Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/57pCIOcMwrdPfpt0VM8akq9ayyY.roa
File:                     57pCIOcMwrdPfpt0VM8akq9ayyY.roa (raw, json)
Hash identifier:          d5oJx7UAc24PwArgyOlB7iPMaT8t0DdOfMv4YMxta/E=
Subject key identifier:   E7:BA:42:20:E7:0C:C2:B7:4F:7E:9B:74:54:CF:1A:92:AF:5A:CB:26
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       23E1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/57pCIOcMwrdPfpt0VM8akq9ayyY.roa
Signing time:             Mon 10 Feb 2025 14:18:02 +0000
ROA not before:           Mon 10 Feb 2025 14:18:02 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24163
IP address blocks:        122.100.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9185 (0x23e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:02 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E7BA4220E70CC2B74F7E9B7454CF1A92AF5ACB26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6e:bf:33:9d:01:4c:d8:c2:17:75:3f:34:77:
                    12:eb:99:15:c3:fc:25:e9:ab:40:ea:8a:4f:d8:e3:
                    db:af:83:c0:03:bd:af:ee:27:e1:5c:53:e1:13:90:
                    00:52:d4:5a:2f:07:00:e0:96:33:2a:4c:d5:90:db:
                    43:52:95:46:38:7a:c2:79:92:a2:4b:e9:1e:80:a4:
                    e0:21:a7:27:85:df:fc:d5:00:b1:93:31:b7:5d:b7:
                    a8:8d:c0:bc:32:77:69:b0:fd:c9:85:c5:75:a9:69:
                    88:1e:14:40:ba:d2:b5:17:3d:e2:34:0d:e7:6c:c0:
                    c1:53:37:6a:0d:8f:bd:e8:76:51:4a:0c:3c:a1:73:
                    cc:a6:31:51:7c:5d:9f:f8:1f:0d:e7:91:20:97:93:
                    9d:6d:5d:56:9a:4f:26:9b:f3:19:f1:7a:97:6e:4f:
                    01:04:a2:2a:f5:df:0c:bd:d4:aa:f6:7a:09:0f:02:
                    25:2c:15:bb:78:46:9c:d6:f6:cc:b5:7d:9d:ec:17:
                    0a:0f:93:fb:63:92:8d:fd:26:26:de:41:d3:fb:4b:
                    49:32:de:77:a9:89:54:bb:c8:a3:d2:37:de:9d:2c:
                    88:83:dd:b6:91:93:b9:e5:10:99:b6:c0:ec:06:bb:
                    e1:8a:34:a1:fe:a8:ac:2e:ce:3c:1c:63:ba:68:c1:
                    c8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BA:42:20:E7:0C:C2:B7:4F:7E:9B:74:54:CF:1A:92:AF:5A:CB:26
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/57pCIOcMwrdPfpt0VM8akq9ayyY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:cf:b9:4f:b0:ef:0f:48:c0:6a:dc:96:a0:38:b1:bf:5c:73:
         e2:0b:e9:4c:af:f4:c3:54:22:5e:2b:cd:32:f0:17:3d:01:65:
         a7:f3:fc:35:a4:3b:19:e1:6d:70:9c:b9:ac:e3:5c:28:44:10:
         32:7c:c2:95:fa:7c:04:7f:01:db:04:45:bf:42:a4:95:0a:cc:
         f0:2d:0b:3e:f2:77:55:f7:21:1c:b6:08:16:bb:7f:c1:af:d1:
         7c:02:84:f3:9a:12:e3:f3:18:72:80:3d:d0:93:8b:c2:24:7c:
         b1:ea:a2:44:f6:19:4a:90:fc:3a:c0:43:d0:fe:40:10:c5:28:
         89:8d:29:59:d4:02:5f:46:bc:1f:ab:b3:27:fd:90:ef:1d:bc:
         9a:60:0d:93:e5:c0:03:0d:5f:73:fd:f4:7f:1f:54:7c:6c:f5:
         ac:a6:78:6d:7a:0a:4e:b2:9b:95:23:3c:62:32:98:24:89:cc:
         cb:b2:7c:73:a8:32:ef:a4:fe:df:7f:9e:ee:e7:d4:ae:fa:c1:
         25:d6:ca:4e:82:27:f7:de:00:ad:f4:ac:92:f1:69:7d:eb:cb:
         2c:bb:5d:59:45:16:5f:82:64:a2:8d:f0:64:28:5b:8f:7e:27:
         e1:4e:03:2a:00:bf:18:65:53:d7:27:c5:b2:44:98:56:28:79:
         fc:1a:e3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:47:33 2025 by rpki-client