Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gWuLpkdx3699OzQz6SHLWWCeE5c.roa
File:                     gWuLpkdx3699OzQz6SHLWWCeE5c.roa (raw, json)
Hash identifier:          G7NbaKr/ib7siGRg6P2Nd7ui/g7mkIzGVj6JKnfYVzw=
Subject key identifier:   81:6B:8B:A6:47:71:DF:AF:7D:3B:34:33:E9:21:CB:59:60:9E:13:97
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2464
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gWuLpkdx3699OzQz6SHLWWCeE5c.roa
Signing time:             Mon 10 Feb 2025 14:18:35 +0000
ROA not before:           Mon 10 Feb 2025 14:18:35 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 22:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9316 (0x2464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:35 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=816B8BA64771DFAF7D3B3433E921CB59609E1397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4f:e4:37:7d:ef:c3:14:80:af:43:c3:6d:07:
                    51:77:95:4d:c0:07:66:9e:2b:a1:49:da:89:b4:1a:
                    b5:07:2b:d7:e1:e3:b8:c9:77:44:7d:af:ca:37:99:
                    3e:de:95:08:58:c6:34:20:72:56:52:c8:f8:a8:e6:
                    fb:ad:ab:1b:8a:25:fd:6b:56:7a:5b:ca:9e:4a:f8:
                    7a:37:f7:2b:b4:4e:8d:49:aa:38:ae:2b:b5:55:1c:
                    9a:2f:17:65:45:95:d3:fa:48:f2:fb:8f:ea:83:07:
                    82:8b:ed:48:4a:d1:b7:e3:78:45:e4:d1:53:26:55:
                    67:c1:75:59:59:59:2f:ac:a6:df:5f:bb:78:b9:a8:
                    4e:44:ec:d4:57:d5:a8:2e:11:17:5d:9f:98:fa:a7:
                    10:90:11:76:3b:b1:85:ae:79:38:8f:3c:86:4e:dc:
                    ed:a4:14:ea:46:9f:41:54:be:b3:b1:2d:5d:5f:88:
                    2d:74:a2:09:fb:aa:42:b1:42:63:26:b7:6a:3b:33:
                    dd:c8:8a:6d:86:fb:7e:37:3a:80:e8:cc:5b:fd:9f:
                    cd:97:47:d3:8e:0f:06:ee:e3:d1:87:e0:db:d7:f5:
                    ce:60:e6:51:8c:e3:5a:5f:97:1e:6a:bf:2e:02:9a:
                    41:8e:46:3e:a8:c8:a6:c8:84:7a:76:40:3c:c3:1f:
                    30:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6B:8B:A6:47:71:DF:AF:7D:3B:34:33:E9:21:CB:59:60:9E:13:97
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gWuLpkdx3699OzQz6SHLWWCeE5c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:c0:fa:49:84:d9:b5:68:91:a1:8d:11:d3:39:c7:33:fa:3c:
         ae:44:91:00:6d:f0:43:81:c7:c7:5e:7d:2d:80:03:63:65:25:
         d1:8f:3a:9a:ea:97:17:a0:e3:55:48:d4:72:81:3b:e5:44:72:
         36:06:75:cc:c4:b2:9a:ce:e3:18:e0:a8:0c:07:94:6c:c8:c3:
         91:49:59:dc:83:c9:09:c0:f6:0b:70:d4:39:53:40:6f:20:e7:
         6b:dc:04:6a:aa:57:42:49:63:c7:e8:90:52:a9:04:bb:ea:e7:
         39:2c:f5:c8:2e:07:13:27:49:8f:57:2a:ce:64:0b:55:97:6d:
         04:54:75:55:14:53:aa:fc:55:0a:db:d1:da:e7:ea:7e:f7:76:
         52:80:82:e4:bc:70:e9:6e:c4:da:21:fb:88:cc:04:dd:04:64:
         73:b2:ec:a1:a0:65:ce:d1:d2:78:bd:7f:c7:d7:39:ef:e1:45:
         8e:9d:74:f8:b2:9f:07:eb:ed:d7:41:01:ad:7d:67:e1:1c:d5:
         53:14:aa:71:d0:e2:cf:a6:7f:db:7e:87:2b:fc:39:a6:c2:ff:
         11:1d:98:b3:18:bc:6f:33:5d:31:f0:df:91:12:16:0f:f9:f6:
         15:aa:70:ba:9f:69:73:0d:9f:03:ae:0f:25:b5:1f:40:d3:1e:
         60:a9:32:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:03:56 2025 by rpki-client