Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WOtb-bIxn5CC4jSe2nmyAN5s9CY.roa
File:                     WOtb-bIxn5CC4jSe2nmyAN5s9CY.roa (raw, json)
Hash identifier:          olaOBGXaXKy86TZPWgF3DgCGZMDvYORJM+b79c9EGJA=
Subject key identifier:   58:EB:5B:F9:B2:31:9F:90:82:E2:34:9E:DA:79:B2:00:DE:6C:F4:26
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       25A7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WOtb-bIxn5CC4jSe2nmyAN5s9CY.roa
Signing time:             Mon 21 Jul 2025 07:14:42 +0000
ROA not before:           Mon 21 Jul 2025 07:14:42 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24165
IP address blocks:        61.61.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 03:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9639 (0x25a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jul 21 07:14:42 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=58EB5BF9B2319F9082E2349EDA79B200DE6CF426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:93:1f:df:57:35:74:d5:f3:57:0f:0b:75:
                    cb:5e:6d:33:54:75:53:6f:ec:57:34:8f:cf:86:8c:
                    0b:75:f8:00:24:46:d2:d0:f5:5f:1d:5e:5b:cf:d1:
                    02:ca:87:2d:f9:b0:77:b8:b1:7d:f7:84:71:0f:a5:
                    6f:4f:1e:67:0e:0f:ee:f0:79:1b:c9:a8:17:5f:07:
                    e6:8f:f2:de:4c:68:68:81:7d:1d:f3:ff:34:12:80:
                    05:be:ee:56:ba:c3:72:88:68:e7:16:42:93:a5:1b:
                    df:c4:35:c0:ed:bd:1e:49:92:ec:e4:15:bc:4f:e5:
                    f1:b9:b5:50:7d:4c:48:88:10:21:57:5b:ee:99:18:
                    1b:e7:02:e5:7e:1a:df:b4:6c:7c:42:85:4e:b4:b5:
                    9e:77:31:38:5a:be:1b:51:2a:c3:b8:04:8e:0d:14:
                    b4:ad:32:de:00:79:cf:d9:98:15:21:35:1b:81:4e:
                    4d:59:18:da:fa:01:88:81:8d:f1:cf:79:8c:a4:24:
                    43:4c:dd:8d:0e:34:84:5e:b5:8a:c8:58:e8:a9:98:
                    81:f1:76:36:7c:60:ec:2b:f0:bc:fc:fb:42:af:49:
                    fe:5d:e6:4c:77:41:8c:97:29:4f:7f:0d:66:e3:6e:
                    b5:e7:eb:27:c1:41:3f:3c:0b:65:4c:9d:88:fd:68:
                    b5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EB:5B:F9:B2:31:9F:90:82:E2:34:9E:DA:79:B2:00:DE:6C:F4:26
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WOtb-bIxn5CC4jSe2nmyAN5s9CY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:e5:42:d4:71:e6:59:6a:98:72:74:c8:03:d6:9b:24:8c:14:
         e1:f8:c2:1c:51:27:b2:28:e6:b3:1a:c8:d6:35:20:44:97:e1:
         89:65:ca:d6:c0:50:24:ff:7b:97:22:ed:95:33:0b:03:2a:1d:
         f5:74:f9:02:60:10:9a:e1:aa:41:4d:59:7a:75:a2:7b:b8:97:
         00:64:39:b3:d8:42:c8:28:98:e3:99:1c:a5:ba:65:81:66:34:
         58:2b:b9:a1:bd:9c:6f:f0:74:38:a4:a0:df:5f:37:c6:b0:b2:
         be:0a:3f:20:2b:66:88:33:e6:cb:7b:fd:35:03:36:89:96:46:
         a4:f4:7d:d2:f7:43:3d:da:5a:b5:c8:6a:a2:c6:44:9e:30:57:
         fd:43:2b:a5:2b:1e:18:89:79:66:ca:98:7f:a2:6b:40:92:20:
         17:77:0f:c4:eb:95:8f:70:8c:94:06:9c:9c:9b:0c:31:89:b5:
         5f:05:d0:ff:be:3f:74:e3:66:5b:2b:f8:16:ff:0b:6f:44:6d:
         5d:c2:e8:d0:2d:96:7b:77:32:15:e8:d6:d8:2c:24:33:ea:17:
         c5:b9:b7:01:18:fd:8e:23:62:32:aa:e7:c0:08:24:2e:46:5e:
         b7:0e:3f:20:5b:a2:94:82:8e:48:cc:a9:6e:56:29:8a:91:31:
         25:58:79:de
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJacwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA3MjEw
NzE0NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU4RUI1QkY5QjIzMTlG
OTA4MkUyMzQ5RURBNzlCMjAwREU2Q0Y0MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjz5Mf31c1dNXzVw8LdctebTNUdVNv7Fc0j8+GjAt1+AAkRtLQ
9V8dXlvP0QLKhy35sHe4sX33hHEPpW9PHmcOD+7weRvJqBdfB+aP8t5MaGiBfR3z
/zQSgAW+7la6w3KIaOcWQpOlG9/ENcDtvR5JkuzkFbxP5fG5tVB9TEiIECFXW+6Z
GBvnAuV+Gt+0bHxChU60tZ53MThavhtRKsO4BI4NFLStMt4Aec/ZmBUhNRuBTk1Z
GNr6AYiBjfHPeYykJENM3Y0ONIRetYrIWOipmIHxdjZ8YOwr8Lz8+0KvSf5d5kx3
QYyXKU9/DWbjbrXn6yfBQT88C2VMnYj9aLXHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWOtb+bIxn5CC4jSe2nmyAN5s9CYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1dPdGItYkl4bjVDQzRqU2Uy
bm15QU41czlDWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9
PeQwDQYJKoZIhvcNAQELBQADggEBAD/lQtRx5llqmHJ0yAPWmySMFOH4whxRJ7Io
5rMayNY1IESX4YllytbAUCT/e5ci7ZUzCwMqHfV0+QJgEJrhqkFNWXp1onu4lwBk
ObPYQsgomOOZHKW6ZYFmNFgruaG9nG/wdDikoN9fN8awsr4KPyArZogz5st7/TUD
NomWRqT0fdL3Qz3aWrXIaqLGRJ4wV/1DK6UrHhiJeWbKmH+ia0CSIBd3D8TrlY9w
jJQGnJybDDGJtV8F0P++P3TjZlsr+Bb/C29EbV3C6NAtlnt3MhXo1tgsJDPqF8W5
twEY/Y4jYjKq58AIJC5GXrcOPyBbopSCjkjMqW5WKYqRMSVYed4=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:38:52 2025 by rpki-client