Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rtr-UIbKXedGT5DunUrHb4SFKNY.roa
File:                     rtr-UIbKXedGT5DunUrHb4SFKNY.roa (raw, json)
Hash identifier:          4Ioc5jp/4lJw1DIv6hwi7bMHiwgP0u+rOmWTR00NDiw=
Subject key identifier:   AE:DA:FE:50:86:CA:5D:E7:46:4F:90:EE:9D:4A:C7:6F:84:85:28:D6
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2395
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rtr-UIbKXedGT5DunUrHb4SFKNY.roa
Signing time:             Mon 10 Feb 2025 14:17:42 +0000
ROA not before:           Mon 10 Feb 2025 14:17:42 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        123.0.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9109 (0x2395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:17:42 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=AEDAFE5086CA5DE7464F90EE9D4AC76F848528D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:5b:ea:3f:7c:2d:2e:77:43:54:fa:84:3c:
                    b7:d0:27:cd:07:14:19:73:22:1e:4d:4b:32:35:ad:
                    9a:b4:fd:de:ad:28:c9:78:d0:62:cb:b7:fa:a2:a4:
                    6a:40:bc:7c:54:f7:f7:ff:a9:72:d3:0f:9e:93:3c:
                    45:49:b0:25:b9:21:dc:0d:dc:04:3c:62:7a:7d:e3:
                    1e:06:14:d1:de:97:d4:bf:38:4f:32:bb:94:c4:62:
                    01:db:2e:fc:c7:80:a4:b0:ef:c3:30:d7:57:ed:4c:
                    0b:5c:53:3c:13:49:d7:3b:b6:83:9b:5d:02:31:0a:
                    e4:44:57:79:48:22:1a:1b:32:bb:b4:93:bc:18:6a:
                    78:53:41:b2:c2:10:a7:54:6a:df:66:e0:94:f6:1e:
                    46:2a:ef:3c:d3:5d:99:5c:6b:7d:eb:fb:d4:2e:92:
                    4e:87:36:cf:90:f7:91:06:70:60:80:6d:66:1c:fe:
                    9f:c3:05:af:6b:d5:cb:4b:b4:1d:45:56:29:93:73:
                    79:0e:10:a9:fc:76:ce:91:d9:08:be:16:ad:77:9f:
                    a7:2c:85:a8:3c:cd:b4:5b:82:b5:61:05:c9:4c:b2:
                    a5:47:96:e9:bd:f6:61:86:48:e6:ce:b8:fb:07:02:
                    a4:f6:2c:e5:0d:a3:59:16:1c:69:ab:68:2a:8c:79:
                    90:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DA:FE:50:86:CA:5D:E7:46:4F:90:EE:9D:4A:C7:6F:84:85:28:D6
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rtr-UIbKXedGT5DunUrHb4SFKNY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:46:ed:81:93:d4:4a:84:d2:8d:c9:6d:d8:de:ce:e4:36:31:
         ec:18:1c:b7:c7:c0:f7:d1:e5:8a:29:bc:58:47:64:bd:7e:9c:
         c9:f5:27:c7:04:07:b4:5b:4e:50:64:7f:6c:82:a7:fc:38:af:
         b0:f7:34:48:9a:4c:0f:35:05:8e:62:84:46:41:51:7b:f3:34:
         f4:36:16:74:a6:ff:db:ce:02:bb:8b:b5:17:1a:4d:86:a3:b2:
         cc:be:85:5c:74:b4:a3:84:2c:00:0e:f6:b5:19:79:0c:1d:b9:
         11:d4:5f:3b:57:4b:b8:73:61:51:1d:4a:d2:a3:19:66:ae:7c:
         ea:39:3f:f8:48:88:b0:6e:9f:22:5d:25:2d:95:2f:26:fb:68:
         c3:ad:34:32:ec:01:98:2b:d1:d4:5c:03:90:49:91:97:a8:84:
         45:25:17:7f:98:6a:92:a3:76:8b:48:82:8f:bf:9f:7a:19:b8:
         80:8f:59:a9:ee:21:ea:33:f3:50:a7:4f:f1:66:f7:8a:e3:60:
         98:2f:c1:a6:4f:34:d2:86:30:09:6d:3a:f9:db:7e:9a:db:1f:
         87:02:34:f1:72:cd:10:e5:f8:16:2d:15:8b:b7:cb:bc:05:18:
         ed:a3:34:e7:a1:86:70:10:c0:67:14:6a:8c:16:5c:dd:29:b9:
         a2:3d:22:98
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICI5UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE3NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFFREFGRTUwODZDQTVE
RTc0NjRGOTBFRTlENEFDNzZGODQ4NTI4RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyrlvqP3wtLndDVPqEPLfQJ80HFBlzIh5NSzI1rZq0/d6tKMl4
0GLLt/qipGpAvHxU9/f/qXLTD56TPEVJsCW5IdwN3AQ8Ynp94x4GFNHel9S/OE8y
u5TEYgHbLvzHgKSw78Mw11ftTAtcUzwTSdc7toObXQIxCuREV3lIIhobMru0k7wY
anhTQbLCEKdUat9m4JT2HkYq7zzTXZlca33r+9Qukk6HNs+Q95EGcGCAbWYc/p/D
Ba9r1ctLtB1FVimTc3kOEKn8ds6R2Qi+Fq13n6cshag8zbRbgrVhBclMsqVHlum9
9mGGSObOuPsHAqT2LOUNo1kWHGmraCqMeZBBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrtr+UIbKXedGT5DunUrHb4SFKNYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3J0ci1VSWJLWGVkR1Q1RHVu
VXJIYjRTRktOWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
ACAwDQYJKoZIhvcNAQELBQADggEBAJtG7YGT1EqE0o3JbdjezuQ2MewYHLfHwPfR
5YopvFhHZL1+nMn1J8cEB7RbTlBkf2yCp/w4r7D3NEiaTA81BY5ihEZBUXvzNPQ2
FnSm/9vOAruLtRcaTYajssy+hVx0tKOELAAO9rUZeQwduRHUXztXS7hzYVEdStKj
GWaufOo5P/hIiLBunyJdJS2VLyb7aMOtNDLsAZgr0dRcA5BJkZeohEUlF3+YapKj
dotIgo+/n3oZuICPWanuIeoz81CnT/Fm94rjYJgvwaZPNNKGMAltOvnbfprbH4cC
NPFyzRDl+BYtFYu3y7wFGO2jNOehhnAQwGcUaowWXN0puaI9Ipg=
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:33:24 2025 by rpki-client