Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VXrVBwIwRHYrwwBwJYYiHrQi_0U.roa
File:                     VXrVBwIwRHYrwwBwJYYiHrQi_0U.roa (raw, json)
Hash identifier:          HmLdne6DT1pgMyFkuoyyFRtB9PunJzoiCzxnpogQlLY=
Subject key identifier:   55:7A:D5:07:02:30:44:76:2B:C3:00:70:25:86:22:1E:B4:22:FF:45
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       24BC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VXrVBwIwRHYrwwBwJYYiHrQi_0U.roa
Signing time:             Mon 10 Feb 2025 14:18:56 +0000
ROA not before:           Mon 10 Feb 2025 14:18:56 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9404 (0x24bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:56 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=557AD507023044762BC300702586221EB422FF45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:d3:b9:90:1f:5d:c3:ce:9a:b3:8e:96:d7:
                    33:2b:1f:b6:73:9f:db:29:74:ff:aa:7d:ed:6d:53:
                    92:05:5a:67:75:bc:88:e7:3f:3c:9d:05:bb:2d:c0:
                    e2:83:42:31:57:43:9e:4a:41:48:d4:56:1d:95:c8:
                    f4:ae:3b:d7:be:48:a5:3f:eb:e4:3a:ed:13:2a:89:
                    ee:65:12:8e:ad:4e:f7:be:c7:71:a3:39:5b:2e:5d:
                    84:27:a2:a0:96:c8:48:2b:f5:79:2c:9a:04:8d:5c:
                    50:dd:28:d7:6e:8f:1c:4b:36:35:7d:19:70:fc:45:
                    31:67:d3:f7:c0:54:e5:6b:42:c2:89:01:30:b6:7a:
                    89:fd:38:22:47:36:13:50:7a:02:2d:bb:5e:a6:0b:
                    11:e9:58:d1:3f:40:cd:6e:de:77:0b:0a:ca:37:8d:
                    86:92:8c:04:f9:a8:8d:ea:9f:83:eb:49:2a:50:e0:
                    17:bf:9f:3c:14:8c:0f:e4:12:f4:67:31:2e:3c:d2:
                    3b:29:28:92:5e:74:be:83:c0:50:0c:46:c8:61:21:
                    2d:23:88:9b:d7:a3:38:29:59:de:91:57:3e:82:08:
                    14:1e:b2:d3:17:d2:e2:33:e4:cb:b7:1d:a7:3c:fc:
                    30:57:56:b8:2d:65:a0:48:25:13:a5:fe:a8:f8:3b:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7A:D5:07:02:30:44:76:2B:C3:00:70:25:86:22:1E:B4:22:FF:45
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VXrVBwIwRHYrwwBwJYYiHrQi_0U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:5f:97:36:b1:64:5e:6d:5b:2a:a3:05:4e:4e:31:27:62:d6:
         b3:29:8f:92:62:a8:a1:86:c4:f9:95:5d:08:92:a3:03:af:7f:
         57:16:ea:7d:37:5c:8b:2a:05:a0:ff:b0:fc:28:ef:4b:d4:2f:
         bc:22:3c:7e:de:bc:8b:50:18:70:6d:04:95:4e:e9:b0:08:a6:
         39:e9:92:b8:bf:09:41:31:38:d6:6d:d3:3c:1e:cd:e9:91:0b:
         ed:d8:d9:c7:8e:c9:2b:46:db:1d:19:9a:02:6d:14:ac:51:84:
         2b:ca:7e:07:b7:f1:c7:d4:fc:18:15:f1:84:97:f3:d1:31:bc:
         7a:b6:26:a6:a7:96:58:5b:bf:12:c2:b4:e8:4f:75:5c:9f:40:
         4d:57:73:03:ea:70:a6:d4:d3:1d:b5:ea:57:05:4a:13:e2:45:
         41:66:1e:6c:30:e3:8b:16:02:a3:fd:24:28:df:eb:ec:65:c6:
         7f:87:03:e0:a2:bd:ba:05:49:c2:b9:61:0a:3f:51:c2:e0:7e:
         8a:46:d0:cc:49:b5:a5:8a:ec:30:b9:80:a6:98:4f:35:b3:de:
         86:95:37:e7:b5:be:0b:55:38:af:eb:85:8e:45:35:1e:4e:ed:
         87:1a:66:19:f3:63:55:7e:c4:09:cb:92:de:c1:dd:ba:d9:d6:
         cf:90:ed:c9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJLwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE4NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU1N0FENTA3MDIzMDQ0
NzYyQkMzMDA3MDI1ODYyMjFFQjQyMkZGNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIX9O5kB9dw86as46W1zMrH7Zzn9spdP+qfe1tU5IFWmd1vIjn
PzydBbstwOKDQjFXQ55KQUjUVh2VyPSuO9e+SKU/6+Q67RMqie5lEo6tTve+x3Gj
OVsuXYQnoqCWyEgr9XksmgSNXFDdKNdujxxLNjV9GXD8RTFn0/fAVOVrQsKJATC2
eon9OCJHNhNQegItu16mCxHpWNE/QM1u3ncLCso3jYaSjAT5qI3qn4PrSSpQ4Be/
nzwUjA/kEvRnMS480jspKJJedL6DwFAMRshhIS0jiJvXozgpWd6RVz6CCBQestMX
0uIz5Mu3Hac8/DBXVrgtZaBIJROl/qj4OzopAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVXrVBwIwRHYrwwBwJYYiHrQi/0UwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ZYclZCd0l3UkhZcnd3QndK
WVlpSHJRaV8wVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2rwwDQYJKoZIhvcNAQELBQADggEBAAZflzaxZF5tWyqjBU5OMSdi1rMpj5JiqKGG
xPmVXQiSowOvf1cW6n03XIsqBaD/sPwo70vUL7wiPH7evItQGHBtBJVO6bAIpjnp
kri/CUExONZt0zwezemRC+3Y2ceOyStG2x0ZmgJtFKxRhCvKfge38cfU/BgV8YSX
89ExvHq2JqanllhbvxLCtOhPdVyfQE1XcwPqcKbU0x216lcFShPiRUFmHmww44sW
AqP9JCjf6+xlxn+HA+CivboFScK5YQo/UcLgfopG0MxJtaWK7DC5gKaYTzWz3oaV
N+e1vgtVOK/rhY5FNR5O7YcaZhnzY1V+xAnLkt7B3brZ1s+Q7ck=
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:54:15 2025 by rpki-client