Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0UhVH_CeQyX0seY_AEPR6-G0-7I.roa
File:                     0UhVH_CeQyX0seY_AEPR6-G0-7I.roa (raw, json)
Hash identifier:          i4kha/06YTKs1PtYgu8uWSh+JW2xZjtjU4dLK6AwSNQ=
Subject key identifier:   D1:48:55:1F:F0:9E:43:25:F4:B1:E6:3F:00:43:D1:EB:E1:B4:FB:B2
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       243F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0UhVH_CeQyX0seY_AEPR6-G0-7I.roa
Signing time:             Mon 10 Feb 2025 14:18:26 +0000
ROA not before:           Mon 10 Feb 2025 14:18:26 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     4662
IP address blocks:        61.58.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9279 (0x243f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:26 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D148551FF09E4325F4B1E63F0043D1EBE1B4FBB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:9f:4b:da:42:57:12:a7:a0:a7:bd:92:3b:
                    29:97:e2:95:87:11:67:69:34:56:11:e0:a6:d3:46:
                    67:2a:14:f2:81:24:35:6f:74:f7:35:7b:ca:06:d2:
                    13:92:21:63:2f:bd:9e:9f:1c:79:a2:3a:e9:a8:34:
                    81:eb:19:6b:f8:ba:2f:3b:91:24:8a:f7:1a:3f:ab:
                    50:9c:d3:13:c4:39:85:37:a0:7e:5e:6e:4a:9a:81:
                    da:78:3d:51:2a:0c:20:3b:69:b3:3e:22:b7:ac:fb:
                    23:7b:b2:8a:ec:f5:32:91:13:2f:16:62:70:5e:d8:
                    8e:1e:b0:9d:ea:33:9b:53:7b:f3:77:de:78:4e:0a:
                    5b:6e:1d:41:b8:ad:6b:d9:7d:54:c6:9a:bd:3d:46:
                    81:a8:35:ac:c1:8d:8a:1f:9d:70:a8:97:77:35:14:
                    c9:af:cc:9b:d7:e3:4d:49:5a:da:40:62:15:c2:07:
                    ad:91:58:8d:37:e1:70:04:e3:13:06:4b:c7:95:2f:
                    ed:7f:42:d7:51:c8:36:ac:d3:1d:ea:95:3e:87:61:
                    c4:77:de:82:ff:8f:d0:a0:d3:19:e8:e4:62:34:46:
                    30:4e:ce:54:27:aa:46:dc:a1:e6:6c:80:f5:96:a4:
                    b6:de:03:57:93:c8:80:18:b8:d7:d1:ba:41:ca:97:
                    a2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:48:55:1F:F0:9E:43:25:F4:B1:E6:3F:00:43:D1:EB:E1:B4:FB:B2
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0UhVH_CeQyX0seY_AEPR6-G0-7I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:01:e0:48:34:1c:80:67:e8:b2:a9:76:b4:e1:5b:5d:ee:68:
         41:f0:ca:85:dd:9e:28:e2:fd:e4:38:e7:6d:0d:75:0d:12:8c:
         f9:ff:aa:85:0c:d8:fe:2e:a8:d3:34:d7:42:b4:1d:86:39:8a:
         58:62:6c:11:f3:86:38:c1:ac:29:0c:73:0c:26:66:33:53:69:
         e5:05:96:1f:96:6a:d2:d7:80:7c:8d:9d:b0:04:0f:75:82:7a:
         bf:95:e5:32:15:60:71:0f:33:0d:ed:2c:53:5b:98:aa:7d:e3:
         69:12:87:99:62:62:21:6b:44:9d:21:4b:0e:62:d4:ad:5e:5f:
         30:2e:0a:6d:28:28:c4:f7:4a:a0:bd:f2:c2:03:b2:c2:c4:a8:
         c4:94:3f:c6:b7:57:23:0d:ef:b8:77:bf:44:b0:c1:99:15:ad:
         dc:48:3a:87:ba:ed:01:52:78:01:90:4f:47:79:c2:3a:54:08:
         00:05:09:13:94:55:2f:15:2a:82:1c:b8:c1:82:a4:17:48:d2:
         20:fd:36:73:51:c5:aa:42:3b:e4:44:ff:91:fd:d4:d1:a9:75:
         2b:7b:78:7e:72:7c:dd:91:3e:a8:e4:8c:00:9f:63:74:b1:58:
         c5:19:95:26:8c:3b:a6:b6:2e:39:c9:ee:80:e2:a4:cb:f0:ff:
         56:0b:16:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:48:02 2025 by rpki-client