Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GEgRp5xhJuLd5AwUj1IhvB7qWyk.roa
File:                     GEgRp5xhJuLd5AwUj1IhvB7qWyk.roa (raw, json)
Hash identifier:          U0GuEN+lqmsU67SNXkzlHJ7mXnxWKDaf57G+/35OvXI=
Subject key identifier:   18:48:11:A7:9C:61:26:E2:DD:E4:0C:14:8F:52:21:BC:1E:EA:5B:29
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2412
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GEgRp5xhJuLd5AwUj1IhvB7qWyk.roa
Signing time:             Mon 10 Feb 2025 14:18:14 +0000
ROA not before:           Mon 10 Feb 2025 14:18:14 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        211.76.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9234 (0x2412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:14 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=184811A79C6126E2DDE40C148F5221BC1EEA5B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:e6:0f:84:db:04:31:32:12:a1:75:1a:da:
                    2d:f0:7b:86:f6:d0:05:17:6a:9e:a4:0c:0c:fc:56:
                    a1:03:e8:bc:c3:8a:0b:33:d6:4b:52:83:e7:a9:37:
                    00:20:5c:97:7c:f0:ab:ab:4f:1c:f7:c7:01:bc:7a:
                    cc:bd:e7:33:5f:64:c3:6f:4d:75:4b:3c:a5:23:d8:
                    69:d9:cb:6f:04:7f:b8:55:a5:73:d3:b1:66:32:18:
                    87:2b:e7:b7:cf:4d:09:3e:56:d1:11:2b:06:ba:cd:
                    48:58:15:c3:82:0e:88:28:13:8c:58:85:a4:39:c4:
                    a3:e9:a6:06:e8:23:d0:7a:2a:38:2c:16:28:88:a2:
                    07:48:78:e1:9c:01:7c:af:86:d4:c4:d1:f5:f6:1b:
                    98:65:09:95:b7:9b:2d:af:64:2f:4a:77:b1:5f:e4:
                    c4:31:f2:d5:c7:be:2e:19:66:14:81:79:4a:e0:ad:
                    dd:f7:24:eb:7c:ab:99:5a:e8:8e:7b:17:73:4f:96:
                    3a:9b:d3:f4:76:80:7a:f0:fc:ec:21:a6:43:07:4a:
                    84:11:ef:07:77:77:c9:57:21:f4:db:1f:55:b0:32:
                    e8:50:7b:36:6c:dd:f1:44:41:00:59:74:b5:db:6e:
                    77:18:9a:ed:6f:11:41:8c:3f:cf:97:30:ef:4f:c8:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:48:11:A7:9C:61:26:E2:DD:E4:0C:14:8F:52:21:BC:1E:EA:5B:29
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GEgRp5xhJuLd5AwUj1IhvB7qWyk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:5c:a9:18:f2:29:04:f0:6c:25:37:82:4e:e2:2a:87:1b:41:
         af:ef:0b:31:fa:df:67:11:c3:9b:21:3b:80:49:aa:24:f0:38:
         57:15:26:33:c1:c6:24:35:36:10:05:cf:5d:46:f2:1c:b0:32:
         f0:fb:44:8d:a4:cb:63:1a:b0:25:61:aa:5d:0e:3a:1a:56:ad:
         de:ed:18:d7:d2:97:3b:5c:2a:fb:29:17:89:ae:30:1d:f6:67:
         39:f2:dc:7d:fe:83:32:60:8e:fd:d2:19:0d:56:bb:87:e1:07:
         10:09:24:00:10:70:25:25:c5:d8:04:ca:6b:37:0d:33:62:4b:
         93:eb:aa:d2:17:59:51:56:72:88:57:80:97:6e:60:b1:b7:e5:
         59:e7:03:f8:75:77:2d:a1:67:37:51:20:27:54:13:57:bf:99:
         aa:4d:76:16:e7:7e:51:84:06:81:18:cc:99:97:45:59:bb:ac:
         0c:15:1f:db:5b:31:67:8a:44:28:8a:b9:65:da:97:60:3b:73:
         a7:ee:65:8a:20:3e:66:14:f4:56:0c:ca:53:4c:f6:8c:d4:0e:
         d9:81:d4:c9:13:32:02:8a:45:b3:7e:89:3c:52:ea:2c:d8:e9:
         e2:3d:ef:0b:d6:db:0f:e1:a2:8b:ae:b6:ab:af:f4:3a:6f:5f:
         3e:c9:9f:71
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJBIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE4MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE4NDgxMUE3OUM2MTI2
RTJEREU0MEMxNDhGNTIyMUJDMUVFQTVCMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCY4eYPhNsEMTISoXUa2i3we4b20AUXap6kDAz8VqED6LzDigsz
1ktSg+epNwAgXJd88KurTxz3xwG8esy95zNfZMNvTXVLPKUj2GnZy28Ef7hVpXPT
sWYyGIcr57fPTQk+VtERKwa6zUhYFcOCDogoE4xYhaQ5xKPppgboI9B6KjgsFiiI
ogdIeOGcAXyvhtTE0fX2G5hlCZW3my2vZC9Kd7Ff5MQx8tXHvi4ZZhSBeUrgrd33
JOt8q5la6I57F3NPljqb0/R2gHrw/OwhpkMHSoQR7wd3d8lXIfTbH1WwMuhQezZs
3fFEQQBZdLXbbncYmu1vEUGMP8+XMO9PyLvfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGEgRp5xhJuLd5AwUj1IhvB7qWykwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0dFZ1JwNXhoSnVMZDVBd1Vq
MUlodkI3cVd5ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
TD8wDQYJKoZIhvcNAQELBQADggEBAH1cqRjyKQTwbCU3gk7iKocbQa/vCzH632cR
w5shO4BJqiTwOFcVJjPBxiQ1NhAFz11G8hywMvD7RI2ky2MasCVhql0OOhpWrd7t
GNfSlztcKvspF4muMB32Zzny3H3+gzJgjv3SGQ1Wu4fhBxAJJAAQcCUlxdgEyms3
DTNiS5PrqtIXWVFWcohXgJduYLG35VnnA/h1dy2hZzdRICdUE1e/mapNdhbnflGE
BoEYzJmXRVm7rAwVH9tbMWeKRCiKuWXal2A7c6fuZYogPmYU9FYMylNM9ozUDtmB
1MkTMgKKRbN+iTxS6izY6eI97wvW2w/hoouutquv9DpvXz7Jn3E=
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:49:20 2025 by rpki-client