Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b6Fo--sb5KoE_LOUmI7Q1hCHKjY.roa
File:                     b6Fo--sb5KoE_LOUmI7Q1hCHKjY.roa (raw, json)
Hash identifier:          pr3tZ5bWpkTTeIji3Jt3myq03rAy101qAdH3ixDtQoE=
Subject key identifier:   6F:A1:68:FB:EB:1B:E4:AA:04:FC:B3:94:98:8E:D0:D6:10:87:2A:36
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2238
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b6Fo--sb5KoE_LOUmI7Q1hCHKjY.roa
Signing time:             Mon 26 Aug 2024 05:33:47 +0000
ROA not before:           Mon 26 Aug 2024 05:33:47 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24165
IP address blocks:        124.6.0.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8760 (0x2238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:47 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6FA168FBEB1BE4AA04FCB394988ED0D610872A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:9e:05:d1:27:77:98:6c:6d:b9:aa:1d:3c:
                    c4:ef:e7:3a:df:ba:af:df:7c:6d:42:6d:5c:a8:2c:
                    6a:ac:bf:e7:d3:eb:06:1b:11:f7:68:c4:d3:4b:d1:
                    09:63:e4:a4:0b:5a:7a:6b:cc:cf:92:bd:b5:10:67:
                    46:3d:e9:94:bc:5c:7d:87:fd:f3:f5:92:06:21:45:
                    86:16:ee:70:9d:dd:a2:a4:70:c5:f1:bd:0c:be:5a:
                    2a:42:fd:fd:1e:90:71:88:eb:f3:cd:5a:df:2d:8d:
                    05:28:88:9e:2f:68:10:dc:d0:dc:e4:b0:a1:5b:76:
                    5d:c6:4a:65:8c:74:e1:f2:4b:c6:3b:fa:bd:36:47:
                    a2:0e:d4:3b:d1:33:71:44:42:77:7d:e6:a5:c1:86:
                    59:12:e2:7b:95:42:4f:f4:c7:bf:0e:cb:95:44:f6:
                    1d:88:b1:9d:a8:af:96:13:2f:af:c0:13:37:0e:e4:
                    8c:a5:51:0a:55:72:ac:39:cc:ec:0c:e0:43:19:b7:
                    0a:02:88:eb:73:20:52:55:5a:7e:42:b6:aa:cb:0e:
                    75:c2:9c:01:e6:7e:a6:8e:09:e6:d7:61:1f:e8:c9:
                    10:da:17:80:3c:d4:16:49:30:2e:18:68:d2:c0:45:
                    71:a5:5b:0c:b2:a9:e6:dc:f8:31:01:de:09:bd:84:
                    0f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A1:68:FB:EB:1B:E4:AA:04:FC:B3:94:98:8E:D0:D6:10:87:2A:36
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b6Fo--sb5KoE_LOUmI7Q1hCHKjY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:26:8c:fc:e0:ae:c3:8a:1e:4e:c5:a6:ba:4d:67:5e:33:47:
         46:f7:c6:fa:71:aa:8d:b6:ab:73:11:1e:0a:9f:c1:b3:ea:9c:
         e9:7e:ce:6e:92:1e:bd:52:58:6d:42:84:b1:3a:d6:d3:d3:87:
         d2:2c:ca:34:ca:3b:30:29:7d:91:22:90:e1:9f:93:5b:01:80:
         43:d3:54:d5:f0:fd:4a:85:a0:ef:fc:eb:4c:ec:58:c4:e8:1e:
         d7:3f:dc:3d:34:ff:07:88:2e:b4:9a:29:9e:35:af:c6:d6:5c:
         02:2b:e6:24:7b:8e:15:25:d0:56:c9:8f:40:2b:11:80:9e:20:
         29:19:1e:dd:34:73:4c:44:68:0b:e6:a2:9e:d2:e8:bd:4b:f8:
         6b:9c:80:f3:99:83:1f:56:25:ed:c0:8a:3d:91:d0:97:6f:17:
         ef:d5:52:3e:6a:59:ee:aa:f4:f3:14:0f:90:21:b4:de:cf:dd:
         8b:90:a2:c9:6c:71:a1:d8:8c:0d:fd:54:68:6a:0f:2c:99:3d:
         45:e9:99:84:d3:ba:82:e4:3e:ad:2f:f1:96:d6:43:9f:0a:df:
         58:c1:2c:b3:2d:2b:dd:0f:97:a2:8a:3f:c3:c6:26:cb:96:99:
         b8:c8:49:0a:97:9f:42:4b:53:03:2c:38:37:c1:a8:f9:32:d4:
         47:11:24:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:13:18 2024 by rpki-client on console-fra.rpki-client.org