Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_Mo-kA6mcdfK4HLXamp78fVcTIM.roa
File:                     _Mo-kA6mcdfK4HLXamp78fVcTIM.roa (raw, json)
Hash identifier:          XafDkJEkJDbOuKU1fj85lhLP0qr1pCwA3fae7A5MSe8=
Subject key identifier:   FC:CA:3E:90:0E:A6:71:D7:CA:E0:72:D7:6A:6A:7B:F1:F5:5C:4C:83
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E1A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_Mo-kA6mcdfK4HLXamp78fVcTIM.roa
Signing time:             Fri 01 Sep 2023 10:15:40 +0000
ROA not before:           Fri 01 Sep 2023 10:15:40 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        180.218.16.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7706 (0x1e1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:40 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=FCCA3E900EA671D7CAE072D76A6A7BF1F55C4C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c5:93:25:6a:67:ba:d4:a8:ab:1b:66:ed:c6:
                    1e:5d:43:5f:1f:f8:0b:a1:0f:dd:ef:58:36:60:81:
                    95:a4:05:6f:ef:c4:45:ab:ba:75:81:ed:d6:d2:1a:
                    2f:0b:66:94:fd:34:e8:cc:13:4c:e7:b6:41:c3:0c:
                    99:84:6b:fe:f8:28:ea:a2:b0:7f:4b:87:40:b5:96:
                    02:76:8b:ce:9e:1d:00:6a:9d:d9:e6:33:ae:7c:24:
                    ec:48:b1:07:47:48:b6:64:10:5a:90:81:a0:18:62:
                    24:52:6d:43:8c:f2:8e:1f:11:a1:b2:ea:a5:25:70:
                    d8:04:7e:a6:78:91:b5:58:b2:73:32:3a:75:97:df:
                    83:8d:ef:87:ec:21:00:24:e2:3f:2b:3f:da:96:2f:
                    46:5d:0c:7b:79:0d:86:e4:04:fc:7f:db:ce:97:0f:
                    b8:ea:25:b6:8f:a6:49:3b:6b:85:4e:00:17:cd:2c:
                    c6:59:e2:5a:66:19:cf:37:05:82:25:b0:b9:15:48:
                    1d:1a:45:52:38:c4:a7:9a:d9:9a:48:02:9f:25:bb:
                    06:25:d6:a2:c9:39:ff:a1:d3:6a:95:90:31:45:69:
                    b1:6d:80:48:4d:66:a9:35:d2:bf:bd:31:0c:e5:df:
                    b3:18:fa:dc:f5:c0:58:f2:00:27:1b:68:d3:b4:fe:
                    ea:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CA:3E:90:0E:A6:71:D7:CA:E0:72:D7:6A:6A:7B:F1:F5:5C:4C:83
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_Mo-kA6mcdfK4HLXamp78fVcTIM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:51:ac:e2:57:08:0a:04:3c:36:c5:ba:cc:16:88:fb:5d:a6:
         c5:d1:b1:fc:69:04:63:3b:bd:98:0a:b4:bd:72:e4:67:09:17:
         c2:4a:94:9f:dd:06:27:27:68:f6:5b:22:74:dd:b2:69:a3:2a:
         b9:7e:75:dd:bf:25:1b:f8:56:53:f2:0e:1e:d3:f7:65:3e:76:
         86:c8:4a:a8:9e:a3:1c:79:9e:4c:b9:1c:75:b1:b7:b4:e7:d7:
         4b:7e:d5:bd:9d:0a:cc:0c:e3:a8:97:a4:29:3d:5b:7f:4b:8f:
         52:67:1d:c9:ed:ce:8f:09:17:01:d9:fd:d7:3d:4b:ab:55:98:
         e1:db:1d:bc:c1:85:b5:b3:82:4f:d9:3b:58:2f:94:7c:16:d9:
         2c:49:aa:33:86:86:fd:d6:c6:f8:ee:10:f9:66:0b:e2:f7:bb:
         06:ca:4f:bc:ec:90:ec:c1:d0:d1:7a:d7:ff:fb:ba:9c:a4:65:
         65:40:9d:85:48:50:3d:bc:75:fb:e2:b1:7b:02:33:2d:ac:97:
         99:76:65:92:ff:77:ca:5b:84:4c:f9:55:d6:15:e1:7c:84:0e:
         e1:b1:2b:d1:19:67:13:ea:b7:2e:f5:64:9a:1c:ce:2f:7a:dc:
         53:13:b0:3e:af:92:8c:c3:44:9f:48:3a:e3:16:b8:5c:97:cf:
         85:b9:5a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 02:57:49 2024 by rpki-client on console-fra.rpki-client.org