Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R1Fq9-0DJe40Pc-5QNzgzeugd2E.roa
File:                     R1Fq9-0DJe40Pc-5QNzgzeugd2E.roa (raw, json)
Hash identifier:          bnc5N1h/NXDejYqKtF5BeQLUGcIdiYGjLXgU4Nfik2s=
Subject key identifier:   47:51:6A:F7:ED:03:25:EE:34:3D:CF:B9:40:DC:E0:CD:EB:A0:77:61
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1D52
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R1Fq9-0DJe40Pc-5QNzgzeugd2E.roa
Signing time:             Fri 01 Sep 2023 10:14:40 +0000
ROA not before:           Fri 01 Sep 2023 10:14:40 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24163
IP address blocks:        123.0.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7506 (0x1d52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:14:40 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=47516AF7ED0325EE343DCFB940DCE0CDEBA07761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:4b:95:a9:7e:2a:2c:6d:00:3c:1f:cb:97:
                    01:0b:da:e4:b5:a5:a4:d8:46:26:20:bb:0c:89:f3:
                    f1:c9:c8:01:d2:73:8e:61:cc:5e:b1:de:df:32:72:
                    26:59:22:68:c2:9e:c7:ae:40:c1:1b:a6:46:dd:08:
                    84:11:e9:6d:3c:f2:e7:33:db:f0:d6:a2:5c:fe:0b:
                    41:30:97:2d:ae:81:cf:e3:26:a9:03:7d:d6:9e:28:
                    6d:0a:88:24:dc:fb:13:bb:91:e7:e4:2c:43:0f:45:
                    22:74:7f:a6:d9:c6:a3:db:a4:bb:6e:c9:dc:e2:cc:
                    69:c2:37:3c:aa:59:41:de:cc:2b:67:ca:c7:b5:90:
                    98:3e:34:90:c0:c8:08:52:10:dc:b5:06:4c:c5:8f:
                    2c:38:cb:ca:45:32:2a:e0:09:d2:fb:9b:e7:8c:df:
                    85:3f:d2:92:8e:8e:1d:22:cc:72:c5:49:53:e2:65:
                    3e:aa:da:90:a8:9b:74:34:ef:c9:a6:d6:ce:e7:1c:
                    aa:13:b6:3f:0a:52:57:36:97:5d:8d:e8:9a:f7:34:
                    28:68:b9:79:28:d0:a2:0e:b8:c5:3e:c0:55:c7:a5:
                    dd:92:2c:94:fa:6f:7c:d1:98:f2:f4:aa:83:89:14:
                    16:b1:db:af:2d:30:a8:5b:9f:59:13:c8:05:63:72:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:51:6A:F7:ED:03:25:EE:34:3D:CF:B9:40:DC:E0:CD:EB:A0:77:61
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/R1Fq9-0DJe40Pc-5QNzgzeugd2E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:d0:7b:8a:bc:8b:33:32:a9:10:8b:bf:98:cb:13:9b:9a:
         b3:6b:c8:46:3a:89:11:20:dd:c4:20:77:96:2b:a2:8d:60:ac:
         50:4e:03:d9:fc:1c:45:12:d4:5c:b5:a4:a3:95:e8:80:44:9f:
         cc:d2:4f:a6:23:6c:7f:87:e4:25:3c:64:61:a4:5f:2c:92:29:
         49:80:7f:6a:b5:ca:24:bf:9b:eb:94:18:50:68:a1:84:75:85:
         38:98:77:bb:57:30:c8:4a:cc:26:41:1a:be:38:74:5c:c8:b5:
         56:14:4d:50:ac:c7:68:07:bb:14:5c:f9:e9:83:23:e5:e1:b8:
         9c:59:76:8d:ab:6e:42:a1:50:06:00:a7:fe:a2:3d:63:cb:d2:
         c6:b3:6e:2f:1c:42:c1:01:9c:fa:7a:d7:7f:29:63:6f:4c:d8:
         80:16:34:2c:76:5f:dc:05:1a:46:8c:71:26:ed:42:ac:c1:83:
         f1:b2:92:68:4c:a9:e5:c3:57:c1:69:45:07:5a:8d:ad:85:d6:
         65:9c:52:22:ff:72:4e:06:05:ac:63:b5:42:37:17:5f:12:3a:
         7d:3d:16:0e:9d:8c:0b:0e:4a:b9:82:95:80:12:e5:f6:4d:b2:
         08:87:50:9b:99:51:77:90:af:9e:ad:78:ff:be:79:2b:fb:39:
         b7:fa:1c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org