Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gd0RHiPyDj0rtorLH8xwPYAv8co.roa
File:                     gd0RHiPyDj0rtorLH8xwPYAv8co.roa (raw, json)
Hash identifier:          qnmuFyUJetsO2bwRSb1lArpcMICuzdMSueU2FcmaHi4=
Subject key identifier:   81:DD:11:1E:23:F2:0E:3D:2B:B6:8A:CB:1F:CC:70:3D:80:2F:F1:CA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2285
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gd0RHiPyDj0rtorLH8xwPYAv8co.roa
Signing time:             Mon 26 Aug 2024 05:34:06 +0000
ROA not before:           Mon 26 Aug 2024 05:34:06 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        123.0.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8837 (0x2285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:34:06 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=81DD111E23F20E3D2BB68ACB1FCC703D802FF1CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:ac:a0:cc:be:0e:2c:cc:3f:d7:3c:69:9a:
                    01:bf:be:da:a9:b3:d6:24:60:81:d0:2c:6f:23:f1:
                    7c:f4:fc:fe:a5:3f:46:90:99:fa:fd:49:f9:df:09:
                    18:30:8b:65:97:45:0e:54:35:00:55:38:08:f9:34:
                    b8:ce:49:7c:16:34:68:68:28:24:d2:fe:c0:1b:7e:
                    2b:a6:c4:da:b6:91:3c:b7:04:ba:74:1d:df:fa:1f:
                    b5:4e:83:83:49:31:be:13:d3:53:e9:7a:f7:aa:f2:
                    56:ce:66:38:56:77:c6:03:32:bb:af:f7:fb:10:9f:
                    62:ca:cd:9c:8e:6b:9b:a3:be:d4:79:9c:0b:fa:ca:
                    e5:c1:69:fb:45:69:20:9b:0f:4f:12:4d:12:86:c5:
                    b2:cf:34:c9:74:7f:87:9a:71:bf:cc:f1:a4:d8:a9:
                    21:a1:9d:1e:f1:aa:6c:44:72:9f:7c:ea:a6:b8:94:
                    98:bd:8a:61:a8:c9:e2:d9:63:a5:a1:4b:62:dd:7d:
                    5e:ef:9e:cb:f4:e2:94:87:df:fc:3a:bb:d2:2a:54:
                    49:21:a6:6f:7a:f5:31:1f:31:9b:51:24:fe:e0:b3:
                    b1:15:fd:70:8e:6f:e0:fd:1e:75:77:10:43:62:0e:
                    f4:ec:3d:99:78:fd:0c:60:61:b5:93:46:aa:ce:03:
                    24:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DD:11:1E:23:F2:0E:3D:2B:B6:8A:CB:1F:CC:70:3D:80:2F:F1:CA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gd0RHiPyDj0rtorLH8xwPYAv8co.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:9f:c8:e0:e3:b8:07:4c:13:9a:d0:d6:d5:87:7b:6b:4b:a9:
         87:33:9e:18:8a:e3:f0:af:05:7f:e8:66:ce:71:c4:4d:69:b8:
         30:b5:a8:62:f2:a4:e4:6a:51:ad:9d:b8:e8:97:a2:72:5a:4b:
         84:58:4e:1f:53:11:38:ae:97:bb:8d:98:96:8a:80:e3:3e:48:
         f7:e0:0c:3f:65:0b:73:7e:22:1d:91:87:03:43:c3:7d:54:4d:
         2a:ad:b2:32:0a:1e:f6:2c:17:41:71:d6:86:67:da:e2:72:96:
         16:a7:71:74:44:98:7d:de:0f:bf:c4:fc:18:ff:46:3d:92:cb:
         93:e0:f7:67:5c:41:c0:7b:8c:38:74:40:05:79:b7:cc:2a:dc:
         c4:f6:9c:c6:1a:5d:6c:84:c6:3a:b5:3c:49:20:c4:73:3d:8c:
         26:f0:48:a7:ca:19:18:0e:22:24:e1:b1:ef:13:f7:8e:27:96:
         1b:1c:08:e3:66:0d:cc:c0:5a:83:cd:1f:01:2c:ad:29:1a:1f:
         6f:75:4a:68:ee:12:2c:d8:79:de:7e:70:a4:71:5b:36:db:07:
         67:f4:73:af:82:94:4a:51:c1:1e:f6:94:9e:ef:5f:d9:60:24:
         ca:03:05:d2:b8:c6:59:65:35:01:c7:3a:35:dc:7e:f7:ce:a1:
         51:6a:95:43
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIoUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTM0MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgxREQxMTFFMjNGMjBF
M0QyQkI2OEFDQjFGQ0M3MDNEODAyRkYxQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr9aygzL4OLMw/1zxpmgG/vtqps9YkYIHQLG8j8Xz0/P6lP0aQ
mfr9SfnfCRgwi2WXRQ5UNQBVOAj5NLjOSXwWNGhoKCTS/sAbfiumxNq2kTy3BLp0
Hd/6H7VOg4NJMb4T01Ppeveq8lbOZjhWd8YDMruv9/sQn2LKzZyOa5ujvtR5nAv6
yuXBaftFaSCbD08STRKGxbLPNMl0f4eacb/M8aTYqSGhnR7xqmxEcp986qa4lJi9
imGoyeLZY6WhS2LdfV7vnsv04pSH3/w6u9IqVEkhpm969TEfMZtRJP7gs7EV/XCO
b+D9HnV3EENiDvTsPZl4/QxgYbWTRqrOAyT1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUgd0RHiPyDj0rtorLH8xwPYAv8cowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2dkMFJIaVB5RGowcnRvckxI
OHh3UFlBdjhjby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7
ACgwDQYJKoZIhvcNAQELBQADggEBABefyODjuAdME5rQ1tWHe2tLqYcznhiK4/Cv
BX/oZs5xxE1puDC1qGLypORqUa2duOiXonJaS4RYTh9TETiul7uNmJaKgOM+SPfg
DD9lC3N+Ih2RhwNDw31UTSqtsjIKHvYsF0Fx1oZn2uJylhancXREmH3eD7/E/Bj/
Rj2Sy5Pg92dcQcB7jDh0QAV5t8wq3MT2nMYaXWyExjq1PEkgxHM9jCbwSKfKGRgO
IiThse8T944nlhscCONmDczAWoPNHwEsrSkaH291SmjuEizYed5+cKRxWzbbB2f0
c6+ClEpRwR72lJ7vX9lgJMoDBdK4xlllNQHHOjXcfvfOoVFqlUM=
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:26 2024 by rpki-client on console-ams.rpki-client.org