Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WnSQyYvhJHLJujdi336yluFgBIM.roa
File:                     WnSQyYvhJHLJujdi336yluFgBIM.roa (raw, json)
Hash identifier:          7xJm738cjsK6C+FRAoHS31Wk36CMRemhFO3Gj2xshDs=
Subject key identifier:   5A:74:90:C9:8B:E1:24:72:C9:BA:37:62:DF:7E:B2:96:E1:60:04:83
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       21E5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WnSQyYvhJHLJujdi336yluFgBIM.roa
Signing time:             Mon 26 Aug 2024 05:33:26 +0000
ROA not before:           Mon 26 Aug 2024 05:33:26 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        115.165.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8677 (0x21e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:26 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=5A7490C98BE12472C9BA3762DF7EB296E1600483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:67:2a:4e:d6:8b:2d:18:6f:98:df:c5:a7:
                    6f:cd:c6:75:69:b0:bc:95:c3:24:cb:c6:61:d8:f8:
                    3c:0f:ee:fb:a5:7d:02:89:6a:ed:4a:f1:24:0a:b8:
                    c6:65:60:47:40:42:0a:af:d2:45:78:10:d3:c9:8d:
                    33:17:3c:a1:04:17:6b:de:d5:1a:31:09:b9:9a:a4:
                    bc:79:21:34:01:29:8b:58:c0:51:5b:7b:62:db:3d:
                    77:15:82:cd:bf:c3:48:fd:b9:b8:4f:50:e9:aa:06:
                    22:c8:e0:d1:2d:f5:d9:37:e2:a9:71:66:d8:dc:d2:
                    2e:a0:23:ac:cf:fc:18:b8:6e:a8:0b:1f:92:21:ad:
                    f8:83:77:7b:52:d4:19:0a:45:e3:94:9f:45:84:ba:
                    1a:d2:f2:8c:58:a8:f0:4f:79:44:d2:74:b0:ef:a0:
                    df:38:68:7d:fe:ab:36:e5:ea:4a:59:f9:bb:8d:89:
                    0e:a6:68:a1:0f:e8:97:dc:4f:e6:2a:00:7e:26:88:
                    a3:a6:52:a0:ab:dc:bb:87:d0:df:b5:23:b9:40:5c:
                    e1:6a:7e:05:af:9c:13:36:c9:20:fb:ab:91:02:98:
                    54:3d:03:1d:28:ea:76:df:d0:fe:c9:86:ad:aa:a1:
                    c6:a5:ea:60:78:6b:47:66:84:e3:76:2b:e8:e2:a8:
                    24:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:74:90:C9:8B:E1:24:72:C9:BA:37:62:DF:7E:B2:96:E1:60:04:83
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WnSQyYvhJHLJujdi336yluFgBIM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:25:40:d0:6d:f2:5e:80:c3:16:a9:b4:3c:e7:25:e5:25:73:
         2d:a2:a9:50:a7:42:03:eb:9e:0a:25:33:70:7a:68:65:42:36:
         d0:1d:3b:3c:d1:01:09:34:f0:27:e3:7b:73:43:7b:56:19:d3:
         17:45:25:80:14:fc:92:23:f1:b7:f0:ec:67:8a:57:04:77:2c:
         af:de:05:eb:7d:9f:ff:3f:f9:51:4a:7b:e4:68:fa:33:a0:fd:
         c9:a7:fe:7c:1f:66:a5:a3:0a:c0:f2:00:07:fe:84:cf:05:67:
         16:ec:b6:58:33:a2:9a:a9:f7:27:f8:12:53:b4:e9:57:1f:e8:
         0f:4a:5c:2e:57:ca:f2:d0:ba:b1:d7:38:23:8e:f9:fd:ff:e4:
         1e:86:9b:f9:2a:e1:c7:e7:c9:0f:5b:36:c0:2b:3b:13:2a:df:
         fe:41:4a:c9:36:97:09:28:69:bf:ea:8c:49:34:05:8d:fe:bb:
         15:a1:1b:4d:42:5d:32:1b:61:38:0f:30:17:9e:e1:f3:aa:3c:
         83:ff:d9:bf:cd:89:d6:ad:b6:4c:e3:cf:6c:02:3d:e0:9e:3e:
         02:e6:d5:5c:ed:51:20:76:db:dc:c4:fb:b7:da:43:b8:42:ff:
         dd:3c:6a:ec:c7:da:0e:05:3d:d2:4a:ba:1f:9c:7f:70:87:33:
         8e:11:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:59 2024 by rpki-client on console-fra.rpki-client.org