Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/feY239MIfAhNpFkESJzeRaFScCo.roa
File:                     feY239MIfAhNpFkESJzeRaFScCo.roa (raw, json)
Hash identifier:          rPjs/b2z98dcBl6GP94zEiF5nNBhWOpJgn4vYMKQMrw=
Subject key identifier:   7D:E6:36:DF:D3:08:7C:08:4D:A4:59:04:48:9C:DE:45:A1:52:70:2A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2167
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/feY239MIfAhNpFkESJzeRaFScCo.roa
Signing time:             Mon 26 Aug 2024 05:32:58 +0000
ROA not before:           Mon 26 Aug 2024 05:32:58 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8551 (0x2167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:32:58 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=7DE636DFD3087C084DA45904489CDE45A152702A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:c3:d8:4c:47:e5:c5:2c:ab:1d:94:c1:5e:
                    d8:fc:b7:22:b7:2f:34:90:32:6d:82:ed:2d:45:b8:
                    e9:b8:db:78:07:f1:e1:9b:e0:f6:a8:8e:11:ce:8e:
                    f4:62:d8:b7:22:95:7d:f2:31:3d:02:45:66:f2:75:
                    18:3c:2d:ad:80:3b:94:07:48:0e:dd:f2:14:fb:57:
                    0d:9e:fa:3a:47:ed:8f:4a:77:67:d0:9e:e8:8c:f1:
                    65:e9:70:02:47:fe:7b:7f:7a:4b:c4:ea:c0:cb:70:
                    9a:67:35:58:1a:0f:39:f3:73:66:f5:73:06:50:78:
                    f6:7f:ea:e4:96:2a:d1:de:0f:80:f2:23:2f:6b:53:
                    b9:9c:c5:84:b1:2d:33:fa:9f:dd:22:6b:04:b3:ee:
                    26:14:6c:fd:62:cb:62:8c:ec:17:da:3e:63:d2:47:
                    48:82:33:6e:38:4d:dd:4e:5f:6f:25:11:e1:b3:57:
                    1a:7e:43:4c:cd:a3:5d:9e:16:89:2f:62:03:28:61:
                    7a:aa:a8:fa:16:89:72:d1:d9:74:44:e2:d2:d8:8b:
                    60:40:55:fe:9d:4e:83:29:b9:87:b0:09:56:b1:a4:
                    ec:72:64:88:1f:2b:2d:c8:d1:a1:54:6c:d9:76:50:
                    b3:2d:6a:5c:24:8d:d6:f8:9f:e7:82:1c:51:b6:74:
                    2f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E6:36:DF:D3:08:7C:08:4D:A4:59:04:48:9C:DE:45:A1:52:70:2A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/feY239MIfAhNpFkESJzeRaFScCo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:ab:38:2c:55:36:0e:cb:7f:46:3e:3c:d4:e6:b9:a3:ad:cd:
         47:1c:2f:08:e1:f8:83:ab:fd:51:68:7c:eb:d9:cb:91:f2:be:
         c7:36:df:2f:e1:d8:4f:c1:b2:cc:ad:76:ab:34:38:e6:5f:48:
         bc:98:8b:ff:79:ec:c9:b5:a2:64:39:cf:80:19:63:8e:4c:4d:
         52:d5:99:2c:c2:97:58:a2:cd:b5:e8:8c:ee:14:db:78:d5:c7:
         db:70:e0:0d:dc:dd:98:9f:a7:af:af:00:1d:86:b3:c6:1b:8e:
         dc:d3:56:2f:b6:50:73:33:99:76:6a:09:42:da:2c:02:43:d7:
         3e:12:fd:cf:50:dd:52:25:b0:85:8f:4f:f6:07:6d:93:ac:4e:
         cc:cf:20:df:92:46:54:84:ed:0e:4b:d4:64:e9:fa:1f:b4:23:
         fe:9e:67:14:a8:9e:86:5d:77:4e:20:e1:be:1f:1d:0f:df:8d:
         6a:03:74:6d:22:63:d3:93:17:b2:13:aa:2a:99:94:2e:77:09:
         7f:bf:2f:c8:ff:00:6b:7b:06:6e:57:92:0b:e0:3e:f1:33:9c:
         fe:b8:c9:c2:5a:d7:2d:61:54:a1:4d:df:b3:d0:1f:c2:74:aa:
         61:ea:c5:83:50:18:c2:b8:33:de:ae:9f:70:68:33:ab:43:2a:
         5e:ba:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:26 2024 by rpki-client on console-ams.rpki-client.org