Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/boi5pu3X5wTnhI48VYPd5feIPDM.roa
File:                     boi5pu3X5wTnhI48VYPd5feIPDM.roa (raw, json)
Hash identifier:          k8Y470Hcp4FJpPyImGi5a3G14BamKuRl3/H7kfetDOs=
Subject key identifier:   6E:88:B9:A6:ED:D7:E7:04:E7:84:8E:3C:55:83:DD:E5:F7:88:3C:33
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       243B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/boi5pu3X5wTnhI48VYPd5feIPDM.roa
Signing time:             Mon 10 Feb 2025 14:18:25 +0000
ROA not before:           Mon 10 Feb 2025 14:18:25 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24163
IP address blocks:        61.61.212.0/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9275 (0x243b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:25 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6E88B9A6EDD7E704E7848E3C5583DDE5F7883C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:85:cf:21:08:00:15:5b:60:0d:e7:f2:03:15:
                    6e:1b:88:28:1a:1b:2d:4d:9a:52:c3:88:ed:75:e7:
                    35:92:8f:94:88:8b:a9:89:2d:9a:b8:62:7b:73:dd:
                    3b:8d:11:4a:fa:c4:49:a4:6d:3c:87:77:0e:e8:86:
                    24:36:22:03:f3:76:4a:1c:71:82:83:c4:74:10:39:
                    26:f5:b5:cc:b6:15:c8:dc:ca:92:f3:d0:9e:62:f4:
                    b7:59:18:26:cf:b1:67:31:29:ce:37:03:0e:81:ec:
                    eb:d3:b9:50:57:c4:aa:0a:ff:c6:59:dd:dd:69:36:
                    9c:31:f3:3d:ae:10:9b:3a:ac:ac:d2:53:b5:28:07:
                    6c:e5:10:ec:dd:8b:fc:92:10:3e:a3:31:5a:40:aa:
                    de:cb:cb:7e:59:77:6f:cb:32:c5:c8:89:58:0c:5a:
                    84:cc:68:25:20:ad:d5:5a:d9:bd:4e:c4:eb:46:75:
                    86:23:68:bb:c6:d5:06:a6:6d:11:f4:6c:0d:af:3f:
                    a1:b0:d4:6a:4c:fd:94:c0:ca:86:e9:ad:db:31:10:
                    33:cd:d6:69:77:c5:54:b9:c7:64:22:ac:1b:13:fd:
                    d0:f1:a0:16:1e:95:f3:9a:f0:45:ea:01:5b:b5:4e:
                    b2:98:7f:29:2f:8f:16:03:9a:60:3f:de:30:7f:b0:
                    f4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:88:B9:A6:ED:D7:E7:04:E7:84:8E:3C:55:83:DD:E5:F7:88:3C:33
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/boi5pu3X5wTnhI48VYPd5feIPDM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.212.0/27

    Signature Algorithm: sha256WithRSAEncryption
         82:32:87:4a:8a:4f:19:ba:6e:6f:54:ea:c3:ea:a5:42:8a:41:
         7f:85:27:e9:89:62:1d:87:8d:12:19:8c:3a:48:fc:0e:48:73:
         38:d2:d7:7e:6d:7c:d2:dc:45:0c:2f:d7:ca:2d:7f:9b:e7:b8:
         83:02:05:01:22:b6:ec:6a:9c:1a:3b:d8:34:5e:c4:ea:c2:ff:
         fb:88:21:16:7a:2e:c9:f8:a9:c6:aa:73:09:7d:82:be:18:6d:
         5a:76:ed:33:cd:bd:89:f7:43:41:f7:14:bf:5a:c8:25:5a:29:
         76:52:36:a4:73:71:4d:b0:21:57:ed:ff:08:f8:4a:bf:46:10:
         c0:78:5c:65:e7:23:e2:66:2d:11:d9:5d:ad:e2:01:1d:cf:d7:
         4b:12:e0:c8:3b:b5:68:79:1b:78:76:32:99:f1:3c:fe:77:14:
         b7:af:89:ef:f5:11:7e:23:b0:31:0e:91:71:2c:fe:c0:e6:0f:
         06:16:8e:0d:7f:2c:36:ba:34:c6:a2:d4:f3:ce:47:e3:c8:5b:
         9d:b8:ae:83:6e:26:4d:64:bd:94:5e:4c:cb:00:38:10:65:06:
         0e:d0:be:ae:1f:82:e5:bd:4b:f6:50:5a:e1:b6:92:4b:4f:12:
         07:f9:cc:5e:4e:2e:fd:aa:d9:3d:cb:3d:76:bd:d3:08:9b:31:
         ff:e8:b1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:51:44 2025 by rpki-client