Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e75WWsWaQcYue-YeBLCDQ8VcDbk.roa
File:                     e75WWsWaQcYue-YeBLCDQ8VcDbk.roa (raw, json)
Hash identifier:          rXc7cEYCHp3b4uhllTbv3fbVzXUX0YnnZcsPik5yFxw=
Subject key identifier:   7B:BE:56:5A:C5:9A:41:C6:2E:7B:E6:1E:04:B0:83:43:C5:5C:0D:B9
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2269
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e75WWsWaQcYue-YeBLCDQ8VcDbk.roa
Signing time:             Mon 26 Aug 2024 05:33:58 +0000
ROA not before:           Mon 26 Aug 2024 05:33:58 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24165
IP address blocks:        2407:4b00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8809 (0x2269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:58 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=7BBE565AC59A41C62E7BE61E04B08343C55C0DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:96:c6:bd:51:2c:59:6b:24:f8:ba:e4:cd:41:
                    04:a7:82:d2:b7:42:b6:a6:17:3a:c3:8c:6d:64:4d:
                    4f:8a:03:5f:3f:48:7b:d9:33:79:24:a2:2c:4e:2e:
                    9e:6a:aa:e5:d2:2f:ca:a8:63:5d:7f:b2:16:5a:03:
                    54:b7:14:90:a6:97:f9:19:62:4b:6a:0a:e0:30:42:
                    34:0d:7a:9e:95:2f:8b:23:58:4b:50:83:19:cf:0c:
                    48:11:25:58:1c:46:3d:66:52:3d:5e:42:1f:4a:f7:
                    05:f3:2a:de:9d:8a:de:16:10:a8:62:5d:04:ac:2d:
                    b9:f3:42:2c:77:7e:74:73:e1:f9:7a:69:cc:fc:8d:
                    6a:a5:71:1f:aa:ba:d6:a7:14:fe:33:7b:b9:14:13:
                    b0:82:7a:d1:b6:c9:9f:22:de:d8:47:75:9b:1f:82:
                    76:04:1c:a7:07:1e:4d:4c:a1:69:0a:3c:b0:86:40:
                    6e:37:df:0d:83:bf:6d:b6:66:8f:b8:d6:14:5b:af:
                    17:85:91:9f:fc:fe:5d:92:19:45:37:83:7a:25:a4:
                    cc:21:37:c8:83:11:bb:9d:1a:ac:e3:19:01:09:3d:
                    79:32:e7:ad:a5:c3:38:c5:4b:0c:a0:c1:65:30:d8:
                    b0:80:71:fa:60:07:17:3b:66:2e:36:73:2e:a0:8c:
                    44:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BE:56:5A:C5:9A:41:C6:2E:7B:E6:1E:04:B0:83:43:C5:5C:0D:B9
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e75WWsWaQcYue-YeBLCDQ8VcDbk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:6d:d3:c8:a4:43:14:ae:b2:59:d6:0c:f0:88:af:02:24:e0:
         04:cd:20:be:51:23:22:ea:91:a2:a4:bd:ac:7f:46:9a:9a:b8:
         e3:cf:30:c4:95:ed:ac:71:93:7e:6c:02:53:84:61:59:84:18:
         23:3e:19:36:ee:87:a2:3a:e5:27:0c:42:00:b3:75:a4:51:7b:
         4f:1e:9f:69:cd:cb:76:b1:9e:ff:3f:de:4e:2c:e1:33:2e:cc:
         d7:f4:b4:46:54:5b:fa:17:d5:bd:83:98:eb:65:b8:85:17:b6:
         d8:23:f0:b8:fc:1c:64:d7:4f:ac:dd:e9:ab:d0:ed:06:04:54:
         88:05:11:7a:5f:94:00:5e:f1:ff:74:a8:7b:1a:8b:9d:1f:25:
         95:ca:59:6d:00:42:43:81:5b:72:37:96:24:08:e0:55:76:18:
         d3:2c:1f:8f:b7:91:d9:a5:af:31:f1:f0:c3:f6:73:ee:6c:6d:
         a8:92:14:fc:63:ea:9b:72:b8:c6:7f:7c:15:3c:2d:9f:e0:c6:
         18:2f:ad:3a:14:4a:80:0f:1c:ba:44:23:6a:30:c6:5c:c3:ee:
         ff:f0:91:8d:25:b8:0d:c7:ca:66:5f:33:45:f4:be:9f:06:88:
         04:5d:e6:95:a1:b4:eb:14:d3:82:cb:e3:0f:ab:9d:07:c3:8c:
         e0:39:1e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:55 2024 by rpki-client on console-fra.rpki-client.org