Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dt5PVk0_wgujkuB2vDg7zRcT3W8.roa
File:                     dt5PVk0_wgujkuB2vDg7zRcT3W8.roa (raw, json)
Hash identifier:          ryPxLg8ZAhSnH5PdofQhMHRR1Lc1fUG9GkkFBx1B86s=
Subject key identifier:   76:DE:4F:56:4D:3F:C2:0B:A3:92:E0:76:BC:38:3B:CD:17:13:DD:6F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2219
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dt5PVk0_wgujkuB2vDg7zRcT3W8.roa
Signing time:             Mon 26 Aug 2024 05:33:40 +0000
ROA not before:           Mon 26 Aug 2024 05:33:40 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        123.0.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 00:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8729 (0x2219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:40 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=76DE4F564D3FC20BA392E076BC383BCD1713DD6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8e:42:7f:74:0d:c4:79:f0:63:4a:a6:bf:87:
                    49:29:98:59:7c:36:3a:31:c1:d5:d2:95:4a:96:9c:
                    13:f4:a1:ff:70:b0:2a:0a:07:7a:09:60:e9:d0:b6:
                    22:37:5a:98:e7:c0:9b:2e:0b:37:1f:f9:dc:eb:3f:
                    e7:4a:25:2c:45:18:91:ee:1f:8f:13:b0:c9:9a:b9:
                    0a:d5:5a:f0:2f:3f:54:c2:6f:cf:72:2a:6a:81:78:
                    91:e6:a3:69:75:78:0f:00:5a:7e:23:5b:c3:e1:5c:
                    25:40:47:b4:bc:28:1d:f8:ff:ff:14:f8:f6:18:ae:
                    0c:c1:82:e8:97:ee:24:ef:d7:4e:62:cc:52:c8:67:
                    cf:40:d4:71:76:11:cc:f0:e9:65:f6:a9:7d:fa:e8:
                    3e:e2:6e:1a:02:a0:2e:23:de:ad:4a:4e:40:3d:bf:
                    09:97:bd:a3:fd:7e:ef:20:26:18:dd:ea:c5:df:ba:
                    b1:49:10:13:99:59:2c:39:09:dc:2a:bc:18:bc:0a:
                    82:8a:55:54:df:25:ec:ea:b2:af:35:21:9c:42:e4:
                    5e:da:4c:c0:d9:3b:68:ce:ec:33:ad:1a:b1:5a:da:
                    78:e7:16:50:53:21:d1:b6:c7:ee:70:73:df:07:c2:
                    7c:ae:9d:0c:bc:67:aa:f5:38:0f:51:ed:d5:2a:5c:
                    bf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DE:4F:56:4D:3F:C2:0B:A3:92:E0:76:BC:38:3B:CD:17:13:DD:6F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dt5PVk0_wgujkuB2vDg7zRcT3W8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:27:85:bb:49:e7:39:57:ed:1a:b2:6f:4a:ae:8b:d9:b6:0a:
         6d:80:7d:44:6b:3f:e0:79:7e:17:30:a4:76:65:0b:85:78:e0:
         42:91:83:e2:5c:05:18:6c:7e:e1:70:aa:5a:54:f0:73:5a:1a:
         bb:33:cb:1e:ce:1f:8e:b2:b2:dc:64:43:a8:43:7d:8e:d4:23:
         55:48:42:e1:62:1e:a1:4d:be:34:1b:7a:64:75:4d:ef:04:0d:
         fc:66:4a:7b:94:43:dc:ed:30:13:6b:8e:ad:7c:dd:10:c8:ea:
         15:22:27:c6:df:84:94:8c:0b:a7:17:77:f7:01:25:e1:a2:3e:
         53:9d:0f:2a:c6:52:e1:c7:e4:5c:5a:17:94:48:f0:d9:25:a1:
         ef:d7:ff:7d:57:28:83:07:66:b6:ff:9d:23:3a:3e:d2:30:31:
         54:02:83:9f:f0:74:42:aa:25:6e:b0:63:1b:2e:ad:1e:c8:33:
         03:fd:5a:26:75:72:12:c1:10:6a:0e:22:c3:14:0c:ae:b2:b7:
         27:94:b7:60:6b:b1:0e:5b:5f:f3:49:95:66:03:68:09:d6:8f:
         bb:99:4f:d4:2b:39:4c:39:55:90:9b:8e:16:31:10:ca:a6:32:
         42:8e:8f:a6:01:fb:8e:21:74:27:4d:f3:a4:95:f0:e0:bf:97:
         9b:1e:46:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:56:45 2024 by rpki-client on console-fra.rpki-client.org