Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VUGBkq959Ms8PQ0cSRqaqe_3CBQ.roa
File:                     VUGBkq959Ms8PQ0cSRqaqe_3CBQ.roa (raw, json)
Hash identifier:          lQlB3bM7v+T/pTRiYLiuUiAB7MYj0eKn7vsYjBUWPOg=
Subject key identifier:   55:41:81:92:AF:79:F4:CB:3C:3D:0D:1C:49:1A:9A:A9:EF:F7:08:14
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2224
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VUGBkq959Ms8PQ0cSRqaqe_3CBQ.roa
Signing time:             Mon 26 Aug 2024 05:33:43 +0000
ROA not before:           Mon 26 Aug 2024 05:33:43 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        211.76.64.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8740 (0x2224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:43 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=55418192AF79F4CB3C3D0D1C491A9AA9EFF70814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:f7:fe:7f:17:42:f3:24:f3:b8:95:af:e4:
                    61:73:64:27:1b:77:1c:ab:15:42:96:d5:2e:57:20:
                    c9:cb:b5:3b:07:fc:b7:21:c1:33:51:83:c3:33:4f:
                    12:99:79:05:34:fe:2e:07:bc:41:dd:26:38:12:68:
                    27:92:26:a1:1d:2e:b4:eb:c7:04:db:c1:73:e5:cf:
                    4f:0a:d4:b9:7b:4a:6c:0e:7e:2c:a6:09:c6:e3:36:
                    45:ad:1d:27:7b:da:b1:0d:66:ba:9f:d5:1b:f8:08:
                    e4:eb:40:78:ce:55:4f:07:0a:3e:31:16:af:0e:db:
                    c2:d9:f8:0c:31:b8:a3:8e:be:00:89:a7:c4:ec:7c:
                    ed:ab:a6:5e:e6:af:b1:c5:c5:3d:a3:53:26:cc:cc:
                    0d:f8:5d:ce:c4:50:e2:f4:92:33:02:bb:38:e7:c4:
                    06:e8:59:a6:35:0c:e5:c2:88:9e:8e:d7:e2:f5:f9:
                    82:c5:32:0c:68:7f:94:66:b2:0c:db:b4:87:b6:ec:
                    48:ef:dc:eb:e4:4b:76:3c:c4:ea:56:b3:70:05:4a:
                    dd:3e:18:4a:8b:2c:e3:89:2b:91:7f:53:7b:0e:d1:
                    15:c4:48:3e:d3:9a:5b:2a:9b:f8:f4:ba:0e:fd:a0:
                    fc:5a:ed:88:11:6a:81:6d:6e:48:be:9c:47:30:d8:
                    b2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:41:81:92:AF:79:F4:CB:3C:3D:0D:1C:49:1A:9A:A9:EF:F7:08:14
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VUGBkq959Ms8PQ0cSRqaqe_3CBQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:6a:fa:5b:ac:66:66:ed:c6:68:ea:70:59:7c:af:48:d4:d6:
         02:07:43:12:02:6c:2c:dc:5d:0d:c9:8a:d7:c1:f7:40:57:e4:
         26:68:cd:ec:87:d4:1e:22:02:fe:fd:b9:0d:09:7e:92:12:1a:
         b4:51:36:98:d2:b2:f1:2f:ee:36:1c:56:7a:3e:1d:f0:4b:00:
         48:66:64:97:09:1c:f3:bb:f9:2a:f1:97:11:d6:f2:80:83:67:
         15:99:37:ee:24:d9:94:20:65:0e:ee:d8:8d:79:a9:5e:9e:ad:
         75:c6:5c:f8:c9:1e:fe:fa:21:81:5e:d5:9b:60:7d:36:ce:78:
         96:8c:0a:be:4e:be:d5:4f:65:38:56:38:88:c0:91:53:b0:74:
         3b:f0:65:82:e3:f3:50:5f:0e:68:8c:4c:ee:5a:90:dd:c9:a5:
         61:71:b2:bc:30:a8:d1:6a:14:72:4e:a8:e6:0c:07:46:96:77:
         07:4c:ba:7e:ee:c5:ae:f1:23:09:a7:59:cf:b2:d0:ba:05:67:
         40:38:df:e6:81:f9:0e:5d:bb:b2:46:95:82:34:a1:47:71:53:
         0d:6e:91:58:44:6d:87:93:36:75:c3:51:74:c0:94:6c:a0:40:
         e6:f5:9c:3e:4f:4d:ec:cc:69:fa:17:26:42:c6:9a:c3:36:66:
         06:42:dd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:59 2024 by rpki-client on console-fra.rpki-client.org