27:74:5c:e2:69:87:b1:01:
         d3:f9:79:a5:65:29:85:97:15:0c:54:8e:30:6e:09:37:f4:a6:
         c5:a4:43:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:55 2024 by rpki-client on console-fra.rpki-client.org