Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UOa9QMm_8exnNli0SBMP6zJZKq8.roa
File:                     UOa9QMm_8exnNli0SBMP6zJZKq8.roa (raw, json)
Hash identifier:          VEHpAS9HCbi3Ro/fie6n3kQhTPacyj774Aa/PAOvqko=
Subject key identifier:   50:E6:BD:40:C9:BF:F1:EC:67:36:58:B4:48:13:0F:EB:32:59:2A:AF
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       24B7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UOa9QMm_8exnNli0SBMP6zJZKq8.roa
Signing time:             Mon 10 Feb 2025 14:18:54 +0000
ROA not before:           Mon 10 Feb 2025 14:18:54 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        49.158.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9399 (0x24b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:54 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=50E6BD40C9BFF1EC673658B448130FEB32592AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:da:27:45:1b:e6:13:5e:81:f3:a7:0e:fb:
                    e7:58:a5:3d:b0:99:52:e6:1f:3f:ee:78:1a:7d:eb:
                    c8:e3:f3:09:46:2a:de:72:79:38:6d:c0:df:b3:56:
                    5a:38:b4:90:4a:d6:43:17:16:a9:4a:45:41:6d:19:
                    fb:0c:26:f6:ab:61:8c:e1:e3:8d:e0:04:f8:7b:87:
                    f6:df:83:cc:3f:84:ec:4b:16:d1:40:51:79:53:0b:
                    ff:cb:a1:5d:29:e2:5f:80:cd:bc:15:4d:d4:89:f2:
                    44:d1:de:4f:69:0f:9c:bd:1f:bb:f5:88:2f:8e:3e:
                    b2:61:b6:68:7f:fe:73:39:d2:18:4d:13:f9:e8:d4:
                    06:8b:30:bf:0e:12:c9:9f:b5:ea:42:aa:d9:fb:41:
                    35:b5:05:e6:2d:27:02:d9:05:5d:fc:4b:b2:79:21:
                    f7:18:df:bb:97:3b:84:46:6e:36:89:46:83:81:d7:
                    16:4e:f6:b5:24:11:99:aa:82:16:9b:ba:14:94:c5:
                    02:e9:97:fd:af:ca:48:f2:ea:75:57:5e:ae:1a:ba:
                    96:43:64:3e:59:ce:fa:c2:2b:7c:a8:cc:a4:f2:7a:
                    17:1e:9c:ce:6f:24:dc:45:bf:ea:b0:60:d7:e4:00:
                    61:c1:c8:0b:95:98:0d:55:3c:ea:52:2c:d3:0e:fc:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E6:BD:40:C9:BF:F1:EC:67:36:58:B4:48:13:0F:EB:32:59:2A:AF
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UOa9QMm_8exnNli0SBMP6zJZKq8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f3:9b:89:a1:7a:bf:b8:09:ad:46:26:0b:bf:a8:de:40:50:
         7a:81:da:d6:04:64:1b:86:a0:1f:96:51:5a:0f:e6:75:c2:eb:
         0e:83:93:8e:39:74:b2:50:15:98:88:ba:8b:36:d7:aa:46:77:
         e6:b2:3e:78:df:ed:14:6b:70:f6:3c:27:7f:ab:86:b4:cb:40:
         56:c1:ad:e6:58:e5:7b:93:4a:74:fd:33:19:05:58:85:08:50:
         39:9d:ad:6a:31:f3:ca:f0:c0:1c:af:f0:31:69:01:ca:94:fe:
         4f:ff:f9:5e:68:9b:19:ab:d9:b0:85:7c:0f:a9:24:6f:bb:cf:
         22:f2:af:53:3b:38:90:ff:b0:ae:23:56:44:5e:c0:78:62:81:
         d9:6f:c2:39:04:59:f9:cf:28:1d:11:e5:8d:86:d1:69:ab:f0:
         5f:cb:2b:33:4b:98:6d:60:a4:80:67:d1:76:6d:59:1a:78:87:
         5c:de:08:33:4a:93:3b:4f:1d:36:71:2c:2a:ff:bf:28:d2:b7:
         5a:f7:da:b0:ac:f3:22:59:fd:f8:6c:b1:6d:3a:9e:bd:c5:34:
         11:91:f0:9a:ee:7d:97:71:08:59:0c:8f:2f:3a:b8:b5:34:5d:
         c9:0e:c1:f8:2a:a0:e0:8d:cf:82:32:21:95:00:76:e6:af:b6:
         78:8c:b2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:28:30 2025 by rpki-client