Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L1Weh_LW3i0sS3v_m7EzJFFU5Ys.roa
File:                     L1Weh_LW3i0sS3v_m7EzJFFU5Ys.roa (raw, json)
Hash identifier:          vPjXVapjY+yOjCJEogzJm+PS8c7yYe/T7RYJc1p877A=
Subject key identifier:   2F:55:9E:87:F2:D6:DE:2D:2C:4B:7B:FF:9B:B1:33:24:51:54:E5:8B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       234F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L1Weh_LW3i0sS3v_m7EzJFFU5Ys.roa
Signing time:             Mon 10 Feb 2025 14:17:27 +0000
ROA not before:           Mon 10 Feb 2025 14:17:27 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        61.58.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9039 (0x234f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:17:27 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=2F559E87F2D6DE2D2C4B7BFF9BB133245154E58B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:90:e4:92:7e:06:7e:d0:9e:c5:90:11:d5:6e:
                    a1:ba:95:d3:1d:77:d5:bd:f7:49:c0:46:f0:23:1d:
                    95:96:f8:d8:3e:b8:94:32:6e:9e:d8:11:42:21:37:
                    0d:8b:de:95:6b:88:3f:08:a5:4e:e1:b9:0d:15:59:
                    57:92:aa:2e:61:84:0a:f8:f1:99:6d:4d:19:cd:56:
                    09:44:8e:5c:6f:03:7a:c8:ab:bf:8c:a0:dc:a8:e6:
                    7c:5b:c9:49:33:3c:8e:e3:b3:3d:81:23:4f:8d:22:
                    c7:94:98:88:1f:96:aa:97:15:38:7b:f7:85:92:74:
                    87:ea:fa:b3:2b:9d:45:8b:7f:69:19:e3:17:b1:08:
                    f5:59:e3:14:48:5c:2a:bf:f6:5b:11:0c:2a:f7:c8:
                    c3:8e:b7:bf:a3:18:b5:07:14:11:61:8e:16:45:07:
                    f0:96:95:30:11:28:54:d5:a3:34:be:46:9b:d2:de:
                    ea:13:ff:f0:a8:ad:f6:0b:e0:20:86:c9:7c:77:45:
                    f8:a2:bf:69:64:4d:76:29:b3:06:3f:55:cc:52:8b:
                    15:3d:bf:46:04:e8:13:ab:44:22:a3:46:ca:63:5e:
                    89:c5:2b:f1:5b:fe:3b:19:64:bc:b8:2a:53:d8:27:
                    85:86:dc:f9:a3:3c:53:2d:c3:27:9e:26:4f:0e:6a:
                    0b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:55:9E:87:F2:D6:DE:2D:2C:4B:7B:FF:9B:B1:33:24:51:54:E5:8B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L1Weh_LW3i0sS3v_m7EzJFFU5Ys.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:30:2b:c3:a8:e4:df:5c:06:8b:0d:e5:80:94:5f:6a:a5:40:
         89:c6:8a:c9:02:43:18:9f:a2:60:4a:31:5e:c0:9b:bf:0a:98:
         a4:58:f1:c4:8b:aa:ca:3b:ca:26:28:6c:47:d0:95:20:25:a7:
         fb:f2:e4:8a:ce:ee:b4:9c:50:ce:f3:b9:74:d9:77:79:9d:8b:
         bc:20:1a:c8:6c:41:85:06:12:49:d1:57:a9:6d:44:a6:e1:d0:
         30:18:f8:db:4b:16:0d:71:91:2d:75:15:0c:a3:db:66:5d:65:
         92:09:e9:0d:2e:40:54:27:9c:cf:a8:29:62:27:54:29:7f:71:
         29:f8:78:82:44:f8:8d:94:01:c8:b1:8c:20:62:f3:57:b2:a0:
         ee:9c:b5:5a:a8:d3:cc:00:5c:4c:bd:da:d8:c6:38:9f:51:86:
         43:a7:f2:69:ce:60:b9:80:90:8d:3a:90:54:0f:0d:61:11:10:
         c2:42:cf:70:8f:de:a4:be:d1:6b:c5:ba:96:42:4b:2f:30:7a:
         4c:e4:f6:53:e5:d8:9c:8f:40:ee:34:39:32:16:11:9a:af:64:
         ab:b1:17:42:79:7c:ba:50:bd:a9:e0:25:48:a0:87:d0:28:00:
         a0:7b:26:4c:aa:09:a8:4b:31:3f:86:e8:30:37:f4:9f:61:78:
         76:fb:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:18:15 2025 by rpki-client