Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rKPqHWehGSyJrj1fHpych5g9PxA.roa
File:                     rKPqHWehGSyJrj1fHpych5g9PxA.roa (raw, json)
Hash identifier:          L/JPDF9STD1qZFA22LvNlrpOi4LtCFaDUIHVIGBuAO4=
Subject key identifier:   AC:A3:EA:1D:67:A1:19:2C:89:AE:3D:5F:1E:9C:9C:87:98:3D:3F:10
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       21DE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rKPqHWehGSyJrj1fHpych5g9PxA.roa
Signing time:             Mon 26 Aug 2024 05:33:25 +0000
ROA not before:           Mon 26 Aug 2024 05:33:25 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8670 (0x21de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:25 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=ACA3EA1D67A1192C89AE3D5F1E9C9C87983D3F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d0:a4:9a:fd:5e:ae:2f:03:98:11:cc:15:20:
                    55:59:3a:ae:2f:7b:d4:87:88:ca:f7:6d:e6:ed:d9:
                    99:f8:aa:51:00:20:15:92:d5:a6:99:86:6d:28:72:
                    ce:63:ca:44:7c:96:4f:99:de:bb:07:0a:f7:0a:1a:
                    d5:b7:21:d6:e3:28:90:c9:c2:04:24:93:6a:53:35:
                    fd:69:bc:30:6f:3a:1b:a3:13:b6:de:86:7f:c8:05:
                    f7:b2:85:46:45:24:ae:20:9d:11:e6:cc:6c:12:b7:
                    c2:c8:de:30:b8:4c:9e:e7:0c:ca:ba:a0:47:9e:1b:
                    62:23:70:15:72:ed:bd:0b:0e:ce:32:a4:8c:c8:a9:
                    a8:ad:43:af:06:1f:82:0f:4f:af:0a:0b:0b:98:37:
                    33:f6:1f:7c:fb:0d:5b:92:5e:be:a0:26:0f:b0:0e:
                    89:54:9b:cc:e8:a7:b8:62:1b:ed:3c:fb:a8:83:f7:
                    3a:15:64:e0:de:31:f0:b9:bf:e2:1d:6b:7a:6b:b8:
                    3f:18:e6:e3:bb:ee:4f:40:9f:e9:18:e3:6d:26:8d:
                    16:dc:0c:7d:f9:ec:b7:af:78:24:94:22:44:20:26:
                    27:52:67:a8:f3:b8:1e:1a:e0:44:d9:6a:21:63:61:
                    80:18:77:60:b1:57:e6:a9:32:b8:38:2c:f8:61:f4:
                    35:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A3:EA:1D:67:A1:19:2C:89:AE:3D:5F:1E:9C:9C:87:98:3D:3F:10
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rKPqHWehGSyJrj1fHpych5g9PxA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:d9:85:a4:26:fe:f2:a5:2d:cf:3e:8e:02:13:3e:ae:a4:0a:
         58:35:e3:48:2c:44:50:09:b3:b3:ef:aa:67:58:ea:9d:47:b6:
         77:00:74:34:d2:5f:94:61:d9:15:38:02:92:70:25:1a:b7:94:
         cd:74:70:0d:98:43:0e:4c:7a:3e:a1:5d:0d:e2:2e:f7:cb:38:
         81:6b:0c:90:61:1f:00:da:9b:c4:85:47:b8:19:fa:ff:ce:55:
         cc:91:e8:54:22:b2:0a:48:31:2f:12:ee:ca:99:91:d0:32:60:
         1d:e2:4d:07:e6:7c:a8:dd:10:37:b0:a0:69:1b:4f:13:e9:a2:
         8e:f1:f6:48:d4:53:b5:0c:26:b4:48:ac:2e:2b:98:06:1e:d0:
         ce:22:31:9d:a0:5c:a8:21:52:79:5c:bd:af:4b:2d:24:75:b1:
         7c:01:67:7f:23:5c:73:c0:2a:6a:d1:9f:29:8e:70:23:ae:6b:
         3b:88:b3:ff:e9:6e:5d:cf:c5:47:a4:f9:29:d1:0b:12:d6:5a:
         bc:0f:a4:f2:e4:ec:86:f1:27:86:36:89:5a:ac:90:fd:1c:95:
         ad:87:b6:96:ca:46:c1:c7:bf:95:08:71:4f:bb:3b:6c:5a:40:
         0a:ba:92:dd:aa:13:28:dc:03:74:a9:a5:dc:41:ba:89:1b:be:
         9d:84:82:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:41 2024 by rpki-client on console-ams.rpki-client.org