Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4q9t7-gmWCfws67Ws4wmwfeE8I8.roa
File:                     4q9t7-gmWCfws67Ws4wmwfeE8I8.roa (raw, json)
Hash identifier:          LicStknhwnmjl0KOLUGCAkkoYVXQGKDpvfYEsAJv95k=
Subject key identifier:   E2:AF:6D:EF:E8:26:58:27:F0:B3:AE:D6:B3:8C:26:C1:F7:84:F0:8F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       23B9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4q9t7-gmWCfws67Ws4wmwfeE8I8.roa
Signing time:             Mon 10 Feb 2025 14:17:52 +0000
ROA not before:           Mon 10 Feb 2025 14:17:52 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        49.158.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9145 (0x23b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:17:52 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E2AF6DEFE8265827F0B3AED6B38C26C1F784F08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2a:f8:82:99:f8:c3:23:32:33:76:c3:90:f3:
                    6b:03:1f:0a:69:52:4d:1d:cb:b2:e8:a5:81:94:da:
                    47:88:37:fc:0a:8d:d3:e9:06:ed:17:20:28:e5:a7:
                    02:5b:4d:26:88:76:1f:10:f7:35:c7:de:a1:19:61:
                    e8:10:74:29:f2:e2:33:49:cc:8c:f3:a2:99:40:a5:
                    b4:3b:41:e9:62:09:ad:4b:12:ce:7c:91:aa:38:d5:
                    94:1b:50:74:7e:97:06:e5:dc:9f:4b:d7:d2:32:82:
                    9c:85:2e:67:0c:b9:f7:10:41:59:2e:ec:db:bb:b7:
                    67:13:01:50:60:e8:12:64:62:4a:23:a0:93:6e:16:
                    c9:2f:94:74:77:cf:d3:14:ab:15:d4:4f:a9:e3:03:
                    09:aa:95:fd:1a:a2:9f:1c:a8:a3:35:a0:4f:78:ee:
                    16:ed:1e:ae:09:ec:9b:fc:a3:3f:1d:2a:79:48:b5:
                    cf:1a:3f:a2:1b:22:0d:06:65:64:64:c9:a6:14:31:
                    3e:b7:2a:f4:b9:1b:0c:56:2d:60:fa:42:2f:cd:54:
                    cf:1d:bf:65:4c:c3:5c:ea:7a:3b:4c:87:42:1c:05:
                    dd:22:5a:9d:45:8a:3e:8d:37:69:60:a7:a9:c5:ee:
                    3c:2c:d9:7b:d9:cf:0c:4e:c9:8e:9d:d5:39:fe:9e:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AF:6D:EF:E8:26:58:27:F0:B3:AE:D6:B3:8C:26:C1:F7:84:F0:8F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4q9t7-gmWCfws67Ws4wmwfeE8I8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         5c:3b:ae:d3:2c:a6:08:7a:2c:bb:a7:67:0c:97:ea:a9:57:cb:
         17:3a:3c:57:2b:08:90:f9:25:a6:8e:b2:8f:4c:c3:1c:c2:4d:
         06:9a:19:06:45:f7:02:27:60:d8:8e:5f:ea:98:b2:2a:d3:33:
         55:fe:cd:9d:b9:ec:39:ed:ec:a3:c9:f0:83:39:8a:93:7b:f2:
         51:ee:4d:04:c5:0f:bf:9c:bb:c5:f6:e4:18:18:2d:37:89:e0:
         d1:02:db:e3:46:c6:b1:51:64:87:ab:de:e8:05:5c:ee:f9:da:
         d2:ba:1c:4e:6c:2d:35:8c:c5:f5:a0:1b:51:3a:e8:4a:65:51:
         d5:5f:94:8a:60:89:4d:32:6e:31:b3:4f:ea:83:71:bc:fa:ef:
         78:5f:bc:14:5b:a6:3b:b4:24:c8:33:32:ff:a6:da:13:bb:a5:
         ef:af:bf:5c:7d:f8:b5:02:89:5b:a0:00:e7:ee:f3:28:c0:28:
         94:16:0b:13:a5:64:18:35:2b:a4:66:5c:bc:53:76:9a:dc:7b:
         d0:84:9d:6a:ab:ca:74:49:2c:fa:80:3d:6f:65:86:97:98:c1:
         77:b6:26:df:88:a2:4b:cf:b8:3e:a8:c7:70:90:78:1e:21:a4:
         8f:d1:fd:b7:ee:8a:a0:8c:82:12:99:6b:5c:b0:75:41:2f:c3:
         c1:9f:cd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:54:09 2025 by rpki-client