Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/36UGI2YpztW0kK5xVu078hZHYRU.roa
File:                     36UGI2YpztW0kK5xVu078hZHYRU.roa (raw, json)
Hash identifier:          Q3TxHPLdnathPcj30E9X9g8DHOoYbhhn2MEEyooBjK8=
Subject key identifier:   DF:A5:06:23:66:29:CE:D5:B4:90:AE:71:56:ED:3B:F2:16:47:61:15
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       246E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/36UGI2YpztW0kK5xVu078hZHYRU.roa
Signing time:             Mon 10 Feb 2025 14:18:37 +0000
ROA not before:           Mon 10 Feb 2025 14:18:37 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        103.225.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9326 (0x246e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:37 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=DFA506236629CED5B490AE7156ED3BF216476115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:b3:53:c3:7f:cb:b2:b1:59:12:5d:dd:13:
                    7e:49:b2:e1:cc:27:2c:50:80:c5:64:ab:09:4a:a3:
                    5b:87:a9:53:fe:3e:03:19:94:88:6c:d3:36:db:b8:
                    37:c7:6e:98:8c:e2:e1:00:65:65:74:50:d8:fc:44:
                    ba:74:f2:84:a6:7e:bd:dd:92:fb:ba:a1:a7:33:83:
                    93:8e:b9:52:c3:ae:34:c9:4a:ef:f0:ab:5e:86:2a:
                    2c:c8:3a:1e:2a:d3:5d:c9:7a:3e:47:b8:6c:d9:7d:
                    36:73:24:61:58:25:c6:90:0b:e0:9e:8d:38:8a:04:
                    36:ec:63:79:28:7e:2a:f9:b6:6d:cb:70:18:bc:e0:
                    1d:40:7f:32:9f:0f:30:6e:7c:b6:f7:4f:2a:35:06:
                    26:0b:da:c8:45:a5:3a:2f:61:21:b6:d0:9d:4f:d3:
                    27:14:d8:37:e3:df:2a:a7:3b:8b:c5:9d:38:b0:cc:
                    8f:c0:b9:ee:e5:a1:26:07:e8:d3:c5:aa:16:1f:4e:
                    cf:cd:5f:7c:b3:91:a4:3b:c4:2c:c7:e1:35:1d:94:
                    b0:6b:4c:be:dc:56:cc:32:cc:47:81:12:c0:d0:66:
                    44:f7:61:e2:55:4e:40:af:0c:ec:73:42:c3:53:55:
                    e8:dd:bd:b6:2d:98:d2:32:ea:6f:4a:2b:a7:66:fe:
                    e9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A5:06:23:66:29:CE:D5:B4:90:AE:71:56:ED:3B:F2:16:47:61:15
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/36UGI2YpztW0kK5xVu078hZHYRU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:28:53:31:6c:71:a9:42:5d:53:bc:3a:39:55:16:46:59:1c:
         f5:54:3f:9d:52:6b:5c:e7:01:e4:43:83:ac:44:75:ea:20:1a:
         6a:b6:fe:cf:6b:35:5d:07:bb:2f:0a:2d:cc:df:49:6f:36:6b:
         98:ac:f8:5f:79:a8:36:5f:c1:2f:98:45:7e:e1:94:2a:0f:23:
         0c:7b:00:c8:8e:0f:04:fb:6b:76:c2:0e:8e:b5:8d:87:ac:3d:
         34:d8:59:ba:ef:4c:b9:55:ab:d8:6e:e0:15:a9:a4:f1:55:00:
         42:d6:11:ae:8e:7b:fb:d2:88:e7:f0:22:fc:4f:a0:ed:d1:a4:
         29:ae:2f:a7:37:21:98:13:bd:e7:a1:5c:08:31:6a:7c:3e:98:
         24:60:df:ba:42:f7:d4:2e:64:7d:fa:90:d9:70:a3:72:3b:fd:
         bd:b3:4b:f0:8d:21:71:10:cf:ab:b9:1b:9a:44:d4:43:3a:49:
         13:66:0c:b9:17:12:e7:62:7b:61:81:8a:c1:ac:c0:88:18:7c:
         7e:31:a0:f4:ef:34:5f:f4:7b:97:74:33:ee:a9:46:34:62:8d:
         46:57:a0:d3:f0:ca:a1:0c:85:93:5f:46:a9:bb:c1:91:d0:b5:
         60:43:cb:fd:4f:2b:a3:da:dd:4b:37:08:bd:82:fb:61:d0:45:
         14:f9:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:42:05 2025 by rpki-client