Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WFdSeobzrKFoWhvN0D55jgDh1Dw.roa
File:                     WFdSeobzrKFoWhvN0D55jgDh1Dw.roa (raw, json)
Hash identifier:          twklb3/s2RelwwpkwxqJTYit8PSc4ak5LfL0X43jK04=
Subject key identifier:   58:57:52:7A:86:F3:AC:A1:68:5A:1B:CD:D0:3E:79:8E:00:E1:D4:3C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E9E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WFdSeobzrKFoWhvN0D55jgDh1Dw.roa
Signing time:             Fri 01 Sep 2023 10:16:16 +0000
ROA not before:           Fri 01 Sep 2023 10:16:16 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24165
IP address blocks:        180.218.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7838 (0x1e9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:16:16 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=5857527A86F3ACA1685A1BCDD03E798E00E1D43C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:f5:36:ea:b1:2e:fa:07:e2:b9:fa:2e:bf:
                    db:2c:37:07:52:d0:35:13:84:ad:40:37:e0:b3:cf:
                    a2:f4:17:99:88:f1:ed:a2:86:e4:e4:99:37:1b:b4:
                    07:a7:5f:47:05:94:e8:41:84:59:2b:25:3b:ce:39:
                    6f:06:e7:24:a9:9a:07:40:29:3a:b9:6e:e4:ea:d6:
                    7c:cf:40:d5:8d:94:42:16:18:98:03:eb:f1:ac:bb:
                    01:e3:fb:ee:4b:2a:0e:1e:11:ae:6c:cc:09:2c:c2:
                    99:14:6b:d1:ed:bf:b2:7a:57:0d:28:12:4c:d0:30:
                    ee:b7:07:89:60:a6:9f:95:e5:f8:04:ca:90:0c:7e:
                    56:b3:24:73:5f:3c:d8:4f:f1:bb:f2:9c:d2:e5:17:
                    9c:67:a8:ce:e3:97:9a:8b:c8:9d:dd:f5:fa:d6:30:
                    68:a0:6c:ad:51:29:9c:b7:29:20:d8:7d:9b:89:e9:
                    b9:67:3c:ad:3a:97:c5:e8:e9:15:bb:50:26:a2:d2:
                    02:54:21:45:99:15:15:6c:d5:23:50:65:62:51:5d:
                    41:7a:55:70:4f:a3:cd:01:be:81:ca:ea:9d:53:93:
                    0f:69:46:bb:80:64:15:5e:dc:99:74:31:dd:5e:75:
                    2d:17:36:ad:a6:ed:c9:10:d8:e7:94:ef:8d:d9:8d:
                    e7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:57:52:7A:86:F3:AC:A1:68:5A:1B:CD:D0:3E:79:8E:00:E1:D4:3C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WFdSeobzrKFoWhvN0D55jgDh1Dw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:cf:a7:d7:99:e1:43:5b:50:ab:11:59:80:20:93:88:49:5d:
         ca:8d:55:89:d3:df:f1:fd:25:65:30:e8:f6:7d:c3:1a:81:72:
         0c:4f:93:6a:76:ef:3f:4a:a6:ef:aa:9f:0f:ab:40:23:96:ba:
         13:6c:74:2f:39:05:39:5e:6f:58:2b:93:69:c3:c1:f3:b3:71:
         31:58:0d:4a:b1:a6:7d:69:30:54:e2:f7:7a:df:de:f2:89:54:
         dc:76:d0:1b:39:3f:2c:4c:e4:94:9c:17:fe:0e:f0:51:0a:53:
         8b:da:91:92:e8:4f:fd:e4:c6:81:29:cb:83:45:c8:1c:fb:97:
         c0:02:3c:6f:e7:2b:0a:19:26:47:4c:6e:72:bd:ab:ce:3f:9b:
         90:bc:f4:08:05:47:0c:e6:44:47:6b:7a:49:c1:2a:5e:97:e5:
         ca:ec:80:ee:1a:fa:d1:03:f0:e2:fe:f9:a8:87:b1:d3:c5:db:
         0b:0f:25:b9:19:d7:7a:13:19:9b:f6:90:3c:5e:50:bb:53:74:
         10:a6:ab:d7:08:dc:f2:58:24:bf:81:76:33:3f:1a:f9:88:0c:
         97:7d:ce:a2:93:0f:3e:8c:e6:1d:d3:59:ae:da:7a:6a:99:36:
         e0:99:a6:fe:6f:4d:9a:55:15:16:97:04:bf:a6:e8:11:a4:3c:
         1e:a9:b1:c0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE2MTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU4NTc1MjdBODZGM0FD
QTE2ODVBMUJDREQwM0U3OThFMDBFMUQ0M0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCu6vU26rEu+gfiufouv9ssNwdS0DUThK1AN+Czz6L0F5mI8e2i
huTkmTcbtAenX0cFlOhBhFkrJTvOOW8G5ySpmgdAKTq5buTq1nzPQNWNlEIWGJgD
6/GsuwHj++5LKg4eEa5szAkswpkUa9Htv7J6Vw0oEkzQMO63B4lgpp+V5fgEypAM
flazJHNfPNhP8bvynNLlF5xnqM7jl5qLyJ3d9frWMGigbK1RKZy3KSDYfZuJ6bln
PK06l8Xo6RW7UCai0gJUIUWZFRVs1SNQZWJRXUF6VXBPo80BvoHK6p1Tkw9pRruA
ZBVe3Jl0Md1edS0XNq2m7ckQ2OeU743ZjecNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWFdSeobzrKFoWhvN0D55jgDh1DwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1dGZFNlb2J6cktGb1dodk4w
RDU1amdEaDFEdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2mQwDQYJKoZIhvcNAQELBQADggEBAHvPp9eZ4UNbUKsRWYAgk4hJXcqNVYnT3/H9
JWUw6PZ9wxqBcgxPk2p27z9Kpu+qnw+rQCOWuhNsdC85BTleb1grk2nDwfOzcTFY
DUqxpn1pMFTi93rf3vKJVNx20Bs5PyxM5JScF/4O8FEKU4vakZLoT/3kxoEpy4NF
yBz7l8ACPG/nKwoZJkdMbnK9q84/m5C89AgFRwzmREdreknBKl6X5crsgO4a+tED
8OL++aiHsdPF2wsPJbkZ13oTGZv2kDxeULtTdBCmq9cI3PJYJL+BdjM/GvmIDJd9
zqKTDz6M5h3TWa7aemqZNuCZpv5vTZpVFRaXBL+m6BGkPB6pscA=
-----END CERTIFICATE-----
Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org