Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Sixeu0RZkgn7eGIxRTXnFTOyE-A.roa
File:                     Sixeu0RZkgn7eGIxRTXnFTOyE-A.roa (raw, json)
Hash identifier:          kiZ8S56qx0usvj4aXo3gXYq9OTAJvfy+TGJ+E3OORok=
Subject key identifier:   4A:2C:5E:BB:44:59:92:09:FB:78:62:31:45:35:E7:15:33:B2:13:E0
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       23FB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Sixeu0RZkgn7eGIxRTXnFTOyE-A.roa
Signing time:             Mon 10 Feb 2025 14:18:09 +0000
ROA not before:           Mon 10 Feb 2025 14:18:09 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        114.198.160.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 22:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9211 (0x23fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:09 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=4A2C5EBB44599209FB7862314535E71533B213E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:b6:49:b8:f8:47:19:9c:ee:71:b9:be:65:
                    f0:58:09:eb:39:31:dd:1c:52:87:c3:74:70:89:58:
                    53:0d:e9:32:fe:3a:15:47:22:5e:a3:ed:a5:f2:6b:
                    81:f6:4e:73:67:ee:6d:dc:8f:0d:6b:53:9b:9b:58:
                    e3:9c:52:ff:1e:1b:40:1b:9a:45:09:9d:69:39:7d:
                    dd:eb:5f:26:25:90:94:83:2a:fc:f1:df:57:f1:e5:
                    6c:c5:57:7e:73:01:07:a6:da:f6:9e:c3:f0:53:13:
                    3b:a5:3f:bf:7f:db:69:b1:fd:48:d6:f0:ae:e0:e2:
                    2a:e7:e3:29:9a:ec:d2:2b:9c:88:42:ac:4d:e4:7f:
                    c3:ca:d6:f2:e9:e7:c9:8d:22:7d:72:4c:c8:11:b7:
                    ae:12:f2:67:7d:5d:a0:4e:f3:06:a9:bb:2c:4a:6f:
                    f4:b5:b0:4b:f5:8a:a1:7a:5c:04:96:5f:9b:a9:a8:
                    62:d4:bb:0f:37:68:46:79:ae:b9:3e:1b:be:e2:25:
                    9a:2d:11:ce:83:dc:04:36:23:76:58:cb:cb:20:0f:
                    b1:f8:bd:66:3c:e6:be:92:f9:1c:f9:49:f2:1a:85:
                    42:2d:c1:b3:41:36:75:f8:8b:31:de:6f:40:c1:d5:
                    b9:0d:16:ec:37:48:38:36:69:94:49:ef:51:d4:c9:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2C:5E:BB:44:59:92:09:FB:78:62:31:45:35:E7:15:33:B2:13:E0
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Sixeu0RZkgn7eGIxRTXnFTOyE-A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:51:91:3e:2e:97:78:fc:92:45:e1:8a:3b:25:a7:0f:a7:5c:
         f6:36:11:61:e7:4b:d1:2e:ef:d7:ff:db:ac:18:23:35:b9:7b:
         b6:1c:2f:09:7a:55:61:07:fc:26:38:81:57:70:f3:98:1d:b4:
         bd:9e:c1:57:21:aa:e2:fd:56:9b:78:15:ed:1f:99:1a:7a:84:
         8b:62:5f:49:d1:c9:60:aa:e3:56:d9:20:9c:ab:7d:21:80:3c:
         d2:5f:fa:b6:0a:70:2e:56:52:97:0e:b5:df:2a:c4:98:00:d4:
         d9:15:2c:95:20:63:b3:7f:8a:b1:9a:17:84:5a:3d:6b:2e:3a:
         ec:bb:d6:2d:4b:29:c0:3b:4b:1a:ba:44:95:62:5d:dd:1f:12:
         51:16:20:9a:95:9a:4b:12:2a:1f:82:79:e1:31:eb:64:da:79:
         e2:67:83:6f:6e:67:42:e4:2d:03:d6:c5:cc:cb:55:df:80:07:
         05:85:ad:ab:da:5e:33:db:19:1f:9c:80:99:a2:53:08:c5:16:
         92:be:22:99:89:28:73:2f:ac:21:66:b5:13:c6:46:c6:a0:32:
         cf:0d:3a:97:b2:73:a8:69:b9:a6:7b:6f:ad:07:e9:36:e9:b9:
         3a:f7:5a:19:75:96:cc:60:99:ab:a9:97:62:d8:a2:f7:cb:b2:
         49:87:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:08:36 2025 by rpki-client