Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tetXS9McAdq6g-OGDOM0mGKii7M.roa
File:                     tetXS9McAdq6g-OGDOM0mGKii7M.roa (raw, json)
Hash identifier:          yX4e3qn+YFb2IRnUVUx2KBifK88fANQmikRx2FcQxIk=
Subject key identifier:   B5:EB:57:4B:D3:1C:01:DA:BA:83:E3:86:0C:E3:34:98:62:A2:8B:B3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2488
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tetXS9McAdq6g-OGDOM0mGKii7M.roa
Signing time:             Mon 10 Feb 2025 14:18:44 +0000
ROA not before:           Mon 10 Feb 2025 14:18:44 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24165
IP address blocks:        124.6.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9352 (0x2488)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:44 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=B5EB574BD31C01DABA83E3860CE3349862A28BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:65:b1:17:bc:fa:c4:ad:ce:4c:a3:0a:1e:
                    3c:28:c9:e1:b1:51:d4:58:6e:a9:69:84:8c:e2:7f:
                    1d:a3:30:ac:53:40:6e:c7:ad:c6:dd:32:6d:1c:a1:
                    1a:14:16:75:2b:a9:42:bb:19:e7:f6:9e:3f:4c:39:
                    5e:f2:ec:59:f9:27:e3:08:2a:63:27:f7:86:b4:b3:
                    cb:82:e7:a4:7d:29:b9:5f:d7:32:4e:96:15:de:e0:
                    58:ee:82:78:86:d0:c7:1b:6b:7a:5d:e0:d0:3d:ca:
                    5c:d3:f5:13:6b:32:2b:05:20:4b:45:13:68:37:3d:
                    1d:0e:eb:b6:3b:60:63:6a:d0:5c:62:38:c7:85:c0:
                    26:7c:1e:81:d1:72:88:f8:f4:42:8a:8d:ef:fb:85:
                    76:38:3a:19:2a:3e:4a:38:15:8a:c6:0c:d1:56:44:
                    f0:ef:5b:5f:5b:46:57:b1:ac:52:dd:ed:9c:43:95:
                    0b:3e:a4:b3:64:6f:8f:cb:a1:95:9b:bd:d8:bc:69:
                    b4:3b:df:aa:5d:cb:64:f7:49:17:de:4f:1b:81:f7:
                    0b:04:47:d8:e3:1f:b1:60:59:b0:50:93:fe:d0:9e:
                    bf:e4:60:44:e0:cd:92:2e:ff:da:10:8b:84:8b:0e:
                    57:09:3c:14:79:d1:c2:0c:05:59:38:99:ac:fd:26:
                    59:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EB:57:4B:D3:1C:01:DA:BA:83:E3:86:0C:E3:34:98:62:A2:8B:B3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tetXS9McAdq6g-OGDOM0mGKii7M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:d4:cb:3f:70:58:44:e2:0a:46:fb:b1:b6:c9:6f:a2:d5:b2:
         76:2f:e5:d8:a9:10:a9:39:a2:f5:8d:7d:08:85:5b:39:f7:f8:
         a2:7f:f9:4d:59:b3:be:99:73:f6:6c:79:c2:9c:95:fc:9a:95:
         26:f7:79:19:38:c5:e3:fc:98:ca:ea:cb:65:93:80:89:33:65:
         0b:bd:f7:7a:ba:7e:6c:ff:8b:67:0b:60:ee:62:58:d2:1d:f9:
         7e:55:88:48:f6:e6:8d:68:48:7d:c7:db:21:1c:eb:73:ea:d9:
         81:bc:a8:27:7d:70:94:54:32:dc:26:79:82:60:f8:09:02:31:
         6f:8e:e7:40:22:1c:6b:02:8d:ea:32:24:24:b9:c4:84:80:a2:
         6d:e5:48:11:b6:60:67:4b:ac:3b:7f:33:49:fb:cd:24:b2:5b:
         ab:f9:76:d7:8a:22:ae:70:49:9b:52:26:66:e4:8d:ff:72:f3:
         8a:0c:eb:c3:9a:c8:eb:35:13:46:7c:cd:66:57:91:9f:c5:8f:
         1d:e4:8d:95:75:09:c1:5d:be:fc:f4:ba:01:eb:b4:c0:3a:58:
         b0:da:85:59:88:b7:4d:42:e8:75:af:ee:e1:dc:aa:1a:5c:ea:
         da:de:1b:08:c7:12:e2:96:4b:8b:f4:b3:00:ba:f0:da:58:45:
         d1:74:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:47:23 2025 by rpki-client