Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VYylsYoSQejJrwqf_Mw--AjOwsE.roa
File:                     VYylsYoSQejJrwqf_Mw--AjOwsE.roa (raw, json)
Hash identifier:          RO4MTuJCmOE8tJT7dH+qxC9+FX5H8TeHSVRbwvszvQo=
Subject key identifier:   55:8C:A5:B1:8A:12:41:E8:C9:AF:0A:9F:FC:CC:3E:F8:08:CE:C2:C1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1F31
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VYylsYoSQejJrwqf_Mw--AjOwsE.roa
Signing time:             Tue 30 Jan 2024 08:43:51 +0000
ROA not before:           Tue 30 Jan 2024 08:43:51 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        124.6.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7985 (0x1f31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 30 08:43:51 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=558CA5B18A1241E8C9AF0A9FFCCC3EF808CEC2C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:2b:5e:13:c6:29:0a:82:1d:4a:e1:04:d0:
                    97:13:ea:fe:d8:69:83:8a:ec:2a:30:fb:51:9c:e3:
                    00:45:06:d9:b3:3a:12:6d:53:09:c7:9a:a1:68:bc:
                    4a:83:c0:f1:82:72:9c:e8:fc:1f:22:e4:16:0e:cb:
                    ee:07:0d:d5:21:92:33:44:bc:b6:c3:37:08:cf:98:
                    b0:7a:d9:dc:34:0c:7d:4c:82:d0:38:7d:2e:80:d5:
                    f5:c3:5c:d3:cd:58:fe:66:be:f8:74:7d:78:cf:43:
                    64:9c:11:fe:48:4a:0c:58:18:db:27:c6:6d:08:0c:
                    f7:de:48:f8:f9:65:00:86:b2:2a:91:53:ff:c1:40:
                    17:43:ab:a7:a5:0f:ab:bd:ab:f9:9b:d5:86:23:d3:
                    e6:80:d8:84:bd:62:0f:61:f3:da:0d:f9:d5:9a:e2:
                    bc:e0:c8:2a:0a:af:45:3c:83:bb:f6:c2:6a:dc:9d:
                    da:23:c1:b8:f1:fe:49:71:10:c7:1c:64:79:86:90:
                    f2:47:26:ab:43:e4:ad:62:06:54:b0:1a:1a:cb:e3:
                    8f:c6:7e:70:87:aa:c3:a4:c3:6d:4d:7d:86:db:70:
                    9f:25:ac:a4:7a:75:52:7d:94:df:0a:60:4c:fb:f5:
                    c5:42:66:9a:f9:02:8d:68:df:51:63:50:06:12:d7:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8C:A5:B1:8A:12:41:E8:C9:AF:0A:9F:FC:CC:3E:F8:08:CE:C2:C1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VYylsYoSQejJrwqf_Mw--AjOwsE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:fa:5f:97:7a:ea:56:56:61:4f:0a:d5:b6:db:dc:68:66:22:
         7b:7d:e1:8a:bc:0b:51:24:7b:e1:d5:81:e2:58:07:90:3d:68:
         8f:0d:89:dd:cd:ce:34:e4:30:e0:a1:15:ba:e4:f3:dd:dc:fc:
         78:bc:14:1d:c5:be:9f:93:31:83:bb:4b:6b:79:0e:6e:95:8e:
         82:8f:82:e0:cc:38:18:93:63:6d:6e:0e:a1:8b:9d:ed:ff:06:
         ed:9a:46:31:ed:b1:c0:cb:61:1c:cc:3e:66:3d:13:71:f1:3f:
         5c:cd:40:10:5e:0b:65:47:f6:7a:b9:52:46:5c:95:48:87:25:
         1d:09:da:e1:b0:a8:38:f3:50:bc:32:2c:9e:ea:89:14:ce:f6:
         13:77:96:4e:aa:81:f7:45:8c:c4:d7:5c:98:62:41:6c:ec:78:
         46:68:7a:23:fc:1d:a0:73:e8:99:6d:5d:e9:06:8b:a2:b6:6d:
         db:6a:99:f8:9e:7f:a9:93:1b:0c:68:28:61:d6:1c:0a:0f:d2:
         47:6c:98:a2:01:c4:e9:9b:ba:72:25:f6:81:54:7b:5f:73:34:
         22:46:9b:18:97:63:fe:65:d1:07:0e:39:64:57:fc:be:f2:0f:
         9e:d5:cf:9f:d9:0f:cf:49:0f:3d:43:72:05:66:38:70:b8:15:
         97:19:19:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org