Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fzq4PA-hDNtP8Oj3ZTqUhnEEH6M.roa
File:                     fzq4PA-hDNtP8Oj3ZTqUhnEEH6M.roa (raw, json)
Hash identifier:          sFSTilMjzpSxr5hOdtObey1ORqJI1siYzPOxGKFUx64=
Subject key identifier:   7F:3A:B8:3C:0F:A1:0C:DB:4F:F0:E8:F7:65:3A:94:86:71:04:1F:A3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E30
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fzq4PA-hDNtP8Oj3ZTqUhnEEH6M.roa
Signing time:             Fri 01 Sep 2023 10:15:46 +0000
ROA not before:           Fri 01 Sep 2023 10:15:46 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        180.218.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7728 (0x1e30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:46 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7F3AB83C0FA10CDB4FF0E8F7653A948671041FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:91:4a:c6:3e:2f:33:cd:f0:28:80:77:73:
                    d0:02:dd:9a:72:7f:1e:4f:b5:12:e6:8a:76:f3:a4:
                    33:8d:8c:57:4d:b5:09:35:a4:bc:4a:e4:f7:6d:c6:
                    a8:bb:3e:47:63:63:2b:e9:7b:cd:2f:82:8c:51:90:
                    a3:ff:c1:1e:3e:42:0f:26:91:68:61:6f:36:4a:2c:
                    96:8f:5f:75:d1:55:e7:00:72:e7:d1:31:db:89:b3:
                    58:c6:b9:94:35:a5:07:cf:02:3f:0a:cd:c6:38:31:
                    c9:16:e0:9c:91:c8:50:a4:c1:71:91:d1:0c:2c:5c:
                    f3:bd:cb:46:36:93:48:79:88:1f:78:1a:55:10:78:
                    e4:8b:aa:b8:27:5e:fa:79:ef:e4:a7:61:e5:c4:18:
                    aa:48:87:05:aa:6c:84:d3:8f:76:86:e5:28:f6:26:
                    28:10:43:6c:53:37:d8:2a:71:2e:43:47:eb:ee:7a:
                    2c:95:41:72:71:89:64:a4:59:a2:28:90:ed:f3:fb:
                    a7:c0:48:19:33:a2:db:b8:fd:d6:c0:4d:55:db:ae:
                    c1:26:b2:ab:5b:fa:95:f6:e1:47:aa:98:60:e9:3b:
                    51:2b:a8:eb:36:ce:36:17:a8:6d:58:1b:4f:f9:7b:
                    ca:8b:ec:87:54:39:cb:6f:1b:d9:d2:45:c9:a7:8e:
                    41:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3A:B8:3C:0F:A1:0C:DB:4F:F0:E8:F7:65:3A:94:86:71:04:1F:A3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fzq4PA-hDNtP8Oj3ZTqUhnEEH6M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:b2:69:fd:d0:62:1e:ee:44:3e:88:02:fb:f2:48:16:d5:b3:
         c3:06:c8:8c:09:e4:eb:54:78:51:53:7f:e1:cd:67:12:c2:b2:
         58:1d:e2:dd:72:df:8f:53:8c:b7:da:a3:36:07:de:36:2f:2e:
         18:73:4f:7c:08:c5:64:0a:0e:fd:38:76:11:c9:55:31:38:f1:
         4f:cb:ee:0a:b3:3f:5e:1b:db:77:8d:54:8e:b4:cd:56:1e:68:
         eb:02:c4:01:19:0d:41:f0:8d:1f:ae:4c:36:cf:56:dc:63:c1:
         38:e0:ee:60:02:45:40:e4:47:1f:73:31:1c:0e:53:f8:a8:f0:
         8a:09:54:97:01:df:3f:48:c8:ab:54:d9:f9:93:fc:a6:fd:e8:
         4b:93:a9:dd:bd:2f:18:01:61:d8:47:16:6c:46:42:f1:1d:1a:
         bc:4f:c8:4e:64:b2:41:86:e7:cf:cc:9b:f0:1f:1b:0e:21:09:
         33:8e:d1:31:20:4f:04:b3:38:61:57:26:8f:b1:eb:71:5b:64:
         b9:a5:aa:4d:18:61:7b:00:72:27:57:bb:7d:f2:7b:b2:65:bb:
         51:42:49:bc:f7:bf:b7:5f:ff:44:3c:d2:e3:48:49:40:61:c8:
         5c:f6:45:d5:2d:a3:93:4f:20:b1:bb:38:aa:92:20:8c:55:10:
         6f:59:05:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:22:03 2024 by rpki-client on console-ams.rpki-client.org