Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8rUq-5rRXeB0dj8sGVcdQy-WLs4.roa
File:                     8rUq-5rRXeB0dj8sGVcdQy-WLs4.roa (raw, json)
Hash identifier:          vy9kMLUCMRjA3Ek09ceHKet5ztHBAgo04REywJsdojY=
Subject key identifier:   F2:B5:2A:FB:9A:D1:5D:E0:74:76:3F:2C:19:57:1D:43:2F:96:2E:CE
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       236E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8rUq-5rRXeB0dj8sGVcdQy-WLs4.roa
Signing time:             Mon 10 Feb 2025 14:17:35 +0000
ROA not before:           Mon 10 Feb 2025 14:17:35 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        61.64.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9070 (0x236e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:17:35 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F2B52AFB9AD15DE074763F2C19571D432F962ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cc:b5:43:98:8f:67:65:f1:0e:48:fa:1f:4d:
                    0d:ac:82:ce:dd:32:a5:a0:27:11:4e:c3:fb:da:35:
                    af:b1:30:d5:6b:0a:b8:f3:aa:7d:6f:47:74:e8:e8:
                    52:3b:35:19:fe:34:7f:2f:25:90:63:d5:db:a6:b0:
                    96:dc:d8:ff:de:4e:e3:58:f1:b9:ee:c9:d6:eb:d7:
                    7e:03:f5:8f:ee:3b:52:65:c4:b2:43:f7:b6:99:ba:
                    85:20:7a:07:6f:af:4e:b0:6d:b3:8a:eb:3c:27:9f:
                    6f:01:54:13:51:51:ce:bd:98:ef:bd:b4:48:f6:71:
                    a8:9f:3a:64:9a:27:98:38:dd:90:97:77:f0:0d:bb:
                    79:3b:7e:fb:53:50:d2:cc:c8:15:13:69:d0:4c:f5:
                    12:18:c3:98:1a:1e:1b:5e:ba:41:cc:46:36:8d:8d:
                    8d:21:91:ef:c4:38:61:1d:59:20:5d:ed:74:97:32:
                    81:21:0b:0f:22:7f:31:ba:a2:18:96:4c:5a:9a:9e:
                    d8:38:0d:e4:08:4b:73:97:40:84:f5:7a:6d:e6:0f:
                    41:ca:87:7b:6b:a4:cd:97:c9:48:47:ea:06:34:a2:
                    e7:32:0b:06:87:41:2a:f4:e2:ca:38:0a:b2:8b:23:
                    48:f1:2a:86:1c:24:b5:0f:fe:e2:1a:ba:bf:99:0b:
                    9d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B5:2A:FB:9A:D1:5D:E0:74:76:3F:2C:19:57:1D:43:2F:96:2E:CE
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8rUq-5rRXeB0dj8sGVcdQy-WLs4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:e8:a3:c6:d9:84:4a:e6:1f:18:5e:20:cf:89:8a:37:c1:ea:
         7f:f8:f0:1e:d6:8e:e9:61:4d:e9:12:c8:4e:a8:1f:65:12:40:
         0a:e5:b3:99:b7:0e:3a:2a:7b:b6:98:eb:9c:2e:b8:91:e2:75:
         64:91:2f:55:2f:be:41:0c:10:76:bc:1d:17:c7:d3:12:80:e0:
         bc:73:3b:58:3d:2f:18:1f:e3:4f:6c:00:e9:67:4c:bc:fc:3f:
         6f:8c:34:2c:5a:3a:a4:b7:6e:9e:cf:89:cd:03:df:72:ca:ca:
         dc:39:b5:1a:ad:eb:ec:2f:50:1a:f1:12:c4:e8:56:50:43:7f:
         05:6e:e5:7b:ee:01:2a:da:73:a1:7a:6d:ef:c5:98:16:fc:78:
         ab:cf:c4:6a:68:7f:9f:9b:82:a6:6c:92:e0:92:45:c3:88:98:
         a0:2c:c2:20:49:f4:45:f1:31:46:3b:ae:7f:60:ef:ac:20:1e:
         50:8d:d2:a7:af:c9:7e:88:e2:92:d0:e1:de:dd:dd:b3:38:da:
         9b:96:45:27:e2:e9:97:84:0f:e4:1b:20:6f:5e:12:43:0a:73:
         8b:20:52:eb:78:6e:65:7a:dc:57:ad:04:cc:23:7e:82:14:bd:
         cc:26:c0:0f:0a:71:f0:20:5d:67:bf:b3:7d:f5:d7:5a:e5:c1:
         1d:d8:25:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:45:12 2025 by rpki-client