Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eVgPaBmwc7YuSIoxTa_PXLtO88E.roa
File:                     eVgPaBmwc7YuSIoxTa_PXLtO88E.roa (raw, json)
Hash identifier:          sDsqFgWDWsHPak778xQdK8Ze9GWOzX3YmVphQVMT6rs=
Subject key identifier:   79:58:0F:68:19:B0:73:B6:2E:48:8A:31:4D:AF:CF:5C:BB:4E:F3:C1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2210
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eVgPaBmwc7YuSIoxTa_PXLtO88E.roa
Signing time:             Mon 26 Aug 2024 05:33:38 +0000
ROA not before:           Mon 26 Aug 2024 05:33:38 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8720 (0x2210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:38 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=79580F6819B073B62E488A314DAFCF5CBB4EF3C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:82:43:e7:c5:fa:97:1f:41:56:1e:09:a1:
                    6d:92:3b:4f:1f:75:53:e9:44:b3:ec:52:27:b5:45:
                    28:3f:f5:e8:dd:7f:c9:3f:84:09:fd:d1:26:15:b3:
                    b7:0e:37:32:0c:05:5b:af:97:7f:42:cf:dd:96:99:
                    04:2e:55:f0:8e:ed:d1:aa:fa:a2:3a:66:91:43:d3:
                    03:b4:9d:a5:b4:35:f6:1c:66:78:bf:2b:a7:02:4d:
                    02:48:ca:24:6e:86:e6:80:95:20:81:71:c1:d5:c0:
                    2d:35:30:1b:fd:13:d8:84:95:61:c7:c9:20:5a:f9:
                    6c:7d:5b:5d:94:c9:b4:0f:b8:7b:b0:85:6c:28:57:
                    86:43:0f:f9:41:54:e1:45:d8:09:d2:ed:fb:92:9a:
                    17:19:3c:4d:da:a0:df:41:36:89:51:bc:f1:ce:c0:
                    3a:7d:29:42:29:1f:6b:c2:36:ab:d9:43:64:a7:84:
                    f7:0f:41:ed:bd:73:18:ba:ac:3b:71:1a:ce:ca:6e:
                    60:96:7e:a4:54:a5:5a:19:f8:c2:ab:39:4a:45:b3:
                    ad:6f:f9:8d:d2:79:34:e7:f5:ba:09:8a:d1:33:67:
                    a7:f2:30:c1:28:cd:35:d8:0c:f4:49:00:3f:e4:88:
                    a1:31:ae:37:55:2e:89:d5:a4:8c:ae:48:74:1f:5f:
                    71:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:58:0F:68:19:B0:73:B6:2E:48:8A:31:4D:AF:CF:5C:BB:4E:F3:C1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eVgPaBmwc7YuSIoxTa_PXLtO88E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:3b:41:f4:5c:e3:35:5a:83:34:fa:87:34:30:00:e2:28:92:
         b2:31:34:14:5a:c1:5b:c7:8c:c9:c1:40:88:a7:08:2b:3e:34:
         fd:bf:6d:2b:47:f5:e6:6d:c4:d4:23:bd:ab:53:33:94:d3:da:
         3d:d4:19:bf:3b:46:5c:a7:11:e7:a5:18:d6:16:b6:3a:d2:5c:
         71:3d:92:58:24:21:dd:38:9e:a3:00:97:ac:c5:ff:34:41:99:
         e4:94:ca:8a:c6:44:91:f9:d6:d9:88:7d:77:ad:a8:1e:fd:ae:
         18:74:30:0e:76:37:b2:05:78:a3:32:1f:d6:8f:63:f0:a8:ae:
         26:a0:c9:9c:e7:5a:8c:7f:c6:53:e2:0d:10:1f:3a:96:cb:c5:
         a9:39:e2:11:e6:55:83:8f:1e:16:45:fa:c1:0c:4e:ec:06:41:
         51:9f:8d:f5:d4:92:cf:b4:6e:16:be:a0:3a:3b:ab:16:b0:ee:
         ea:1f:78:cf:af:81:fe:4d:e3:e6:82:ba:fd:48:8c:0c:e7:bb:
         8a:c1:09:8d:1b:f5:25:61:21:1f:c3:88:95:9b:c5:ae:c9:9f:
         7c:13:fe:9d:ee:5a:03:2c:d3:40:ab:5b:bd:aa:01:0b:03:3f:
         56:c1:1b:4d:b9:f4:d2:c4:e3:14:d3:98:a1:85:e7:69:b6:df:
         e9:35:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:26 2024 by rpki-client on console-ams.rpki-client.org