Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e2Ua4d6BTQgnYADbE8koURfjvco.roa
File:                     e2Ua4d6BTQgnYADbE8koURfjvco.roa (raw, json)
Hash identifier:          0lNEgwkQvHJF3KLl235S/JYiTxkbVhSAkLwKaYIbLpk=
Subject key identifier:   7B:65:1A:E1:DE:81:4D:08:27:60:00:DB:13:C9:28:51:17:E3:BD:CA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2294
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e2Ua4d6BTQgnYADbE8koURfjvco.roa
Signing time:             Mon 26 Aug 2024 05:34:09 +0000
ROA not before:           Mon 26 Aug 2024 05:34:09 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9924
IP address blocks:        114.198.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8852 (0x2294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:34:09 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=7B651AE1DE814D08276000DB13C9285117E3BDCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:84:04:19:77:82:bf:c8:83:97:3b:c2:b7:2c:
                    32:62:63:4c:f6:09:f4:03:23:e3:e2:46:2b:2d:f6:
                    1d:6a:16:a4:d2:d7:8b:40:3c:21:30:37:06:cf:a1:
                    0c:2f:fd:1b:09:15:06:fe:44:87:fb:f7:dd:c8:76:
                    9d:ef:62:07:43:f8:5e:64:31:3c:98:e7:0f:36:c2:
                    b0:48:38:54:5f:b6:b5:0f:d1:cc:8f:52:8b:0a:85:
                    94:53:a4:e1:83:f4:b3:a6:60:a9:df:43:2e:d8:bb:
                    c9:f1:42:f5:73:1d:76:dd:4c:35:34:a3:29:cf:a4:
                    3a:2c:6d:b9:9e:2c:d8:f8:0f:6f:85:41:0e:e5:31:
                    fa:08:d2:cb:82:77:61:83:77:ac:8d:32:b6:d2:e5:
                    00:6f:25:26:ac:b9:c2:54:66:c3:59:bc:f3:ca:64:
                    3c:83:fc:ea:55:14:15:17:19:aa:4a:0e:e2:f8:2b:
                    64:75:e0:1f:2c:08:5e:b3:11:e2:53:54:c0:3c:ca:
                    fc:c8:1b:84:80:74:01:54:06:ba:40:ce:f7:37:1c:
                    bb:9c:f8:69:82:c4:71:80:97:89:f8:92:c4:81:38:
                    11:51:ad:3d:cb:5f:36:ee:40:56:21:7f:b4:a2:e3:
                    65:f6:01:26:40:49:33:8c:d2:c9:6c:75:60:c4:95:
                    d9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:65:1A:E1:DE:81:4D:08:27:60:00:DB:13:C9:28:51:17:E3:BD:CA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e2Ua4d6BTQgnYADbE8koURfjvco.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:fd:67:9d:88:c3:c5:13:7f:df:3c:96:a2:85:1f:87:e7:78:
         f9:bc:2f:0f:24:fd:20:16:85:f6:11:e5:17:fb:22:a5:31:7f:
         88:94:b7:a8:10:87:c9:e4:81:2c:4a:43:b2:50:56:b3:57:6a:
         91:79:e3:2b:d3:df:24:c1:08:db:f4:e1:0d:57:0b:0c:6f:9a:
         fd:fb:5b:65:c8:09:5c:44:8a:1d:a6:41:83:9a:8c:ac:87:b3:
         cd:b3:fd:aa:6b:72:8e:56:cd:b7:d9:c8:35:fd:4d:47:aa:ac:
         39:06:d6:e1:ce:cf:22:af:f2:4f:34:d3:46:62:59:d0:21:c3:
         fa:e3:ac:96:3d:fe:66:42:34:c1:21:c3:c6:23:b4:6c:fc:06:
         32:c4:ad:24:cc:20:03:24:4c:ff:46:81:78:f7:92:b8:72:da:
         08:ad:8d:bc:95:18:14:90:1b:2a:f9:56:28:9b:3d:c5:54:b5:
         c6:5f:0e:39:e4:7d:a4:61:19:2f:1c:03:a3:31:88:fe:d1:6b:
         c8:91:ab:77:6a:e0:66:6f:2c:cc:1f:90:fe:65:c9:b2:d4:93:
         23:46:fb:a6:cf:ec:ce:45:b5:b1:6b:2b:e3:7e:c9:65:99:09:
         9e:a9:e8:a0:16:ef:88:7d:fb:10:38:8a:4b:b0:0b:27:be:a6:
         29:93:03:eb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIpQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTM0MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdCNjUxQUUxREU4MTRE
MDgyNzYwMDBEQjEzQzkyODUxMTdFM0JEQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDchAQZd4K/yIOXO8K3LDJiY0z2CfQDI+PiRist9h1qFqTS14tA
PCEwNwbPoQwv/RsJFQb+RIf7993Idp3vYgdD+F5kMTyY5w82wrBIOFRftrUP0cyP
UosKhZRTpOGD9LOmYKnfQy7Yu8nxQvVzHXbdTDU0oynPpDosbbmeLNj4D2+FQQ7l
MfoI0suCd2GDd6yNMrbS5QBvJSasucJUZsNZvPPKZDyD/OpVFBUXGapKDuL4K2R1
4B8sCF6zEeJTVMA8yvzIG4SAdAFUBrpAzvc3HLuc+GmCxHGAl4n4ksSBOBFRrT3L
XzbuQFYhf7Si42X2ASZASTOM0slsdWDEldnpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUe2Ua4d6BTQgnYADbE8koURfjvcowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2UyVWE0ZDZCVFFnbllBRGJF
OGtvVVJmanZjby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy
xrAwDQYJKoZIhvcNAQELBQADggEBAE79Z52Iw8UTf988lqKFH4fnePm8Lw8k/SAW
hfYR5Rf7IqUxf4iUt6gQh8nkgSxKQ7JQVrNXapF54yvT3yTBCNv04Q1XCwxvmv37
W2XICVxEih2mQYOajKyHs82z/aprco5WzbfZyDX9TUeqrDkG1uHOzyKv8k8000Zi
WdAhw/rjrJY9/mZCNMEhw8YjtGz8BjLErSTMIAMkTP9GgXj3krhy2gitjbyVGBSQ
Gyr5ViibPcVUtcZfDjnkfaRhGS8cA6MxiP7Ra8iRq3dq4GZvLMwfkP5lybLUkyNG
+6bP7M5FtbFrK+N+yWWZCZ6p6KAW74h9+xA4ikuwCye+pimTA+s=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org