Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xFCdyVfbzUraA-2TV04lm_cm1C0.roa
File:                     xFCdyVfbzUraA-2TV04lm_cm1C0.roa (raw, json)
Hash identifier:          eLm+Mi8HCh7hXpjHjeBWdBibAAe8Pesy5x1mdkvFjj0=
Subject key identifier:   C4:50:9D:C9:57:DB:CD:4A:DA:03:ED:93:57:4E:25:9B:F7:26:D4:2D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2240
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xFCdyVfbzUraA-2TV04lm_cm1C0.roa
Signing time:             Mon 26 Aug 2024 05:33:49 +0000
ROA not before:           Mon 26 Aug 2024 05:33:49 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24163
IP address blocks:        61.60.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8768 (0x2240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:33:49 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C4509DC957DBCD4ADA03ED93574E259BF726D42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:51:8d:07:67:70:85:79:32:d4:9c:fc:bf:
                    6a:0d:7d:ae:a3:dd:c3:5b:4e:0f:ed:9b:60:b5:b4:
                    82:30:fb:9b:17:fb:44:19:5a:db:19:6a:d0:60:b0:
                    4b:f3:55:3e:10:bd:00:04:63:41:f1:c6:8b:62:f1:
                    04:8c:5a:b7:f5:8b:28:f2:29:b1:6f:14:05:29:44:
                    4b:87:5a:e2:9a:b5:dd:97:e0:5e:8e:93:81:f8:6a:
                    38:0f:d8:2d:a9:4a:db:0c:97:74:3d:87:13:9b:b3:
                    fb:f1:af:29:de:71:01:38:3f:d9:00:22:8f:fd:20:
                    cd:31:94:7f:20:ec:5c:9a:db:9a:72:27:d8:e1:0a:
                    19:fb:99:b3:61:7f:e4:b2:33:53:ee:cc:8a:94:d0:
                    59:97:8f:7e:27:90:8f:36:3f:2d:e3:2c:80:5e:32:
                    da:a1:88:5c:11:4d:f2:bc:7a:c5:26:f6:79:46:cf:
                    93:bc:4e:93:c0:7d:ba:df:62:b1:3f:2e:45:cb:2c:
                    39:c9:29:12:99:a0:4a:d7:98:ec:00:41:a2:79:98:
                    d8:7f:e6:80:04:5f:35:43:e2:07:10:ab:4e:70:5b:
                    4b:e0:1a:2d:49:f1:4c:7e:e1:4a:0a:97:48:a6:dd:
                    90:71:84:ef:b2:07:e0:80:82:77:2f:5e:da:c3:40:
                    19:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:50:9D:C9:57:DB:CD:4A:DA:03:ED:93:57:4E:25:9B:F7:26:D4:2D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xFCdyVfbzUraA-2TV04lm_cm1C0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:34:86:0b:3c:5a:65:f3:37:1b:a9:c4:be:d3:27:06:33:01:
         75:b5:fd:12:ac:ce:e5:1e:72:37:91:bb:10:5d:4a:39:fe:55:
         49:93:51:58:c0:f0:cb:e8:42:84:4a:0a:14:e4:7f:58:f1:80:
         03:0d:69:e9:e5:ca:30:22:e5:4a:3d:70:10:20:3a:f9:ab:74:
         b1:78:d5:97:d2:33:93:68:48:55:ac:bb:8b:6d:73:9f:26:4b:
         4f:64:5c:1f:cb:ec:4d:cc:46:d3:b0:1d:30:4e:c8:f9:fa:a9:
         f9:97:f4:e5:67:6d:36:34:82:76:9b:de:67:ae:6e:6f:16:78:
         79:a9:cd:74:90:08:ad:f0:1a:ae:d0:2f:c3:ca:ca:5d:07:bf:
         c0:6b:df:51:66:04:c8:ff:cd:9e:91:f1:08:b4:29:2c:74:bc:
         b8:df:71:69:9a:88:e1:78:fc:3a:2a:41:1f:cb:7f:4f:00:4f:
         f0:ed:10:b4:db:02:7d:77:5f:af:ad:52:26:c8:22:47:bc:98:
         af:2c:0e:6d:a2:a9:38:9c:c2:18:97:f6:72:2e:22:fd:85:f9:
         6c:e5:56:33:62:90:64:27:18:fe:d4:a9:77:a7:c4:ed:31:97:
         7a:c5:4a:f4:40:39:80:24:c0:a1:05:c3:46:24:a0:88:2d:d5:
         c6:bd:60:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:56 2024 by rpki-client on console-fra.rpki-client.org