Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UQckYZ1qJrt_J0iOfi7uqirM6Fo.roa
File:                     UQckYZ1qJrt_J0iOfi7uqirM6Fo.roa (raw, json)
Hash identifier:          WwXPiWcZmS4pXEohjU1lNJUVxg2+R+pPsDirAHLG8ps=
Subject key identifier:   51:07:24:61:9D:6A:26:BB:7F:27:48:8E:7E:2E:EE:AA:2A:CC:E8:5A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2168
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UQckYZ1qJrt_J0iOfi7uqirM6Fo.roa
Signing time:             Mon 26 Aug 2024 05:32:58 +0000
ROA not before:           Mon 26 Aug 2024 05:32:58 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8552 (0x2168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:32:58 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=510724619D6A26BB7F27488E7E2EEEAA2ACCE85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:ff:ea:de:8a:eb:b1:ce:c1:89:ab:6a:3e:
                    55:87:f2:b3:12:d3:bb:95:c3:f4:ee:25:00:b9:b1:
                    c5:d4:5d:21:ef:fc:0b:4e:1d:e2:48:a4:8f:bc:ce:
                    22:72:b6:0e:3f:34:5b:de:b9:e7:0e:fa:b0:3d:e4:
                    f7:18:81:7b:14:6e:77:60:ca:fc:29:af:8f:62:bc:
                    c3:3f:61:94:16:56:2f:53:d9:9f:48:a1:28:08:4d:
                    2c:40:99:d5:8c:73:2b:9d:49:e5:99:fd:bd:7b:50:
                    69:97:25:0d:6c:e1:51:1f:63:51:67:8c:28:46:ed:
                    4d:20:f3:e1:4b:0c:14:d1:7d:3c:4c:59:d4:12:e4:
                    2d:91:b4:3b:66:99:37:f4:09:b1:f1:5c:c6:36:49:
                    60:42:f2:f7:e1:92:33:55:89:b4:e2:60:d9:99:4f:
                    01:c0:2c:df:a3:91:5d:d7:65:87:a0:55:fb:a2:75:
                    1f:61:3d:c2:4c:5a:49:60:c5:7c:d2:03:e1:2e:2a:
                    dd:80:fc:41:bf:2c:5f:0c:f5:8a:76:50:f7:55:6c:
                    2a:3e:25:b4:17:64:0d:56:b6:dd:34:34:88:d6:a0:
                    55:92:a4:d9:2e:97:1f:b8:85:25:31:7c:26:66:f9:
                    e7:8d:39:79:88:74:b4:ba:5f:31:70:c9:c1:34:08:
                    13:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:07:24:61:9D:6A:26:BB:7F:27:48:8E:7E:2E:EE:AA:2A:CC:E8:5A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UQckYZ1qJrt_J0iOfi7uqirM6Fo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         18:77:8f:1c:bb:fd:a3:bd:7a:2e:4b:d1:79:ce:2d:69:a4:a0:
         07:76:22:81:35:93:20:50:c4:6d:89:b9:88:a5:84:2f:6e:fc:
         36:fc:61:d0:86:f7:d0:54:18:74:ab:e4:a0:8d:b3:a7:60:d3:
         d3:34:35:df:91:20:e2:5b:4c:84:9a:89:a0:5a:c8:ce:4f:8e:
         ee:6e:3c:63:4f:37:52:31:9e:ae:93:61:eb:1b:26:e9:68:3e:
         47:37:92:99:d4:53:50:ee:b3:80:cd:c7:70:82:86:f8:ba:d6:
         ba:c6:07:a8:c9:40:3a:53:c3:37:08:91:04:d1:b9:ce:80:9a:
         2f:f2:60:c8:83:bc:93:3f:ce:61:44:10:90:54:ce:8b:6a:fc:
         97:27:13:bf:4c:f9:09:02:0b:e9:7d:49:ea:ce:94:f6:89:2e:
         bb:66:3c:35:2a:38:e8:1b:f2:c6:59:22:74:09:42:75:9b:12:
         48:38:21:d1:72:54:c2:57:d5:d4:49:bc:09:f9:f9:76:66:db:
         fd:95:f5:6b:29:36:b7:16:61:4b:f5:ea:ba:bc:c2:de:64:cf:
         00:71:8d:54:60:7f:2d:6e:8b:75:da:ca:38:ad:5d:86:3e:c7:
         b3:8c:53:f7:e2:52:11:8c:45:af:b9:0a:b5:d4:6b:a5:bf:e6:
         14:ff:6d:35
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIWgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTMyNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUxMDcyNDYxOUQ2QTI2
QkI3RjI3NDg4RTdFMkVFRUFBMkFDQ0U4NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiIP/q3orrsc7BiatqPlWH8rMS07uVw/TuJQC5scXUXSHv/AtO
HeJIpI+8ziJytg4/NFveuecO+rA95PcYgXsUbndgyvwpr49ivMM/YZQWVi9T2Z9I
oSgITSxAmdWMcyudSeWZ/b17UGmXJQ1s4VEfY1FnjChG7U0g8+FLDBTRfTxMWdQS
5C2RtDtmmTf0CbHxXMY2SWBC8vfhkjNVibTiYNmZTwHALN+jkV3XZYegVfuidR9h
PcJMWklgxXzSA+EuKt2A/EG/LF8M9Yp2UPdVbCo+JbQXZA1Wtt00NIjWoFWSpNku
lx+4hSUxfCZm+eeNOXmIdLS6XzFwycE0CBPJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUUQckYZ1qJrt/J0iOfi7uqirM6FowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1VRY2tZWjFxSnJ0X0owaU9m
aTd1cWlyTTZGby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW0
2gAwDQYJKoZIhvcNAQELBQADggEBABh3jxy7/aO9ei5L0XnOLWmkoAd2IoE1kyBQ
xG2JuYilhC9u/Db8YdCG99BUGHSr5KCNs6dg09M0Nd+RIOJbTISaiaBayM5Pju5u
PGNPN1Ixnq6TYesbJuloPkc3kpnUU1Dus4DNx3CChvi61rrGB6jJQDpTwzcIkQTR
uc6Ami/yYMiDvJM/zmFEEJBUzotq/JcnE79M+QkCC+l9SerOlPaJLrtmPDUqOOgb
8sZZInQJQnWbEkg4IdFyVMJX1dRJvAn5+XZm2/2V9WspNrcWYUv16rq8wt5kzwBx
jVRgfy1ui3XayjitXYY+x7OMU/fiUhGMRa+5CrXUa6W/5hT/bTU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org