Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hJK0FzzftgUexh5GyhR8qptqiSY.roa
File:                     hJK0FzzftgUexh5GyhR8qptqiSY.roa (raw, json)
Hash identifier:          ufdTftbJQpV3UyMWuPV52CLEmXonYgB0bY/rZFRuVUE=
Subject key identifier:   84:92:B4:17:3C:DF:B6:05:1E:C6:1E:46:CA:14:7C:AA:9B:6A:89:26
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       239C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hJK0FzzftgUexh5GyhR8qptqiSY.roa
Signing time:             Mon 10 Feb 2025 14:17:44 +0000
ROA not before:           Mon 10 Feb 2025 14:17:44 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.16.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9116 (0x239c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:17:44 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8492B4173CDFB6051EC61E46CA147CAA9B6A8926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:65:ea:b0:0e:0e:ae:f9:84:c3:fb:dd:12:
                    79:bb:96:ce:d9:79:fb:5f:dc:92:eb:16:52:ab:d4:
                    58:93:a9:75:01:cb:cd:30:ed:52:16:89:73:a9:45:
                    89:79:d8:d9:39:7a:6c:2f:93:8e:20:ea:17:39:1a:
                    8a:00:40:f9:51:e3:00:5b:51:23:56:cb:ae:cc:67:
                    15:88:33:87:d0:0f:37:51:41:56:22:36:05:3f:24:
                    62:d7:c9:ca:99:df:16:e5:c8:b7:8e:5d:f5:7b:48:
                    e0:6b:54:f7:47:d2:58:dc:c3:ab:52:48:5e:cf:79:
                    68:df:34:fe:1f:6a:0d:bf:a1:e9:65:ac:30:23:6d:
                    50:10:ac:8a:18:0e:55:36:d7:f7:f9:67:86:ac:21:
                    14:7c:bc:ea:40:37:74:26:76:c3:4a:47:37:fd:3b:
                    f0:76:05:23:72:8c:a5:9a:22:5c:e8:4a:3e:6c:47:
                    79:e5:4e:0f:6b:5c:13:3b:3d:91:9b:48:78:0e:8b:
                    0a:ce:aa:58:ee:00:7b:61:18:e0:d8:0b:a2:70:a1:
                    74:ee:9b:11:2e:71:7f:e1:6f:90:44:1c:43:2f:bb:
                    8a:3e:25:a3:6c:9e:1b:ad:87:b3:18:6a:bf:6a:18:
                    aa:94:b5:45:11:e8:83:39:fb:53:8d:4a:9f:93:a4:
                    2b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:92:B4:17:3C:DF:B6:05:1E:C6:1E:46:CA:14:7C:AA:9B:6A:89:26
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hJK0FzzftgUexh5GyhR8qptqiSY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:84:af:35:57:76:3c:f5:41:1d:bf:8b:25:50:c7:8f:11:77:
         0d:1b:9a:48:4f:21:da:42:73:ce:ec:06:af:f1:cf:8b:cc:be:
         fc:e1:7e:f5:e6:59:b7:b0:75:84:a9:0a:b7:39:a3:b3:98:3b:
         9a:6d:d5:f3:25:2f:b3:54:12:11:1a:be:cc:20:1b:3b:49:9d:
         32:66:4b:8e:1a:44:60:e7:c1:79:e7:fd:f3:64:f0:d4:c9:c6:
         28:57:49:c9:a6:17:16:19:40:6b:3d:12:b3:47:5a:79:86:3d:
         7a:5e:80:99:f5:f1:4f:7c:81:3f:54:bc:30:52:54:f2:5b:e3:
         71:f9:2a:5c:26:69:8c:47:e0:39:0b:80:fa:9f:09:56:92:cc:
         d6:f4:66:ae:9f:4b:a3:14:f8:f7:32:72:ee:30:5e:96:1d:f7:
         31:e0:ab:c7:9a:c0:b7:c3:de:0b:ea:a9:e0:da:f8:5a:aa:bc:
         0d:ee:de:c6:2a:50:7d:03:2f:51:8e:7a:ac:cf:bf:9b:48:80:
         91:b4:40:fb:9e:c0:28:e5:aa:aa:61:57:fa:ac:e2:16:3d:64:
         11:23:58:cd:33:17:b7:42:5b:8d:eb:fc:f4:c1:eb:9b:ad:09:
         ef:46:b1:ef:22:cc:45:72:cc:8c:88:46:db:f1:35:6c:1c:42:
         8f:41:cc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:54:17 2025 by rpki-client