Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PADpbIsRUwukCfs7XUP2_uV02l4.roa
File:                     PADpbIsRUwukCfs7XUP2_uV02l4.roa (raw, json)
Hash identifier:          a1Yq2tFN9paPD7F8ALthozEUplSLFXlvcxAsI7gkqvU=
Subject key identifier:   3C:00:E9:6C:8B:11:53:0B:A4:09:FB:3B:5D:43:F6:FE:E5:74:DA:5E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2352
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PADpbIsRUwukCfs7XUP2_uV02l4.roa
Signing time:             Mon 10 Feb 2025 14:17:28 +0000
ROA not before:           Mon 10 Feb 2025 14:17:28 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9042 (0x2352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:17:28 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=3C00E96C8B11530BA409FB3B5D43F6FEE574DA5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c5:f9:c5:6b:9c:08:df:06:d2:da:fd:5c:2b:
                    d6:99:d3:36:67:69:87:3b:e0:38:5b:76:26:7e:5c:
                    a4:98:82:e4:17:e0:e0:c8:ec:8b:98:d2:3f:03:d2:
                    51:17:82:3a:e0:cb:d6:fc:15:4f:15:f7:f1:c8:00:
                    73:bf:ce:b0:84:85:c2:c1:39:a6:76:4f:da:88:49:
                    fa:79:8a:71:e1:85:a5:7e:73:17:51:6d:d7:df:7b:
                    0b:67:d0:00:af:51:4e:05:a9:52:3f:e1:ad:ae:3e:
                    6c:e0:90:91:d2:08:30:c2:98:53:39:b9:11:cd:8d:
                    ad:8c:07:ee:b5:67:8a:20:19:06:3e:4b:6f:65:0d:
                    60:eb:23:26:35:87:79:3e:c6:8c:43:13:84:cd:68:
                    aa:fe:b2:a1:db:77:2d:09:86:80:da:0d:29:0e:ca:
                    a5:85:3f:2d:23:37:e9:21:04:e4:ba:f3:95:a6:c0:
                    d6:fd:fa:1e:21:34:e5:36:b9:e9:65:86:f3:aa:a1:
                    e0:d6:a0:3a:d6:33:f9:86:a5:7b:c6:b0:04:7c:d1:
                    6a:b8:a7:96:a8:64:bd:98:21:0d:8e:62:aa:41:66:
                    43:4c:1c:b8:d3:42:7f:40:3e:98:b9:de:1d:b7:8f:
                    82:71:18:b8:9d:37:1e:35:d1:47:06:ef:0e:2b:7d:
                    0f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:00:E9:6C:8B:11:53:0B:A4:09:FB:3B:5D:43:F6:FE:E5:74:DA:5E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PADpbIsRUwukCfs7XUP2_uV02l4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:04:5a:a8:d7:fe:e0:5f:42:e1:d9:16:6c:b6:bb:05:33:7b:
         c7:7a:51:b0:bd:9b:32:b9:35:1d:ed:f8:fe:cc:92:fb:f9:f7:
         a3:77:f4:25:a4:47:9a:51:2a:cd:11:5b:d5:91:fe:f3:cc:4b:
         e0:64:a5:fe:61:ad:d8:a7:15:69:ff:b3:17:36:59:8a:23:38:
         2d:55:68:fb:b3:81:63:01:2f:ca:3f:33:86:38:9e:46:14:77:
         21:e7:9f:48:91:b0:97:40:18:6a:95:11:37:a0:99:23:50:b0:
         6c:e8:c4:da:32:86:d1:c7:54:75:66:7b:75:ac:bb:94:df:81:
         ac:a5:d9:d0:1a:26:d0:d0:df:58:d2:35:33:84:e0:e2:56:96:
         cb:cc:5f:ab:52:3a:b9:dd:7e:3c:a9:51:12:75:eb:e6:70:87:
         38:e4:e4:63:9a:53:26:ee:0c:87:d5:b8:c6:43:cb:73:0f:08:
         9f:ac:b9:04:db:f9:57:6d:ca:62:b7:9f:f6:da:72:d0:57:7b:
         99:95:79:86:72:9c:94:96:c4:f9:12:30:d5:cf:8f:9a:8f:73:
         e2:90:4d:46:b5:f1:23:69:e8:84:ef:30:9d:dc:8e:6e:9b:5c:
         02:91:a2:40:57:19:89:bc:f6:6b:e6:4e:07:46:ad:b9:b0:a2:
         03:cf:91:eb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICI1IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE3MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNDMDBFOTZDOEIxMTUz
MEJBNDA5RkIzQjVENDNGNkZFRTU3NERBNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnxfnFa5wI3wbS2v1cK9aZ0zZnaYc74DhbdiZ+XKSYguQX4ODI
7IuY0j8D0lEXgjrgy9b8FU8V9/HIAHO/zrCEhcLBOaZ2T9qISfp5inHhhaV+cxdR
bdffewtn0ACvUU4FqVI/4a2uPmzgkJHSCDDCmFM5uRHNja2MB+61Z4ogGQY+S29l
DWDrIyY1h3k+xoxDE4TNaKr+sqHbdy0JhoDaDSkOyqWFPy0jN+khBOS685WmwNb9
+h4hNOU2uellhvOqoeDWoDrWM/mGpXvGsAR80Wq4p5aoZL2YIQ2OYqpBZkNMHLjT
Qn9APpi53h23j4JxGLidNx410UcG7w4rfQ/3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPADpbIsRUwukCfs7XUP2/uV02l4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1BBRHBiSXNSVXd1a0NmczdY
VVAyX3VWMDJsNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2ocwDQYJKoZIhvcNAQELBQADggEBAAMEWqjX/uBfQuHZFmy2uwUze8d6UbC9mzK5
NR3t+P7Mkvv596N39CWkR5pRKs0RW9WR/vPMS+Bkpf5hrdinFWn/sxc2WYojOC1V
aPuzgWMBL8o/M4Y4nkYUdyHnn0iRsJdAGGqVETegmSNQsGzoxNoyhtHHVHVme3Ws
u5Tfgayl2dAaJtDQ31jSNTOE4OJWlsvMX6tSOrndfjypURJ16+Zwhzjk5GOaUybu
DIfVuMZDy3MPCJ+suQTb+VdtymK3n/bactBXe5mVeYZynJSWxPkSMNXPj5qPc+KQ
TUa18SNp6ITvMJ3cjm6bXAKRokBXGYm89mvmTgdGrbmwogPPkes=
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:37:47 2025 by rpki-client