Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZeF-y8GxG5C-62M3rhU4MowU190.roa
File:                     ZeF-y8GxG5C-62M3rhU4MowU190.roa (raw, json)
Hash identifier:          f7Vn49ZB/bxjm2d2/WEVqEndcO9eXakuu0McjqoInGE=
Subject key identifier:   65:E1:7E:CB:C1:B1:1B:90:BE:EB:63:37:AE:15:38:32:8C:14:D7:DD
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       23DF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZeF-y8GxG5C-62M3rhU4MowU190.roa
Signing time:             Mon 10 Feb 2025 14:18:01 +0000
ROA not before:           Mon 10 Feb 2025 14:18:01 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 22:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9183 (0x23df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:01 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=65E17ECBC1B11B90BEEB6337AE1538328C14D7DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0d:c5:f1:1a:2b:27:46:ed:77:3f:ff:61:a3:
                    da:ab:20:f9:62:65:94:ec:54:ff:61:bc:7a:09:5c:
                    d1:ac:62:5e:05:5e:33:13:85:0f:05:8f:6f:75:b2:
                    f4:71:51:6f:ad:7b:d4:97:b8:58:d3:3e:fa:9a:22:
                    5e:a4:10:a6:3c:41:6e:50:9b:26:2f:25:19:b5:b9:
                    73:87:aa:5d:a4:2a:a0:2b:44:68:de:2d:40:e2:3d:
                    fb:64:0a:20:69:10:4d:61:f4:6f:7c:6d:ba:b0:30:
                    4d:49:cc:82:75:ce:55:33:66:9f:59:69:55:f7:26:
                    3a:cf:1b:d9:63:75:64:ac:a0:ca:3a:eb:05:44:22:
                    48:fd:61:78:e0:a2:5b:4b:b2:57:2b:97:b3:d0:f3:
                    31:4d:95:84:d2:9e:b3:1d:be:16:9e:d3:25:5d:22:
                    c9:44:ea:a5:50:83:0c:2b:79:7a:4f:09:5e:e9:9a:
                    10:a8:48:6b:f0:df:41:8f:9d:9f:1e:ff:9e:1b:48:
                    9f:df:11:d9:2f:e9:9b:54:1f:50:c4:4a:49:79:0e:
                    89:51:d0:08:9e:5b:b2:8e:a1:c8:98:16:86:e5:de:
                    88:5b:52:7e:05:b5:48:53:58:e7:00:b6:7b:70:ed:
                    ba:92:0a:4e:df:47:d1:2a:cf:65:ac:4c:ba:e2:ce:
                    ee:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E1:7E:CB:C1:B1:1B:90:BE:EB:63:37:AE:15:38:32:8C:14:D7:DD
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZeF-y8GxG5C-62M3rhU4MowU190.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:66:91:7e:92:cc:78:de:b5:2b:d2:41:db:8e:cb:5e:b8:e0:
         0f:3d:2f:c3:bd:12:2a:1a:9c:d1:1d:f4:ba:16:4e:88:f9:9a:
         ae:20:a0:7e:08:cb:dd:d7:5e:ff:89:62:bc:e0:28:43:6b:0f:
         2c:74:29:4a:31:28:19:82:0b:bb:16:93:5b:30:d5:a4:db:ed:
         5e:f8:7c:27:6c:25:e2:46:00:fd:47:58:e5:0f:c8:ad:c5:2c:
         ab:d3:b1:04:ab:db:0a:43:c2:9f:88:fc:6c:cc:f4:1e:62:8c:
         92:6c:74:ca:d9:91:58:32:5a:23:04:94:e7:1c:f2:6e:cd:ac:
         c6:d7:77:4a:4c:85:fa:42:69:fc:c8:d0:d8:97:46:db:a4:93:
         51:10:45:4c:48:59:88:54:63:70:a2:cd:73:67:f5:0d:c6:86:
         8e:f5:66:61:e3:cf:9a:c9:27:77:bc:75:85:32:3c:24:bd:e3:
         35:ac:86:55:a1:07:d8:b0:f7:4c:be:3b:45:b4:84:70:46:f4:
         df:bf:ce:b2:9b:7a:29:00:d1:49:3e:e9:ed:37:1e:cb:ab:f8:
         b2:ce:9d:8c:35:3c:84:29:55:bc:75:63:2b:fc:72:92:45:eb:
         46:63:94:a2:d3:49:f1:e3:c5:ca:02:6f:6f:d8:7b:d7:bf:e7:
         3a:dd:af:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:01:28 2025 by rpki-client