Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eV0TbEUdC0vSIROMtIoJj8GUDos.roa
File:                     eV0TbEUdC0vSIROMtIoJj8GUDos.roa (raw, json)
Hash identifier:          PEKnmXZkA26lhdKVoHUC102Z9xnaYIcQNdCusp9Ld7Y=
Subject key identifier:   79:5D:13:6C:45:1D:0B:4B:D2:21:13:8C:B4:8A:09:8F:C1:94:0E:8B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DDC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eV0TbEUdC0vSIROMtIoJj8GUDos.roa
Signing time:             Fri 01 Sep 2023 10:15:23 +0000
ROA not before:           Fri 01 Sep 2023 10:15:23 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        180.218.186.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7644 (0x1ddc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:23 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=795D136C451D0B4BD221138CB48A098FC1940E8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:f0:ca:e9:6b:76:50:8b:34:27:9e:c5:42:
                    51:bb:3d:68:5f:f2:5a:a5:a6:4b:61:1e:26:fb:7f:
                    ea:25:5e:51:3f:3b:eb:90:ba:1a:20:f7:1b:1b:fe:
                    40:f3:83:f0:8b:19:68:39:06:aa:e7:69:7f:4d:27:
                    27:65:56:c2:c2:c6:8b:6b:7f:6d:a2:bc:f5:2c:2b:
                    96:10:55:2d:4f:c1:80:3e:97:7e:94:99:af:42:f0:
                    f7:75:62:22:b3:eb:3a:99:d9:f2:ca:0e:98:ce:1d:
                    38:6e:5d:d5:3b:8e:50:72:a6:32:5b:d2:24:0a:9d:
                    f1:fc:14:2a:fd:3e:ef:08:f3:21:60:f7:29:ed:51:
                    2d:f2:cb:ad:5c:2c:c9:ca:b6:17:86:6f:94:68:a9:
                    74:18:14:28:dc:9b:63:99:13:29:e8:64:ed:dc:b4:
                    c1:f2:a8:4e:7a:1b:0f:0a:90:fa:d5:7f:11:ce:7f:
                    fb:30:e0:1f:83:48:72:60:37:51:b7:cc:02:b4:5d:
                    f5:f1:8d:66:c6:38:f3:53:24:4f:f6:3b:f8:da:f8:
                    71:7f:ed:d0:18:da:28:19:1f:63:d8:c9:eb:8e:3f:
                    ae:21:6b:33:11:94:9b:da:d7:b1:1e:0e:95:fc:8d:
                    a0:2c:87:a8:fe:c5:98:a5:14:8f:27:4c:77:0a:ce:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5D:13:6C:45:1D:0B:4B:D2:21:13:8C:B4:8A:09:8F:C1:94:0E:8B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eV0TbEUdC0vSIROMtIoJj8GUDos.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:e2:11:c8:9c:21:0a:dc:b6:da:ae:17:56:59:07:83:76:f1:
         cb:5c:3c:5e:06:97:11:1c:4e:99:c7:59:1a:46:17:31:ee:6e:
         f6:7d:50:e3:f5:4c:f5:3e:36:7b:b0:8a:b0:74:45:69:1d:73:
         06:c7:01:57:1f:8b:0c:07:e9:f2:00:4b:78:35:c0:0e:44:35:
         ec:bb:2b:49:bf:a1:40:5b:d9:96:60:ce:08:79:37:fc:3e:be:
         e5:39:62:46:b7:67:ee:01:56:da:a4:93:1c:ce:24:2d:c9:25:
         59:6e:f0:ef:96:86:d4:ea:6e:f0:2d:17:ac:fa:48:ee:dd:58:
         13:87:76:78:ed:36:8a:99:43:8f:e7:f3:b0:bc:47:f4:76:d7:
         21:bd:d6:74:6c:e9:ff:52:ad:d2:d0:b7:4d:b8:97:85:23:06:
         9a:06:21:98:75:a7:1d:10:e3:22:2f:a4:c7:f6:91:03:2f:8e:
         c0:ae:eb:26:ca:3d:67:6b:14:e1:58:59:a5:1e:bc:dc:9e:16:
         bf:a5:92:ac:1b:14:ed:0a:ed:d6:0b:a8:05:da:99:69:a6:c3:
         da:a7:5b:2f:2c:23:7c:a8:35:32:d7:2a:2c:1a:39:c1:12:d3:
         9b:6a:42:b6:fd:99:6a:32:5a:96:38:51:96:bd:a9:94:2f:4b:
         71:34:dc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org