Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0BVg14OBro4uNUTCwbetcE7Akc0.roa
File:                     0BVg14OBro4uNUTCwbetcE7Akc0.roa (raw, json)
Hash identifier:          sYID9y+WsSSXAA06X4K2ZhT+/MtMt6VnlTUzmAA2ma4=
Subject key identifier:   D0:15:60:D7:83:81:AE:8E:2E:35:44:C2:C1:B7:AD:70:4E:C0:91:CD
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2422
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0BVg14OBro4uNUTCwbetcE7Akc0.roa
Signing time:             Mon 10 Feb 2025 14:18:18 +0000
ROA not before:           Mon 10 Feb 2025 14:18:18 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24165
IP address blocks:        61.64.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9250 (0x2422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:18 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D01560D78381AE8E2E3544C2C1B7AD704EC091CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fa:d1:e1:10:bc:f9:ce:0f:80:74:51:77:25:
                    62:fa:4b:7d:53:f3:7f:34:6f:72:a9:d0:98:2e:30:
                    1e:d4:39:c1:fe:5f:19:93:65:a1:e8:0f:89:7a:2c:
                    0e:27:61:1b:74:67:27:6b:9c:4a:54:89:d7:e1:fa:
                    d2:20:20:58:bc:96:75:69:50:12:13:36:78:bf:61:
                    81:f1:23:fd:e7:3c:3c:e5:45:4d:18:0b:8f:96:fe:
                    8a:5d:28:84:8c:a0:5b:d4:5c:ad:a7:ff:52:ba:61:
                    e7:55:40:ff:70:a5:15:00:f0:c1:4a:95:3c:a9:e7:
                    1b:98:0a:08:8c:f9:ce:25:46:b7:12:54:95:65:eb:
                    b8:cb:43:87:84:59:5a:81:99:c7:4f:5b:3e:20:41:
                    19:30:f8:2e:b5:d2:14:b2:5d:45:80:87:34:8c:53:
                    fa:ff:e6:ea:89:f5:c5:b2:88:16:97:1a:f6:8b:2e:
                    4d:58:aa:7b:77:69:8a:1b:de:aa:4a:db:13:32:0f:
                    ad:e2:17:bd:a2:57:87:42:8f:58:ba:43:89:13:67:
                    ee:fe:81:6e:9b:b5:a9:f7:55:a4:b1:1d:4b:82:8e:
                    4a:a3:ac:1c:6e:7c:49:e3:29:19:a0:e6:65:af:fe:
                    fa:27:46:a6:cb:17:ad:fc:9f:b1:f5:0d:98:d5:a7:
                    0a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:15:60:D7:83:81:AE:8E:2E:35:44:C2:C1:B7:AD:70:4E:C0:91:CD
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0BVg14OBro4uNUTCwbetcE7Akc0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:64:f6:33:cc:74:be:61:9d:2a:d3:40:39:05:90:51:4b:7a:
         6c:29:0a:38:4f:9e:cc:73:fa:6c:50:88:94:2a:26:aa:1b:c4:
         ac:1a:8d:d3:aa:11:1c:c6:ab:b4:ed:31:89:ec:2a:ff:8e:5e:
         d5:77:43:2a:ac:23:f3:33:2a:30:3e:b9:ba:75:3d:7f:ae:1b:
         77:b4:aa:e5:1e:d8:f3:f0:e0:ec:43:4e:da:4d:4b:e9:95:63:
         e0:e8:ff:c1:6f:b0:c7:25:2c:32:11:0e:d0:e9:3e:05:e1:63:
         ee:bb:c5:74:c6:f4:32:f6:07:7e:2a:c8:5d:5f:75:79:4d:67:
         6a:93:dd:0b:11:f1:1c:ea:05:75:48:73:ef:0f:18:30:bb:2f:
         24:1f:a7:dd:0b:c2:5c:54:5a:a0:fc:e8:c8:a1:fe:d3:b7:6b:
         2f:e3:9e:98:60:e8:24:f7:87:db:4c:87:02:d6:68:37:95:76:
         81:0b:c8:80:e1:66:0f:2f:e4:35:06:c5:26:88:d9:e5:6b:ac:
         27:f7:64:83:ef:88:f6:2c:cd:3d:ff:62:2b:f9:b7:ad:7a:45:
         78:56:ca:a4:d6:2d:a2:30:bb:f7:5d:9d:00:2b:ec:f0:81:79:
         4a:c2:b3:1a:70:6a:30:0b:c0:17:d8:e2:04:c8:98:4f:f9:dd:
         69:83:2b:9f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJCIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE4MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQwMTU2MEQ3ODM4MUFF
OEUyRTM1NDRDMkMxQjdBRDcwNEVDMDkxQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDt+tHhELz5zg+AdFF3JWL6S31T8380b3Kp0JguMB7UOcH+XxmT
ZaHoD4l6LA4nYRt0ZydrnEpUidfh+tIgIFi8lnVpUBITNni/YYHxI/3nPDzlRU0Y
C4+W/opdKISMoFvUXK2n/1K6YedVQP9wpRUA8MFKlTyp5xuYCgiM+c4lRrcSVJVl
67jLQ4eEWVqBmcdPWz4gQRkw+C610hSyXUWAhzSMU/r/5uqJ9cWyiBaXGvaLLk1Y
qnt3aYob3qpK2xMyD63iF72iV4dCj1i6Q4kTZ+7+gW6btan3VaSxHUuCjkqjrBxu
fEnjKRmg5mWv/vonRqbLF638n7H1DZjVpwrPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU0BVg14OBro4uNUTCwbetcE7Akc0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzBCVmcxNE9Ccm80dU5VVEN3
YmV0Y0U3QWtjMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9
QAgwDQYJKoZIhvcNAQELBQADggEBABdk9jPMdL5hnSrTQDkFkFFLemwpCjhPnsxz
+mxQiJQqJqobxKwajdOqERzGq7TtMYnsKv+OXtV3QyqsI/MzKjA+ubp1PX+uG3e0
quUe2PPw4OxDTtpNS+mVY+Do/8FvsMclLDIRDtDpPgXhY+67xXTG9DL2B34qyF1f
dXlNZ2qT3QsR8RzqBXVIc+8PGDC7LyQfp90LwlxUWqD86Mih/tO3ay/jnphg6CT3
h9tMhwLWaDeVdoELyIDhZg8v5DUGxSaI2eVrrCf3ZIPviPYszT3/Yiv5t616RXhW
yqTWLaIwu/ddnQAr7PCBeUrCsxpwajALwBfY4gTImE/53WmDK58=
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:49:19 2025 by rpki-client