Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gsFETYpNZdvGXF0v5lFbIv8yb7U.roa
File:                     gsFETYpNZdvGXF0v5lFbIv8yb7U.roa (raw, json)
Hash identifier:          b8oIPuOeDd3ncrv3BrON4IJUTcgPr4ww/jxY0p3hwuI=
Subject key identifier:   82:C1:44:4D:8A:4D:65:DB:C6:5C:5D:2F:E6:51:5B:22:FF:32:6F:B5
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       23E5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gsFETYpNZdvGXF0v5lFbIv8yb7U.roa
Signing time:             Mon 10 Feb 2025 14:18:03 +0000
ROA not before:           Mon 10 Feb 2025 14:18:03 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9189 (0x23e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:03 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=82C1444D8A4D65DBC65C5D2FE6515B22FF326FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:a3:f8:b0:35:d3:ac:4c:92:bf:ba:d4:98:
                    45:0e:b6:22:61:47:fb:08:74:f9:c6:21:be:51:48:
                    2c:64:93:9a:de:29:92:f3:46:50:8b:52:21:10:55:
                    16:6e:12:cc:9a:38:26:9f:ab:43:6a:cf:80:fb:c0:
                    a5:ff:74:eb:76:0f:44:30:e5:d0:e9:d2:02:c2:30:
                    36:7a:d6:04:53:99:08:48:41:bf:49:d6:5c:fb:1e:
                    2d:22:0b:7c:57:af:67:66:2d:93:29:f8:eb:25:8d:
                    e5:45:62:6a:d4:07:e3:09:6c:d6:6f:01:b9:e7:bb:
                    d3:e0:ca:88:3a:fe:77:68:2c:ac:8c:df:ee:c8:a5:
                    2c:5d:25:87:19:35:fa:fc:44:83:fd:37:f1:74:71:
                    d8:ca:b8:cc:3d:1a:6c:62:55:01:a0:4d:11:ce:3b:
                    e9:94:ae:74:7a:5c:61:42:f7:20:88:de:3c:7b:7e:
                    7b:11:ee:98:15:3c:a5:86:e5:36:91:d7:52:29:f6:
                    66:17:33:53:90:7e:00:4f:86:a0:c2:16:13:94:92:
                    1c:1f:73:5d:41:67:58:3e:8e:e9:a0:8d:f6:8b:a4:
                    52:27:61:41:bc:23:40:0d:8f:7b:ea:f1:c8:9b:61:
                    91:fd:75:d7:7f:9c:b4:34:9d:17:5a:40:aa:01:24:
                    9e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C1:44:4D:8A:4D:65:DB:C6:5C:5D:2F:E6:51:5B:22:FF:32:6F:B5
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gsFETYpNZdvGXF0v5lFbIv8yb7U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:34:9a:3c:e1:1d:4d:89:6f:3d:a7:49:2e:38:14:04:8f:89:
         18:99:4b:fd:72:93:ae:38:a2:1c:ab:55:14:fc:95:7d:a8:76:
         a8:3c:ed:ff:75:24:70:39:93:30:48:db:14:be:cb:b7:a7:45:
         a6:85:5f:f8:01:58:f0:86:c4:f3:47:f9:e2:8c:18:39:01:65:
         a6:f8:cf:f6:b3:23:99:99:cf:5b:af:15:e4:7a:38:b9:70:8a:
         60:9d:e1:4a:9e:31:29:0c:43:44:15:b5:df:36:a3:36:a5:35:
         59:63:fe:40:92:10:d7:fd:4a:5f:5a:b1:78:4d:16:b9:24:64:
         38:95:46:3b:21:e3:19:91:eb:e4:20:d4:3a:87:7b:f8:5d:eb:
         5f:59:5b:f7:47:cf:71:5e:99:7d:ad:8b:46:e1:4c:1b:ee:7a:
         42:9c:82:42:4f:af:35:5d:bd:fe:af:9c:06:59:bf:73:a3:fa:
         f1:ae:47:40:ed:ab:59:a4:14:37:29:80:d6:76:eb:6f:39:12:
         4a:4e:1c:c4:23:36:94:ff:00:1f:70:89:77:7f:f5:20:80:86:
         01:99:9b:c5:3a:a8:0b:df:c9:69:2d:17:1e:3e:02:e0:74:a9:
         22:2f:2e:b6:a4:3e:47:2b:35:37:93:67:21:64:8f:2d:f0:5a:
         c9:ea:4e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:51:45 2025 by rpki-client