Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UOC0i4nNuoeYAI-MTQKFSwA9oHc.roa
File:                     UOC0i4nNuoeYAI-MTQKFSwA9oHc.roa (raw, json)
Hash identifier:          OS/phKwlX20hHIunagmfJvU/n+Afl9kLdINvWiuS+BE=
Subject key identifier:   50:E0:B4:8B:89:CD:BA:87:98:00:8F:8C:4D:02:85:4B:00:3D:A0:77
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2380
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UOC0i4nNuoeYAI-MTQKFSwA9oHc.roa
Signing time:             Mon 10 Feb 2025 14:17:39 +0000
ROA not before:           Mon 10 Feb 2025 14:17:39 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        49.159.80.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 22:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9088 (0x2380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:17:39 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=50E0B48B89CDBA8798008F8C4D02854B003DA077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9c:07:4c:ba:46:51:d7:52:3c:b4:07:9f:dd:
                    06:75:01:e1:da:d9:cd:6e:5a:bd:56:d2:ba:7a:23:
                    f0:a3:f4:e3:0f:ee:d3:93:29:f7:9a:e7:2a:2e:2d:
                    4a:40:b1:f5:55:57:35:04:45:b5:37:40:e9:f2:7f:
                    c5:4f:f4:8d:16:ab:ee:52:fd:f4:0a:9b:87:e2:90:
                    1e:d9:ec:05:64:fe:df:90:a6:82:bc:2b:59:5b:5e:
                    9d:56:c2:f2:81:1f:0e:2a:f2:72:cb:de:32:ab:0f:
                    f1:c4:13:21:0a:60:5d:89:6f:57:3a:9b:62:a0:d2:
                    aa:7b:f7:a6:89:b5:a2:f4:cf:df:9e:99:48:8e:52:
                    a9:e4:e9:12:9e:8f:aa:f5:1d:be:a1:8f:fb:a5:46:
                    20:96:92:c8:8d:d5:39:39:e9:8f:7c:7b:46:a2:c7:
                    27:07:b5:8e:76:be:d3:d4:5e:de:14:fc:5c:79:be:
                    44:1b:2b:3c:5e:af:6b:a7:3b:b3:0b:8b:0b:76:07:
                    9a:a6:f8:a2:8e:f9:17:a9:ee:2b:df:4d:76:93:8d:
                    66:eb:6b:7a:ae:0d:c1:3d:8d:dc:3b:98:88:4f:f3:
                    69:92:df:57:f4:0e:95:f4:d9:20:0a:ad:36:c3:80:
                    86:ff:df:ae:6f:21:a0:e7:52:6d:57:79:fb:76:ae:
                    fc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E0:B4:8B:89:CD:BA:87:98:00:8F:8C:4D:02:85:4B:00:3D:A0:77
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UOC0i4nNuoeYAI-MTQKFSwA9oHc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:97:2c:d6:e3:cd:88:0a:70:32:f1:3b:b0:d0:32:f0:5b:39:
         10:40:e3:c3:ca:9e:93:ee:0f:2c:94:f7:0d:1b:c5:dc:5a:b1:
         e0:08:60:49:4b:41:fd:a5:38:0b:40:c5:79:31:81:05:b4:67:
         66:e9:75:f4:8e:c4:ef:31:17:87:fe:45:92:f6:e8:fb:d1:cf:
         87:ec:95:ec:ed:8b:8d:ed:32:df:6b:23:27:f0:59:14:d2:da:
         74:ac:ac:58:f3:92:89:6e:38:e6:ab:89:ab:2b:fd:3e:6d:99:
         65:dd:9d:97:1d:66:69:3e:dd:91:a6:c5:62:9f:72:f3:ce:c6:
         ee:02:c9:9b:ef:55:c0:db:54:e3:3b:e4:da:cd:5e:b5:25:66:
         92:4b:c1:79:33:95:3d:a5:de:1d:65:40:e1:53:12:cf:83:58:
         43:9e:bf:65:85:56:b9:07:4c:b0:0c:2d:ed:4f:d3:36:91:22:
         2c:5b:76:f7:7e:94:7d:e0:7b:b4:57:4c:22:20:c1:2b:e2:70:
         ab:9a:21:a8:06:68:68:d1:89:35:05:fb:6d:52:38:d6:68:66:
         26:6f:13:8d:93:ec:c1:72:52:d6:2f:ba:f1:1a:aa:98:69:78:
         4c:40:e3:59:0e:ef:21:eb:7e:f4:8b:a1:39:a0:96:8c:47:18:
         a0:24:0b:cb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICI4AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE3MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUwRTBCNDhCODlDREJB
ODc5ODAwOEY4QzREMDI4NTRCMDAzREEwNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRnAdMukZR11I8tAef3QZ1AeHa2c1uWr1W0rp6I/Cj9OMP7tOT
Kfea5youLUpAsfVVVzUERbU3QOnyf8VP9I0Wq+5S/fQKm4fikB7Z7AVk/t+QpoK8
K1lbXp1WwvKBHw4q8nLL3jKrD/HEEyEKYF2Jb1c6m2Kg0qp796aJtaL0z9+emUiO
Uqnk6RKej6r1Hb6hj/ulRiCWksiN1Tk56Y98e0aixycHtY52vtPUXt4U/Fx5vkQb
Kzxer2unO7MLiwt2B5qm+KKO+Rep7ivfTXaTjWbra3quDcE9jdw7mIhP82mS31f0
DpX02SAKrTbDgIb/365vIaDnUm1Xeft2rvzBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUUOC0i4nNuoeYAI+MTQKFSwA9oHcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1VPQzBpNG5OdW9lWUFJLU1U
UUtGU3dBOW9IYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQx
n1AwDQYJKoZIhvcNAQELBQADggEBAFGXLNbjzYgKcDLxO7DQMvBbORBA48PKnpPu
DyyU9w0bxdxaseAIYElLQf2lOAtAxXkxgQW0Z2bpdfSOxO8xF4f+RZL26PvRz4fs
lezti43tMt9rIyfwWRTS2nSsrFjzkoluOOariasr/T5tmWXdnZcdZmk+3ZGmxWKf
cvPOxu4CyZvvVcDbVOM75NrNXrUlZpJLwXkzlT2l3h1lQOFTEs+DWEOev2WFVrkH
TLAMLe1P0zaRIixbdvd+lH3ge7RXTCIgwSvicKuaIagGaGjRiTUF+21SONZoZiZv
E42T7MFyUtYvuvEaqphpeExA41kO7yHrfvSLoTmgloxHGKAkC8s=
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:03:39 2025 by rpki-client