Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4eDC-d_HGNqPSQeZwCHQ-U6navs.roa
File:                     4eDC-d_HGNqPSQeZwCHQ-U6navs.roa (raw, json)
Hash identifier:          f1BaEwKgb/PfmkMTzwQXLpi2uoFy648TCbULfPPKOzQ=
Subject key identifier:   E1:E0:C2:F9:DF:C7:18:DA:8F:49:07:99:C0:21:D0:F9:4E:A7:6A:FB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       24CF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4eDC-d_HGNqPSQeZwCHQ-U6navs.roa
Signing time:             Mon 10 Feb 2025 14:19:02 +0000
ROA not before:           Mon 10 Feb 2025 14:19:02 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24163
IP address blocks:        122.100.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9423 (0x24cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:19:02 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E1E0C2F9DFC718DA8F490799C021D0F94EA76AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a0:b4:54:80:be:e5:97:47:f7:a1:70:e5:17:
                    8f:77:da:64:0f:1b:c7:27:78:79:4d:f4:72:83:e7:
                    e8:68:12:f6:93:6e:28:88:d3:ba:f9:89:fb:6d:f5:
                    36:7b:b2:56:b4:7b:13:22:43:40:f8:b4:e9:61:90:
                    26:da:48:fb:77:c2:6e:eb:8d:1d:03:c0:dd:a8:27:
                    21:7a:6b:d0:26:64:48:19:2c:5d:38:6f:14:bd:85:
                    e3:09:01:2e:19:c9:6d:46:c8:3b:b1:a1:24:9f:8a:
                    8b:47:5a:95:fb:9d:f2:0c:b9:59:e5:e1:2b:7c:d0:
                    09:aa:44:51:fa:c8:fa:fd:20:6a:e7:7c:91:d2:98:
                    9f:3c:8f:b9:53:e3:31:c9:da:72:bd:3f:1c:42:2d:
                    7c:58:1a:65:01:62:bc:3d:c6:20:17:2f:dc:46:c4:
                    dd:fe:e8:ee:9f:17:44:c2:b6:88:bd:bc:52:c0:05:
                    c6:8e:09:b5:bd:b0:f9:ad:a7:6a:cc:13:82:29:9b:
                    32:26:2e:c3:4f:e3:c8:04:5e:9e:c0:63:50:df:89:
                    68:b1:18:14:46:ef:36:ec:8f:33:21:95:db:34:47:
                    38:89:f4:fa:28:b3:19:88:40:3b:5c:83:ff:f0:84:
                    88:3b:a8:f1:8a:b4:3c:09:bd:93:a5:96:7b:56:67:
                    8e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E0:C2:F9:DF:C7:18:DA:8F:49:07:99:C0:21:D0:F9:4E:A7:6A:FB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4eDC-d_HGNqPSQeZwCHQ-U6navs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:ef:a5:25:29:c3:53:13:72:9e:53:fa:72:07:74:76:c8:e8:
         1a:71:8c:f9:6e:ed:91:7d:1f:a9:69:12:45:02:fc:ee:27:22:
         42:84:04:5a:82:92:a1:c2:ea:30:50:a5:b4:59:cd:92:a8:d0:
         8e:d9:55:22:9c:16:9d:79:fe:5c:03:da:0e:72:d6:fe:23:3f:
         17:6c:f6:9f:97:ef:5d:3c:f9:a2:0e:82:1a:31:47:8d:5c:92:
         d1:9a:b1:b3:d5:0a:3c:16:c1:c4:f0:0c:51:70:ee:2a:53:68:
         00:4c:d9:84:2e:9d:b9:96:d9:a5:27:0f:6b:d7:6e:28:11:2d:
         81:50:91:32:46:9d:ec:d7:0e:f7:be:e1:86:2d:ac:a0:8a:04:
         31:b7:0e:36:64:83:5d:13:1d:5e:b8:0c:0b:bb:65:f5:48:51:
         02:25:c3:2a:d2:98:30:96:b6:96:47:ce:63:41:87:a6:ca:fa:
         4b:87:ff:60:dc:91:1a:6a:de:a7:63:8d:12:2f:a6:f1:2e:8c:
         39:d4:37:4c:bf:16:a4:ec:38:8b:83:9a:90:7d:cf:f4:3f:09:
         41:5c:f5:8b:74:b5:77:8e:0d:d7:26:22:73:bc:16:31:57:b6:
         7a:c1:4e:74:fa:af:e7:9a:eb:41:50:e0:36:9d:3e:76:eb:ac:
         be:85:ff:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:51:40 2025 by rpki-client