Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yablk_qgSkPaY1eT-7F2nRYL8u4.roa
File:                     yablk_qgSkPaY1eT-7F2nRYL8u4.roa (raw, json)
Hash identifier:          MLYOfRIju5oh/yVFgJ+e/vqLCLOxNlO0tZRPAUpR1Uk=
Subject key identifier:   C9:A6:E5:93:FA:A0:4A:43:DA:63:57:93:FB:B1:76:9D:16:0B:F2:EE
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2164
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yablk_qgSkPaY1eT-7F2nRYL8u4.roa
Signing time:             Mon 26 Aug 2024 05:32:57 +0000
ROA not before:           Mon 26 Aug 2024 05:32:57 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        49.158.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8548 (0x2164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 26 05:32:57 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C9A6E593FAA04A43DA635793FBB1769D160BF2EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:e8:3d:41:ed:28:a7:a1:ff:6f:04:17:f9:
                    49:13:ee:65:7a:e1:19:b7:26:54:2d:ea:07:15:7f:
                    d6:75:f3:c5:bd:9f:79:d4:ec:42:63:01:17:4c:1b:
                    74:bd:de:1e:59:44:1f:88:8b:ea:49:9a:ec:08:eb:
                    4b:08:69:22:d6:9f:ca:d6:67:3e:27:5b:85:0e:da:
                    e8:76:ba:48:7a:f1:0f:d2:cf:bf:91:76:c7:97:24:
                    2c:ee:ec:ac:3a:1b:49:a6:71:5a:f1:f7:ec:ef:8a:
                    7c:75:d5:06:3b:ee:9a:da:37:8c:76:79:94:64:f4:
                    27:ed:7c:6f:07:23:51:fb:75:03:4a:b4:10:b9:51:
                    53:72:5a:c1:04:6f:c0:06:42:ee:77:ff:30:14:22:
                    57:f1:cd:c0:c1:f0:7b:4c:6f:df:d0:2b:de:ed:d6:
                    3a:79:a7:43:0b:ee:7c:88:fc:3e:96:84:58:c4:f5:
                    f0:6d:53:16:02:63:34:f0:df:46:06:61:a8:8b:b2:
                    a8:3f:87:22:51:07:ab:7e:53:d9:57:96:84:78:c9:
                    20:68:f4:0e:f3:4a:37:7b:a7:3c:8a:52:cc:a9:4f:
                    56:7f:21:81:a8:28:22:9c:b0:e3:c1:c6:ea:6b:24:
                    c4:1a:7d:78:29:b1:32:1a:40:f9:fb:88:4e:2d:11:
                    de:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A6:E5:93:FA:A0:4A:43:DA:63:57:93:FB:B1:76:9D:16:0B:F2:EE
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yablk_qgSkPaY1eT-7F2nRYL8u4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:b8:d0:6e:18:95:93:e3:68:36:1a:0b:59:08:df:6b:22:3d:
         4a:81:18:49:17:c4:29:7c:ac:9b:13:9f:19:fb:fd:d4:1f:29:
         38:5e:ea:17:0a:d9:7e:d9:c3:49:48:eb:59:fe:06:6c:68:44:
         ed:57:3e:fa:9c:68:23:ad:f3:27:91:b4:4d:49:66:0c:65:b6:
         e5:2f:da:cf:3f:d6:e3:fb:ca:a1:d4:47:a1:e6:15:32:a9:2b:
         92:36:e8:64:c3:9c:f0:da:a2:0c:1d:e6:52:f9:df:53:7b:06:
         52:71:8b:6d:92:5b:5a:a7:49:9f:3d:b3:68:67:5d:ee:6d:2f:
         c1:65:14:7c:a5:73:ba:83:3d:26:e9:ee:33:b0:22:d1:47:1b:
         8a:8e:dd:99:10:5e:c8:f1:cf:50:a6:0d:11:15:e2:cb:4e:a1:
         64:00:f8:68:27:2b:d7:1d:87:58:5b:93:e1:cc:b3:11:a2:a6:
         2c:7d:03:17:5a:2b:8a:73:cf:eb:88:ef:d3:b8:32:21:f2:94:
         fa:10:30:38:89:76:d9:5b:f5:f6:55:da:05:b2:94:ea:08:a1:
         45:4b:f3:be:e5:5c:0c:8e:07:ce:12:ad:9f:94:61:7d:cf:9b:
         d2:aa:a4:de:44:cd:61:32:c7:c7:a1:9d:2b:11:ac:71:ad:fd:
         a3:18:43:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:13:19 2024 by rpki-client on console-fra.rpki-client.org