Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z39_n29D3oX4H-dC3coFQqndqCw.roa
File:                     Z39_n29D3oX4H-dC3coFQqndqCw.roa (raw, json)
Hash identifier:          1nPs42kHfAQfgEWM9qPk+OvBIcYMz8aeYW96BesGWac=
Subject key identifier:   67:7F:7F:9F:6F:43:DE:85:F8:1F:E7:42:DD:CA:05:42:A9:DD:A8:2C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1F3B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z39_n29D3oX4H-dC3coFQqndqCw.roa
Signing time:             Tue 30 Jan 2024 08:56:05 +0000
ROA not before:           Tue 30 Jan 2024 08:56:05 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        61.56.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7995 (0x1f3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 30 08:56:05 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=677F7F9F6F43DE85F81FE742DDCA0542A9DDA82C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:36:1c:a2:c4:cf:2b:8f:fb:7e:66:0e:19:
                    9d:1b:f5:a4:a5:7c:4c:2e:73:ab:0f:61:eb:e0:7c:
                    8c:1d:85:ee:3a:72:2d:d8:74:b0:d6:a0:06:da:9b:
                    a4:f6:89:43:66:98:a7:56:4a:d4:24:23:ca:b8:de:
                    20:ae:ea:91:44:0c:57:25:dc:5f:c7:bd:db:79:3b:
                    7e:25:86:11:ab:ad:6b:35:f3:cc:f7:d5:16:f5:04:
                    5b:5b:8d:7f:e7:3c:93:21:fe:90:28:30:73:74:59:
                    9d:08:f9:25:56:85:07:b9:6d:a8:9d:a7:85:72:c5:
                    f2:41:21:e3:04:cd:dd:df:a2:b2:18:c1:02:a1:a6:
                    dd:df:f2:2d:09:a1:c8:11:77:ff:f8:9b:66:cb:3b:
                    e3:6d:80:56:12:3f:99:f9:5c:f4:d7:d7:3f:22:b8:
                    a0:23:e6:cb:db:72:ba:a7:e2:7d:b1:cf:09:e6:83:
                    75:66:4b:e7:3f:5b:8d:a3:40:25:af:01:3f:12:77:
                    20:74:3f:79:17:ae:53:1d:1b:d0:44:12:b7:09:aa:
                    8b:6c:82:5c:4e:6a:3e:f6:95:6b:4e:6d:96:17:bf:
                    05:fb:f3:fa:24:98:4c:bd:5b:63:30:6e:d7:96:f1:
                    2f:34:e8:2b:b4:1e:af:c8:66:22:48:a0:59:b4:b7:
                    6a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7F:7F:9F:6F:43:DE:85:F8:1F:E7:42:DD:CA:05:42:A9:DD:A8:2C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z39_n29D3oX4H-dC3coFQqndqCw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:15:9f:b7:25:9a:22:6f:a8:0b:7f:19:2a:be:8b:ee:02:33:
         f8:98:59:19:b4:07:19:55:40:fb:19:3e:72:0e:82:83:1f:7a:
         98:d1:54:5e:0e:d1:9c:20:53:05:a6:dd:5d:ba:0a:29:e6:2a:
         11:0e:28:dc:05:d9:3a:18:0d:3e:59:9c:b4:c2:93:d2:29:70:
         4f:40:96:4b:bd:c7:4e:14:fe:c8:22:92:53:e5:f0:57:8b:93:
         ff:63:36:ef:f3:b9:3d:e0:9d:0c:67:8f:0c:30:14:12:0d:14:
         03:e2:6c:1a:0c:a0:cb:25:17:16:d3:74:5b:bb:4b:54:77:af:
         9f:0f:f3:e3:3a:a4:3a:36:8e:71:e3:e9:2b:b5:66:4d:a5:41:
         49:1e:bf:cb:20:29:6a:11:a0:18:74:3f:84:bb:39:24:da:11:
         b4:ad:ea:f1:bb:60:22:8d:d1:39:4c:51:ea:75:14:83:1e:b2:
         17:c7:a6:90:70:38:02:da:04:78:c3:51:e9:a0:d4:d8:ed:e0:
         52:b2:a5:7e:e8:07:e4:e4:d3:c4:dc:d4:ed:75:03:a6:06:ce:
         0a:18:74:aa:2b:9f:20:3b:e6:f4:3f:2d:f6:a8:2e:05:ff:71:
         ee:cc:11:a7:c5:e8:97:b8:00:9b:fb:54:11:1e:5c:8f:20:1e:
         ee:99:e6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org