Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WPShtQgZbqSXwnvRemlSFdr_BQQ.roa
File:                     WPShtQgZbqSXwnvRemlSFdr_BQQ.roa (raw, json)
Hash identifier:          U43yocyf2EAHjzlDsKHvsmIVnPOej2N+n/ecU49P6rE=
Subject key identifier:   58:F4:A1:B5:08:19:6E:A4:97:C2:7B:D1:7A:69:52:15:DA:FF:05:04
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E98
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WPShtQgZbqSXwnvRemlSFdr_BQQ.roa
Signing time:             Fri 01 Sep 2023 10:16:14 +0000
ROA not before:           Fri 01 Sep 2023 10:16:14 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     4662
IP address blocks:        61.58.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7832 (0x1e98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:16:14 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=58F4A1B508196EA497C27BD17A695215DAFF0504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:1d:a5:11:e6:9e:1f:df:e2:f4:10:24:18:
                    5a:85:78:23:0e:bb:e1:fa:14:4d:08:c6:a0:f4:45:
                    45:61:2b:f2:d0:be:3b:a6:14:55:1f:05:e3:aa:ed:
                    3a:4f:4b:79:19:6b:c1:1e:04:6e:ad:8f:61:9d:00:
                    e6:68:2f:d6:56:55:6d:7e:06:38:57:3d:b1:d8:ed:
                    5c:63:51:51:b2:34:40:df:c8:43:c4:43:92:69:99:
                    8c:c4:d1:46:16:ac:58:8f:12:8a:cc:36:b1:00:7a:
                    99:fe:b7:6a:1a:a2:b0:e6:d7:de:b5:1d:f5:12:d3:
                    70:de:bb:c4:0a:ba:1f:4f:86:e8:e4:50:d2:e5:2b:
                    4b:c6:57:45:46:b3:6c:2c:06:b0:d8:63:3f:9b:21:
                    09:53:e5:d5:10:a5:e4:cd:b2:54:08:8f:c9:65:95:
                    4d:63:96:94:98:48:5f:56:74:48:4f:57:46:ae:22:
                    58:88:85:db:da:1f:3a:e0:7f:7f:f7:0d:a7:26:38:
                    ad:e7:8d:8f:50:68:35:a0:b1:b6:19:2f:e4:b9:e4:
                    fd:88:b6:c9:d7:ac:2c:ab:11:ce:79:7b:ba:3c:e8:
                    92:99:62:25:e5:be:a9:c9:72:ec:f3:dc:fe:4e:fa:
                    5c:54:05:5e:35:fc:89:3c:56:f9:43:e9:be:dd:9c:
                    50:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F4:A1:B5:08:19:6E:A4:97:C2:7B:D1:7A:69:52:15:DA:FF:05:04
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WPShtQgZbqSXwnvRemlSFdr_BQQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:71:78:d8:9f:36:33:8f:a4:9e:98:2e:d0:cd:5c:f5:c3:9b:
         20:4f:b2:83:92:9e:01:ae:da:6c:77:42:a0:34:03:ea:40:76:
         32:58:45:f3:99:9b:46:1d:66:5f:8b:bd:bc:ac:3c:48:93:fa:
         a3:61:81:74:29:0a:d8:5e:08:de:80:6d:6f:c8:20:83:ea:dc:
         e0:17:b4:39:bb:d2:45:8a:95:66:3e:7d:9b:f7:b6:c2:04:2b:
         2d:6a:bf:1c:08:e5:d3:bb:5e:0f:73:03:a4:86:4a:7c:83:03:
         c0:dc:f2:18:11:a9:71:77:71:2a:1d:7e:96:85:83:bb:2d:f2:
         6a:75:18:9d:01:36:6b:15:49:ee:b9:76:f9:64:e3:cf:74:3d:
         5d:96:71:70:1c:af:ba:55:8e:09:5b:47:ff:69:45:27:2d:d6:
         6d:42:35:55:76:1c:e4:cc:6b:e2:5f:82:0d:27:ff:aa:fd:ad:
         54:9d:e2:31:fb:ed:37:a9:ce:4b:a1:61:42:b2:eb:cb:c4:68:
         c3:a7:a2:89:01:7e:f9:49:a4:fb:58:6e:3e:35:e5:9d:28:c6:
         df:75:42:f5:59:34:00:3b:3c:90:34:29:5f:44:22:47:3d:87:
         87:d6:8b:51:b5:37:cc:99:52:1a:d0:c6:ea:32:8c:90:5d:a5:
         ed:bf:9d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org