Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/acuD-qgfw4CxrVO7Icz-yFoO60s.roa
File:                     acuD-qgfw4CxrVO7Icz-yFoO60s.roa (raw, json)
Hash identifier:          2wrz5iwfTb816YvTR4tuvYMrAU/04wUKOW6cZfnrcH4=
Subject key identifier:   69:CB:83:FA:A8:1F:C3:80:B1:AD:53:BB:21:CC:FE:C8:5A:0E:EB:4B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       242C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/acuD-qgfw4CxrVO7Icz-yFoO60s.roa
Signing time:             Mon 10 Feb 2025 14:18:22 +0000
ROA not before:           Mon 10 Feb 2025 14:18:22 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        2407:4b00:ff01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 22:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9260 (0x242c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:22 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=69CB83FAA81FC380B1AD53BB21CCFEC85A0EEB4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:18:c8:fc:45:ef:1a:88:33:ed:13:83:45:
                    58:9a:9c:01:54:cc:ae:5c:28:07:73:ee:8d:f3:fd:
                    07:12:a4:4e:1f:c5:53:78:45:23:58:20:09:d0:a4:
                    78:5f:1a:02:79:3b:39:dc:ba:61:35:db:01:ef:1a:
                    e8:eb:04:87:28:32:64:7c:e7:88:85:07:c2:57:d0:
                    58:1a:01:1f:d7:86:8d:63:83:68:62:80:58:64:ce:
                    7d:d1:fa:12:0b:9a:e3:cd:35:f7:69:4f:81:4f:79:
                    42:e4:b4:10:a4:56:9f:28:59:c6:5e:93:8b:6a:53:
                    20:46:6e:48:6e:c8:d1:96:9c:6d:58:64:1b:a8:a7:
                    72:47:8a:6b:c5:de:93:b7:26:56:97:c6:c3:fa:e7:
                    da:19:bc:39:ba:92:f5:ba:8f:c8:25:1f:da:3b:55:
                    df:6a:c7:a3:d9:92:69:bb:95:ac:79:2c:c5:7b:31:
                    e2:11:07:7b:77:98:15:73:38:a9:3c:30:ac:79:46:
                    e6:11:93:86:96:84:e5:aa:d0:4d:f4:d4:a0:53:dc:
                    e9:8d:35:9c:f1:e3:3a:85:94:cb:aa:61:5a:7b:d0:
                    70:c9:ea:09:be:86:87:8f:a6:a3:ce:5b:cb:96:a8:
                    52:6c:df:1e:f7:04:f6:4b:09:cc:2d:14:75:53:a4:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CB:83:FA:A8:1F:C3:80:B1:AD:53:BB:21:CC:FE:C8:5A:0E:EB:4B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/acuD-qgfw4CxrVO7Icz-yFoO60s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4b00:ff01::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:1a:2b:7b:7f:75:da:da:84:72:0a:9a:bd:d3:c9:72:0c:ed:
         cc:cd:f0:25:3b:87:e1:c1:3b:ce:37:99:c6:f9:2b:59:b4:01:
         34:53:2a:0f:51:c6:c4:34:a6:c8:5e:52:27:0b:03:6b:93:1a:
         ab:98:ad:b9:18:80:f6:12:38:18:b6:c5:ee:76:5d:d5:ff:b8:
         e8:bf:a0:11:e7:99:2c:af:e8:57:51:4d:0c:3d:b3:06:62:9e:
         6e:c1:9f:9b:2f:0a:46:ab:14:27:24:99:96:b1:71:5b:9b:27:
         e2:54:7d:b5:ca:8a:b6:81:4d:1a:3b:4f:d7:ff:d1:51:6e:79:
         54:29:16:05:de:cb:a1:f1:03:6d:bd:40:a8:d2:77:f1:dd:0b:
         cd:20:89:14:48:c7:4f:19:50:22:50:bb:c4:c4:03:2f:73:a6:
         4a:5c:81:f7:61:be:a3:88:76:19:c1:d6:a3:e3:d9:f1:80:85:
         86:57:3b:ff:5f:3b:0d:e2:82:76:14:4e:62:04:8c:1f:b4:fa:
         cd:a1:50:b8:c2:8d:29:58:24:c2:7e:e8:fc:6f:8c:d2:af:a0:
         24:b7:bb:7d:56:1b:69:e1:e9:83:02:92:58:15:37:9d:b5:da:
         3e:03:4f:03:54:3c:fe:82:75:3a:d1:0d:a4:3b:fe:f0:66:5b:
         99:4c:e2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:08:18 2025 by rpki-client