Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RJIMIPDmDMa9R-utoScRfaESe4Q.roa
File:                     RJIMIPDmDMa9R-utoScRfaESe4Q.roa (raw, json)
Hash identifier:          XDxY1t0tx/F4Ei9robIK4c0Q/pOrVAT6mXupXjVBsjY=
Subject key identifier:   44:92:0C:20:F0:E6:0C:C6:BD:47:EB:AD:A1:27:11:7D:A1:12:7B:84
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2432
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RJIMIPDmDMa9R-utoScRfaESe4Q.roa
Signing time:             Mon 10 Feb 2025 14:18:23 +0000
ROA not before:           Mon 10 Feb 2025 14:18:23 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        61.61.208.0/21 maxlen: 29
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 22:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9266 (0x2432)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:23 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=44920C20F0E60CC6BD47EBADA127117DA1127B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6d:c6:25:25:01:a7:26:53:3c:5c:9b:17:f6:
                    ac:59:cf:9a:5a:9d:34:35:fa:95:4d:4d:cf:28:d3:
                    e4:16:2e:a9:d4:30:c5:ae:02:80:cb:3e:69:7f:1d:
                    b8:43:96:0d:60:5e:97:05:01:ba:b1:4f:6b:6f:59:
                    06:65:54:5d:d0:75:e7:b4:c3:de:6a:59:bb:d7:d1:
                    c3:4f:c5:3d:79:4c:c7:4d:9c:36:1a:11:9a:b5:91:
                    90:1d:83:53:b1:9a:6d:ef:3e:b6:7c:6a:67:50:9a:
                    37:13:ed:d9:8a:21:f1:e5:38:23:0e:0c:d8:a2:d1:
                    45:ca:0c:d0:92:fa:d9:4e:7b:6c:2d:cc:7a:a3:64:
                    ac:6f:b5:5b:9c:40:9b:85:a2:1c:62:0b:66:ff:79:
                    8d:60:22:90:86:f6:93:2a:59:64:f4:41:2c:1e:44:
                    79:34:bf:5f:20:da:01:b0:d5:59:f9:0b:d6:05:4e:
                    ce:d8:50:bf:c4:7e:a8:5c:f4:d1:ae:34:03:c7:09:
                    42:67:55:c4:b4:d4:c9:41:e1:04:94:28:8a:f0:8a:
                    dc:34:4f:24:d7:3f:79:51:8b:9a:fc:10:26:f7:94:
                    61:e5:ca:a3:1f:b7:65:bb:49:01:ee:2c:aa:61:7d:
                    3d:4a:11:bc:5e:59:75:8b:6b:7f:ce:8c:d5:d6:f0:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:92:0C:20:F0:E6:0C:C6:BD:47:EB:AD:A1:27:11:7D:A1:12:7B:84
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RJIMIPDmDMa9R-utoScRfaESe4Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         73:a1:19:a5:03:ed:fb:40:1c:53:95:e5:3e:0b:65:b3:59:8c:
         ae:22:6f:56:15:d5:92:02:a8:e6:8e:00:31:58:d8:37:c0:82:
         1a:e5:23:c9:d8:2d:32:19:05:d8:47:a9:bc:78:85:12:85:fe:
         2b:b5:d7:9e:bf:2e:69:ae:e9:01:36:64:18:0d:00:60:31:0f:
         2b:21:ce:73:3a:25:23:c4:a0:09:64:ff:b2:31:db:a1:c5:09:
         e9:70:ad:fa:34:69:c9:a1:ec:75:62:d4:1a:89:29:81:78:e9:
         e0:b4:96:90:32:d8:c3:e4:fb:55:f2:0f:9c:31:fa:26:8f:26:
         e9:0c:3f:59:f3:88:3f:8d:1e:26:89:9a:88:f8:9d:e1:89:1c:
         2f:c3:bc:a9:b7:82:99:02:63:81:1b:da:2f:f5:d2:80:81:ab:
         b4:c1:95:e6:0f:98:27:a5:12:4e:6b:08:1a:48:b2:c9:3d:25:
         b2:7c:4f:6b:b0:1d:e9:b9:e5:d0:b7:e6:d4:8f:55:41:10:22:
         e3:0a:28:23:7c:58:51:9b:5d:b1:b9:ad:79:30:8d:c2:dd:d3:
         c9:9b:07:89:23:30:0d:27:fa:da:64:05:01:6d:47:b1:8f:f7:
         49:b7:f1:e3:ef:2d:1b:f2:51:5f:e3:da:d8:f3:7f:9f:d6:af:
         12:ca:1d:72
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE4MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ0OTIwQzIwRjBFNjBD
QzZCRDQ3RUJBREExMjcxMTdEQTExMjdCODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTbcYlJQGnJlM8XJsX9qxZz5panTQ1+pVNTc8o0+QWLqnUMMWu
AoDLPml/HbhDlg1gXpcFAbqxT2tvWQZlVF3Qdee0w95qWbvX0cNPxT15TMdNnDYa
EZq1kZAdg1Oxmm3vPrZ8amdQmjcT7dmKIfHlOCMODNii0UXKDNCS+tlOe2wtzHqj
ZKxvtVucQJuFohxiC2b/eY1gIpCG9pMqWWT0QSweRHk0v18g2gGw1Vn5C9YFTs7Y
UL/Efqhc9NGuNAPHCUJnVcS01MlB4QSUKIrwitw0TyTXP3lRi5r8ECb3lGHlyqMf
t2W7SQHuLKphfT1KEbxeWXWLa3/OjNXW8IFzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQURJIMIPDmDMa9R+utoScRfaESe4QwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1JKSU1JUERtRE1hOVItdXRv
U2NSZmFFU2U0US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9
PdAwDQYJKoZIhvcNAQELBQADggEBAHOhGaUD7ftAHFOV5T4LZbNZjK4ib1YV1ZIC
qOaOADFY2DfAghrlI8nYLTIZBdhHqbx4hRKF/iu1156/Lmmu6QE2ZBgNAGAxDysh
znM6JSPEoAlk/7Ix26HFCelwrfo0acmh7HVi1BqJKYF46eC0lpAy2MPk+1XyD5wx
+iaPJukMP1nziD+NHiaJmoj4neGJHC/DvKm3gpkCY4Eb2i/10oCBq7TBleYPmCel
Ek5rCBpIssk9JbJ8T2uwHem55dC35tSPVUEQIuMKKCN8WFGbXbG5rXkwjcLd08mb
B4kjMA0n+tpkBQFtR7GP90m38ePvLRvyUV/j2tjzf5/WrxLKHXI=
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:01:01 2025 by rpki-client