Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SKHg6_C6Vxd9tOEcyqmWjHxRY30.roa
File:                     SKHg6_C6Vxd9tOEcyqmWjHxRY30.roa (raw, json)
Hash identifier:          mCyTK91nxIi7BCbL8DJ9lhSdYM6HlLpMeF9oWSMvtGw=
Subject key identifier:   48:A1:E0:EB:F0:BA:57:17:7D:B4:E1:1C:CA:A9:96:8C:7C:51:63:7D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E84
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SKHg6_C6Vxd9tOEcyqmWjHxRY30.roa
Signing time:             Fri 01 Sep 2023 10:16:10 +0000
ROA not before:           Fri 01 Sep 2023 10:16:10 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        122.100.80.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7812 (0x1e84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:16:10 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=48A1E0EBF0BA57177DB4E11CCAA9968C7C51637D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c8:b4:f7:db:9f:e6:47:7b:49:c4:f7:ad:2a:
                    dc:a8:7f:41:4b:82:00:c5:fd:a9:4f:c2:2e:3c:15:
                    fc:91:39:e6:eb:ad:a4:19:9f:54:2c:d7:ce:2e:49:
                    39:ec:59:c9:9f:ec:7d:bd:fc:67:0d:c9:c9:1a:6c:
                    b8:df:f7:ae:bf:5e:a8:db:2a:f2:db:83:71:66:c1:
                    51:b4:56:2a:3c:9c:48:d8:38:39:13:b4:9a:9b:cd:
                    e8:c3:7d:5c:e1:83:e6:e1:12:96:ac:28:a2:63:42:
                    f6:2b:1f:48:83:2c:09:ae:6e:5f:63:eb:f2:39:44:
                    90:ce:9e:f8:8d:18:91:a2:89:bd:83:92:64:cb:77:
                    fb:0d:f3:70:af:2a:bb:92:5e:c6:20:5f:e0:c4:d6:
                    07:cb:ea:a3:2b:20:45:7e:f3:1b:c2:7e:f6:2b:77:
                    e8:cc:03:3a:97:00:89:10:2e:66:71:23:1f:60:9b:
                    ae:8d:74:a4:d9:4f:54:e1:68:a4:68:e0:f4:f2:00:
                    bb:36:0a:f5:be:c1:2a:f5:f2:19:c2:c3:e2:fb:8b:
                    f4:49:db:f9:08:28:8a:c8:58:9a:d0:00:ca:6e:f7:
                    9d:8e:2f:64:15:03:91:b0:0c:a2:b8:d2:e0:62:ec:
                    a0:e6:3e:b3:32:1f:9a:2b:bc:44:73:34:96:cf:a1:
                    b7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A1:E0:EB:F0:BA:57:17:7D:B4:E1:1C:CA:A9:96:8C:7C:51:63:7D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SKHg6_C6Vxd9tOEcyqmWjHxRY30.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:15:e5:22:68:e1:2c:b9:1f:69:79:2c:67:f9:cd:a3:dd:a6:
         e9:ab:b1:ad:6d:69:16:c9:e0:88:bc:17:79:ec:28:a3:3d:1d:
         f0:6a:14:9c:74:bb:0a:cc:70:af:0b:92:27:f1:3d:83:5a:b0:
         f8:ca:41:79:75:aa:60:99:c1:77:56:8a:cd:42:17:29:bf:48:
         ff:83:8e:bb:37:97:a2:77:ae:cd:5e:2c:49:c9:21:8a:50:86:
         4a:bf:9a:44:20:69:b9:78:f6:3a:96:85:14:84:45:ee:04:29:
         cb:02:0a:a7:41:75:5d:bd:1d:46:12:a0:aa:fa:dd:b3:2a:1c:
         1a:a0:20:9a:80:c2:9a:26:51:03:66:4e:bc:8d:9c:68:c2:87:
         03:e0:20:8a:ab:f3:a2:33:38:71:b0:1c:30:87:c3:cb:7b:e0:
         26:e4:9e:42:8a:1f:68:4c:84:53:0a:08:56:27:5d:c1:d2:a8:
         7a:60:f0:5c:2b:40:10:e4:e9:32:ad:98:c9:79:d6:ce:44:7f:
         14:3a:da:59:39:76:8e:d4:c7:30:52:c1:49:fa:90:9b:7b:ef:
         76:bf:3a:e6:c8:ef:07:1d:a9:45:d2:8b:0b:0a:27:ea:84:b9:
         4d:ad:ab:cd:11:8a:1e:85:e1:31:2f:bc:ad:67:16:f8:29:40:
         5d:be:b7:79
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHoQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE2MTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ4QTFFMEVCRjBCQTU3
MTc3REI0RTExQ0NBQTk5NjhDN0M1MTYzN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfyLT325/mR3tJxPetKtyof0FLggDF/alPwi48FfyROebrraQZ
n1Qs184uSTnsWcmf7H29/GcNyckabLjf966/XqjbKvLbg3FmwVG0Vio8nEjYODkT
tJqbzejDfVzhg+bhEpasKKJjQvYrH0iDLAmubl9j6/I5RJDOnviNGJGiib2DkmTL
d/sN83CvKruSXsYgX+DE1gfL6qMrIEV+8xvCfvYrd+jMAzqXAIkQLmZxIx9gm66N
dKTZT1ThaKRo4PTyALs2CvW+wSr18hnCw+L7i/RJ2/kIKIrIWJrQAMpu952OL2QV
A5GwDKK40uBi7KDmPrMyH5orvERzNJbPobchAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSKHg6/C6Vxd9tOEcyqmWjHxRY30wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1NLSGc2X0M2VnhkOXRPRWN5
cW1Xakh4UlkzMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6
ZFAwDQYJKoZIhvcNAQELBQADggEBAAoV5SJo4Sy5H2l5LGf5zaPdpumrsa1taRbJ
4Ii8F3nsKKM9HfBqFJx0uwrMcK8LkifxPYNasPjKQXl1qmCZwXdWis1CFym/SP+D
jrs3l6J3rs1eLEnJIYpQhkq/mkQgabl49jqWhRSERe4EKcsCCqdBdV29HUYSoKr6
3bMqHBqgIJqAwpomUQNmTryNnGjChwPgIIqr86IzOHGwHDCHw8t74CbknkKKH2hM
hFMKCFYnXcHSqHpg8FwrQBDk6TKtmMl51s5EfxQ62lk5do7UxzBSwUn6kJt773a/
OubI7wcdqUXSiwsKJ+qEuU2tq80Rih6F4TEvvK1nFvgpQF2+t3k=
-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org