Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0VKGyHKO0vy7Ct3PZIg7yG4dHss.roa
File:                     0VKGyHKO0vy7Ct3PZIg7yG4dHss.roa (raw, json)
Hash identifier:          GohKROuSe6h0Sb7mpYKXIjjSHW1V8fDbonn3injdE30=
Subject key identifier:   D1:52:86:C8:72:8E:D2:FC:BB:0A:DD:CF:64:88:3B:C8:6E:1D:1E:CB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2373
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0VKGyHKO0vy7Ct3PZIg7yG4dHss.roa
Signing time:             Mon 10 Feb 2025 14:17:36 +0000
ROA not before:           Mon 10 Feb 2025 14:17:36 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9075 (0x2373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:17:36 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D15286C8728ED2FCBB0ADDCF64883BC86E1D1ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:46:7a:9e:a4:65:7b:33:b5:bc:f4:95:35:13:
                    ba:7e:1e:ec:8b:5c:02:eb:44:4a:c2:e4:8b:81:63:
                    ce:6e:12:d9:0c:eb:58:3c:5d:dd:1d:2a:2d:a6:c3:
                    fb:19:ea:2d:e3:6f:e2:2e:75:0d:ff:dc:a0:5c:30:
                    5b:26:96:57:54:30:67:46:88:40:36:62:8c:b6:34:
                    1c:d6:b9:56:1f:ee:c1:a1:f1:06:6b:0b:36:c2:45:
                    28:da:0b:e1:de:4b:08:58:f4:03:c2:d2:8c:32:ca:
                    7c:fa:e6:4f:71:b4:dc:3a:e7:60:c0:d4:d5:42:d5:
                    21:a9:2d:7f:ca:8b:6f:1b:13:2c:93:8f:94:8c:c5:
                    37:f3:75:d1:d5:13:93:bb:95:4e:88:d4:0d:6a:25:
                    e7:68:bc:27:25:39:03:98:90:9d:41:a2:4d:ba:f6:
                    68:ae:13:a6:55:7d:2b:1c:c4:a5:ca:ad:7d:59:bd:
                    65:13:67:00:7d:b5:be:3e:e0:54:e9:5a:ce:09:fd:
                    dc:00:0d:fd:8f:97:0c:7a:7e:b0:49:c4:79:ee:2c:
                    5c:01:b3:dc:86:40:c8:eb:01:d6:a8:ac:f5:aa:bb:
                    09:73:dd:4a:30:ca:08:bb:76:08:0d:bb:48:9b:87:
                    1c:3f:b1:c9:a3:5f:b3:10:78:a9:1a:a8:b5:80:9f:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:52:86:C8:72:8E:D2:FC:BB:0A:DD:CF:64:88:3B:C8:6E:1D:1E:CB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0VKGyHKO0vy7Ct3PZIg7yG4dHss.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         61:a6:6d:a1:22:00:d0:e7:7f:d0:9e:b3:ca:51:dd:0e:07:4c:
         c2:e0:01:ea:4f:71:59:24:60:c3:59:1c:a7:53:5b:27:75:d8:
         13:c5:9d:31:82:1c:ba:bf:3e:ac:d4:35:51:28:68:cb:0a:4d:
         63:1d:9c:0b:df:17:5a:e2:d1:90:62:19:49:85:d3:12:0b:48:
         f1:ce:3d:90:ff:87:e8:0d:f9:6b:b9:dc:35:76:bb:d2:7b:95:
         d3:dd:2a:6c:1d:e1:91:43:a3:92:b6:03:bf:70:ee:78:38:28:
         91:a0:d2:ae:71:6d:c1:73:ed:84:24:d3:ca:fc:9a:ee:d1:64:
         55:94:bc:6d:ce:3e:44:05:8a:33:4f:93:4a:ff:60:0d:02:1c:
         4a:1c:5b:4e:79:fe:83:ce:95:6a:54:4a:7e:48:e2:95:a3:ee:
         2e:43:66:00:00:a1:1f:b2:69:02:4a:9e:46:19:56:50:f5:14:
         d7:e0:3e:e1:22:94:57:a1:f3:19:f6:b5:9e:33:08:24:5a:52:
         f0:54:77:ca:70:20:07:f8:6e:a2:43:ce:86:fe:d4:1f:33:2f:
         f5:2b:f7:54:76:b3:47:ef:a4:e7:41:1e:70:cb:08:6c:e2:9e:
         1f:83:e7:78:0f:53:c8:27:79:fd:8f:af:af:92:ed:24:1b:07:
         f0:08:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:47:18 2025 by rpki-client