Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZbR7KND1VomDSNcpt6bK0ueidwg.roa
File:                     ZbR7KND1VomDSNcpt6bK0ueidwg.roa (raw, json)
Hash identifier:          3PhL9bI0gJ1HsdUXPisMFEBlkL7lHq4RQOieVsq7A6o=
Subject key identifier:   65:B4:7B:28:D0:F5:56:89:83:48:D7:29:B7:A6:CA:D2:E7:A2:77:08
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       239B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZbR7KND1VomDSNcpt6bK0ueidwg.roa
Signing time:             Mon 10 Feb 2025 14:17:44 +0000
ROA not before:           Mon 10 Feb 2025 14:17:44 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        124.6.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9115 (0x239b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:17:44 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=65B47B28D0F556898348D729B7A6CAD2E7A27708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b1:14:ea:d3:e9:48:69:4c:94:57:60:a9:8d:
                    58:72:ae:da:51:eb:bd:f6:47:55:db:bd:8e:3f:b5:
                    2b:ef:99:bc:64:22:5a:6d:cf:a0:37:22:95:11:06:
                    f9:46:bb:9a:00:b5:3a:e9:8c:50:35:3c:a4:f2:03:
                    c7:26:22:f0:aa:cb:f1:fb:ca:f2:48:9c:b7:69:98:
                    5c:77:7b:87:b3:d5:a6:f8:b3:61:99:ea:06:69:49:
                    76:2d:45:17:32:96:b8:1d:85:f1:2b:48:0a:7f:ab:
                    4c:ae:97:95:53:ca:3a:20:be:85:20:93:cb:a4:ba:
                    da:72:05:58:f0:b0:7e:05:92:5a:9a:f6:3f:8a:03:
                    02:6c:f4:5d:58:d1:23:67:6a:55:6e:74:6e:6a:89:
                    36:35:2d:87:17:3e:6e:b7:82:1d:ad:cb:12:a7:71:
                    b7:1e:a9:fb:f6:8b:30:c6:2a:a9:6f:c5:e7:e5:8a:
                    1f:37:a0:51:67:8f:23:fa:b2:80:6f:48:77:4c:46:
                    64:c7:29:ff:df:09:90:19:ce:fe:62:0b:b3:f0:55:
                    4a:3c:0d:0a:88:6a:9b:d8:d8:3f:ab:17:05:4a:f2:
                    96:92:da:ca:3b:a7:c0:ad:68:47:f0:62:5b:cc:04:
                    66:25:46:0b:30:34:64:69:fc:ca:8e:34:1c:b3:28:
                    f8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B4:7B:28:D0:F5:56:89:83:48:D7:29:B7:A6:CA:D2:E7:A2:77:08
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZbR7KND1VomDSNcpt6bK0ueidwg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         87:ca:a9:7a:04:61:63:20:9b:69:7f:75:84:70:98:37:e9:89:
         82:6d:4a:e3:35:7b:ec:e0:ad:33:3b:b3:45:2b:83:7c:a1:5c:
         f5:59:d1:f8:12:20:10:6f:f8:0e:f1:3c:4d:61:b9:13:50:5a:
         7b:90:a2:66:10:68:00:79:36:5e:b1:e5:82:71:6e:98:76:d8:
         69:da:12:70:1e:86:12:64:de:6b:08:55:59:ab:84:78:3d:b2:
         01:80:d5:f1:bb:ff:8f:62:fe:88:0e:ce:64:11:4b:f8:2e:17:
         52:92:17:6d:15:0a:8d:91:08:9a:c6:bc:70:5d:c5:22:27:1f:
         3b:f8:bb:8b:49:35:c4:e4:c0:d3:2e:94:d0:40:14:aa:2a:d3:
         3e:5b:b5:c6:25:0f:b9:57:6e:f1:39:36:52:e0:ed:63:23:13:
         2e:0a:f2:38:fe:8e:3b:b4:f9:a8:87:5c:c7:89:b6:bb:4c:a7:
         05:e6:9f:89:37:13:26:75:42:33:f2:8e:54:84:f9:8a:a1:69:
         d6:f9:55:3a:78:15:5f:0a:74:19:3a:ff:c0:2c:ee:a9:d0:55:
         4f:da:0d:0f:8f:91:2e:5d:c9:33:04:cb:94:08:77:fd:c0:2c:
         7d:8e:cf:08:d4:fa:db:5d:88:93:06:d4:a0:4c:2d:6f:e0:ed:
         a7:4a:2f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:45:16 2025 by rpki-client