Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mxkg0Af8jm60S_aC4k2f7xwaHyo.roa
File:                     mxkg0Af8jm60S_aC4k2f7xwaHyo.roa (raw, json)
Hash identifier:          B/xp1I3ggcXEULklzzgrMxpN9W4mgi0OOqylSrCMtJ8=
Subject key identifier:   9B:19:20:D0:07:FC:8E:6E:B4:4B:F6:82:E2:4D:9F:EF:1C:1A:1F:2A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       23C9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mxkg0Af8jm60S_aC4k2f7xwaHyo.roa
Signing time:             Mon 10 Feb 2025 14:17:55 +0000
ROA not before:           Mon 10 Feb 2025 14:17:55 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        61.58.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9161 (0x23c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:17:55 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=9B1920D007FC8E6EB44BF682E24D9FEF1C1A1F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:73:5b:b8:6d:0b:92:20:bb:24:65:c7:22:
                    e0:36:87:d8:92:b3:08:16:bd:1f:44:f4:c3:5d:f4:
                    c9:f5:c3:eb:1a:2d:55:89:c3:5f:1b:84:ce:e8:c4:
                    55:38:f1:1e:f2:5f:85:76:c6:db:4d:88:6b:0d:3e:
                    36:fb:ce:ba:bc:78:16:08:7c:bb:30:3d:70:eb:d8:
                    b5:0e:72:07:46:98:89:18:ac:21:db:a2:e7:a9:e4:
                    d1:93:2d:e8:e8:70:70:32:78:55:87:11:59:d8:11:
                    ec:99:47:2d:31:83:35:ec:1e:80:85:ef:e5:38:c8:
                    47:78:3e:98:0a:a9:3b:a1:98:e4:e3:f3:d1:6f:6d:
                    72:52:ff:b8:de:96:78:2f:c7:49:45:c4:53:a1:8b:
                    d7:ac:d4:9f:22:bf:c6:c4:fc:f1:ab:14:25:24:a8:
                    d5:cb:99:16:93:af:7f:80:f6:97:54:8f:b1:1b:f8:
                    00:fe:5e:5d:54:44:fd:ff:b6:32:1f:33:5b:c0:b4:
                    fc:26:4c:a1:49:fc:76:91:a1:10:27:0b:52:09:ed:
                    b8:e7:1e:79:78:c6:7b:31:eb:dc:63:f2:63:f3:7c:
                    36:45:8e:a0:a4:a7:5d:eb:55:61:e2:cc:ff:00:aa:
                    ec:d0:fa:d4:7e:8a:49:7d:16:61:2c:f1:c5:c8:1b:
                    88:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:19:20:D0:07:FC:8E:6E:B4:4B:F6:82:E2:4D:9F:EF:1C:1A:1F:2A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mxkg0Af8jm60S_aC4k2f7xwaHyo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:ff:37:56:2c:d5:7a:a7:26:47:74:93:1a:2b:a3:52:ed:66:
         09:ad:86:5b:34:12:66:3b:64:b7:bf:8e:01:73:d1:9e:99:db:
         f3:7a:71:8c:24:5b:bd:98:22:aa:e6:bd:b7:3d:16:65:9d:a6:
         9c:75:26:b1:1f:84:02:60:38:db:ed:b0:c7:c4:b9:0f:95:ec:
         b1:e7:89:c5:66:ee:63:cc:75:9d:8f:83:3b:a9:63:2d:7a:72:
         3c:69:33:77:66:c6:83:e1:ac:df:d3:d1:d8:0e:48:d7:22:ee:
         49:c5:4e:3c:f6:c2:b6:e9:a3:a3:d1:5e:6f:78:e7:b9:8c:a2:
         e4:f4:e9:1f:47:f9:db:53:e0:89:33:ab:a8:2b:b2:68:39:80:
         0d:0b:da:6d:1b:64:5e:a9:44:db:d2:e6:f6:78:a0:f6:f3:67:
         06:b9:c6:31:dc:21:3a:af:6b:c8:51:7d:8f:2f:80:11:c6:c8:
         3a:52:bd:11:af:c2:75:22:d8:d2:42:91:fa:26:5d:42:d7:d1:
         8a:0a:22:5f:d5:f5:52:15:00:91:77:4b:b2:1b:12:ed:6f:60:
         b0:97:92:6d:76:6c:18:90:62:26:e9:d0:ef:8b:82:ee:61:2b:
         07:15:29:42:da:f1:34:b8:d6:ca:3e:6e:28:09:22:61:de:4c:
         41:2a:e7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:54:11 2025 by rpki-client