Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PG79UvXs4ERk5DKkpVDrSMcHpfs.roa
File:                     PG79UvXs4ERk5DKkpVDrSMcHpfs.roa (raw, json)
Hash identifier:          1InqljaJRKvEObD/Rqu6TZJjWw0P6dYadLOnJ10/7LY=
Subject key identifier:   3C:6E:FD:52:F5:EC:E0:44:64:E4:32:A4:A5:50:EB:48:C7:07:A5:FB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E54
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PG79UvXs4ERk5DKkpVDrSMcHpfs.roa
Signing time:             Fri 01 Sep 2023 10:15:54 +0000
ROA not before:           Fri 01 Sep 2023 10:15:53 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        49.159.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7764 (0x1e54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:53 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=3C6EFD52F5ECE04464E432A4A550EB48C707A5FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:7f:67:c3:73:a8:cd:6b:1d:6c:f0:52:f8:
                    9e:6e:13:57:94:cc:98:53:9e:b5:f0:61:55:1a:94:
                    b2:8b:78:60:1f:c0:9e:eb:21:b8:85:04:45:2b:a7:
                    12:ef:ea:b0:e8:24:0e:0e:ff:f6:4e:1b:92:92:c9:
                    28:fe:ee:b8:29:b3:e7:8f:56:3b:e4:a9:d9:fc:55:
                    9f:94:01:dd:b7:02:a9:05:f6:53:e6:57:6b:f0:46:
                    e7:34:48:26:ad:4f:39:f2:58:63:81:37:d6:e5:c3:
                    64:a4:a5:cf:12:18:6d:fa:71:d8:1d:69:21:c3:fe:
                    97:5f:d8:9b:f1:72:1f:f9:fe:f2:a2:a7:e9:31:df:
                    1a:7d:33:54:24:d3:5e:b0:f7:01:e3:07:e0:ff:c4:
                    c6:7f:7d:52:a4:15:f5:10:f3:90:75:4a:3f:0d:42:
                    d3:33:48:7c:46:69:37:8c:54:7e:4f:18:4b:24:4c:
                    bd:b1:70:e6:a6:64:08:95:97:a2:6a:fb:87:f0:24:
                    8c:03:6e:ef:0c:d7:28:87:d5:4d:11:81:af:89:3c:
                    6d:b5:1d:35:7b:67:63:4e:c8:a7:17:9d:81:92:76:
                    3b:dc:9d:03:de:bf:cf:d7:88:1b:f2:c2:a1:19:e0:
                    8b:d2:86:bb:fa:fc:cb:63:bf:0f:78:ee:28:82:8b:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6E:FD:52:F5:EC:E0:44:64:E4:32:A4:A5:50:EB:48:C7:07:A5:FB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PG79UvXs4ERk5DKkpVDrSMcHpfs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:a1:db:ac:45:4e:58:87:e4:31:e6:ff:5c:c6:1e:ac:88:fd:
         4f:d3:5b:25:a8:66:5d:04:19:6f:8c:ff:12:e7:94:74:31:54:
         79:0b:8a:b0:66:21:73:dd:bc:cd:f5:4d:c7:30:8a:4e:99:53:
         c7:18:ec:73:ee:c9:b2:6d:b1:86:00:69:ea:d0:84:2e:c9:8e:
         12:80:2d:37:59:3f:b6:f9:46:6c:87:56:d5:a6:49:6c:88:fc:
         fa:38:c4:84:88:d6:70:b4:5c:12:d7:01:6c:46:1a:8c:fc:cc:
         53:b1:0b:a0:5a:fa:f4:9d:7a:b1:cd:fa:a5:1a:37:87:c3:be:
         e8:b3:65:db:0a:02:68:eb:35:fe:2c:a2:04:d4:c3:a1:72:6d:
         b4:ab:42:c4:1d:57:8f:20:7e:ff:5e:e5:52:21:16:90:8a:5a:
         91:49:d0:42:d3:9c:c9:a2:c5:e8:b0:f7:4a:30:f8:23:32:73:
         8d:c3:88:0e:c0:00:78:63:c7:db:93:6e:cc:d6:11:41:6e:bb:
         c9:15:70:7c:fd:bd:75:2e:49:cd:c0:14:30:d6:20:16:d1:0a:
         5e:2f:73:08:0b:03:6d:4f:de:5f:ee:86:61:23:f7:5a:da:20:
         5f:e7:5e:fc:66:62:b2:b7:08:e3:ee:02:56:1f:d4:c7:20:f6:
         22:43:22:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org