Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v-pN_oMRMPutsiIzxp9DP6n4Vgc.roa
File:                     v-pN_oMRMPutsiIzxp9DP6n4Vgc.roa (raw, json)
Hash identifier:          ebSrBEgGnntr38scygZxEIoFATKxwAIntkayTGsTTic=
Subject key identifier:   BF:EA:4D:FE:83:11:30:FB:AD:B2:22:33:C6:9F:43:3F:A9:F8:56:07
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       21F0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v-pN_oMRMPutsiIzxp9DP6n4Vgc.roa
Signing time:             Mon 26 Aug 2024 05:33:29 +0000
ROA not before:           Mon 26 Aug 2024 05:33:29 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8688 (0x21f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:29 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=BFEA4DFE831130FBADB22233C69F433FA9F85607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:74:97:11:b2:6a:60:63:be:ac:d0:1e:c6:
                    ba:5f:c7:85:75:58:4f:33:92:bb:fb:22:92:0f:68:
                    6b:13:56:df:35:72:24:7e:be:96:5a:fa:8a:0a:04:
                    0d:92:60:71:f5:95:52:86:a7:1c:9f:66:59:5e:ee:
                    05:cd:ae:f1:48:89:ff:1e:ea:d9:78:32:07:94:e8:
                    23:c9:45:d4:d0:d9:54:b5:48:69:22:89:68:da:89:
                    ea:27:77:c2:a5:a2:66:6c:c1:31:ee:1c:7b:81:ec:
                    2a:ab:d4:84:93:87:2a:9d:a3:89:04:b0:5e:66:f2:
                    2b:2b:f5:65:0c:ab:18:b0:39:0e:01:bd:b7:d2:8b:
                    a5:77:4e:72:50:69:a3:f5:86:56:06:52:c5:91:6d:
                    1f:bb:30:d2:77:fb:5c:7e:c6:8a:c7:ad:6c:a7:5a:
                    eb:86:64:fd:ce:91:d5:2e:e7:69:37:61:e8:ce:0a:
                    30:40:6d:69:52:95:39:dd:b4:7a:80:72:24:af:c1:
                    e4:c5:dc:90:40:92:0f:c3:15:c4:a6:dd:a2:21:a8:
                    93:73:d6:ee:de:47:1c:cc:9e:59:58:a2:8f:4d:35:
                    3c:65:e0:ee:b7:13:e2:0b:47:4b:8c:cd:7d:84:52:
                    9b:f7:4d:11:e8:d9:13:05:db:2b:a2:b6:f7:d1:e3:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EA:4D:FE:83:11:30:FB:AD:B2:22:33:C6:9F:43:3F:A9:F8:56:07
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v-pN_oMRMPutsiIzxp9DP6n4Vgc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:86:14:b8:69:71:e6:b4:4d:e6:08:6a:dc:aa:61:a4:72:09:
         f3:fc:29:3a:e9:ef:02:df:e8:0d:fb:b9:f6:f2:09:06:1e:9a:
         40:80:cb:8e:0b:4a:94:37:81:ad:f2:d1:d3:5b:9e:9c:c7:f9:
         5a:2b:da:1b:7e:4b:93:63:7c:87:76:7c:b3:4a:72:88:bb:59:
         48:6e:f7:ea:5f:9c:41:d9:1d:47:b9:5d:ba:b2:9d:80:8a:a1:
         c9:13:47:9d:41:d2:98:a7:9a:ef:0d:2f:1b:02:8e:bd:1a:b7:
         39:1f:b9:fd:c6:a3:db:3c:2e:07:72:8d:93:ea:c5:e7:a5:75:
         9c:9d:00:1a:f0:7f:75:a6:b3:00:b4:0b:2a:58:af:ec:97:e4:
         f1:e7:9b:03:6b:fc:95:9a:72:d8:23:3d:60:04:61:47:a8:ff:
         3b:e3:97:c2:fc:0b:7f:28:36:00:7e:9e:98:84:81:aa:a8:20:
         3a:73:e8:93:54:26:6c:4b:de:64:ad:a3:b8:7e:17:7a:69:06:
         ed:78:b8:b3:5e:ab:46:f4:d5:de:69:47:bb:fb:34:7c:fd:14:
         48:c9:5c:9c:c6:d5:1f:5a:55:46:f3:98:bb:c7:85:1c:7b:55:
         92:fb:a8:0f:ca:28:be:ee:71:fe:91:52:30:89:8f:c7:2c:a9:
         42:cc:06:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:26 2024 by rpki-client on console-ams.rpki-client.org