Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uId1xSEWeoXAKT9qZdwO8R761lU.roa
File:                     uId1xSEWeoXAKT9qZdwO8R761lU.roa (raw, json)
Hash identifier:          UA06BSMob0jYfPvjHEjfjUmvd1CLENHICOJgfSgkz40=
Subject key identifier:   B8:87:75:C5:21:16:7A:85:C0:29:3F:6A:65:DC:0E:F1:1E:FA:D6:55
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       247D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uId1xSEWeoXAKT9qZdwO8R761lU.roa
Signing time:             Mon 10 Feb 2025 14:18:42 +0000
ROA not before:           Mon 10 Feb 2025 14:18:42 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        49.158.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 22:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9341 (0x247d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:42 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=B88775C521167A85C0293F6A65DC0EF11EFAD655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f4:d8:b3:c6:12:0a:42:54:f2:46:50:df:e9:
                    8e:a0:27:c4:3d:86:b4:0c:d1:42:74:99:bc:dd:b2:
                    c0:7b:a2:c5:28:f0:5d:47:c4:69:f6:6b:90:75:bc:
                    33:17:be:c1:7e:cb:39:0e:1b:c0:6e:32:08:78:29:
                    60:ff:4b:dc:8e:2b:df:5b:98:1b:13:22:99:8f:f1:
                    ed:91:cf:74:ee:6a:ef:26:68:ef:e9:77:6f:87:71:
                    4b:23:0b:cf:48:8d:a5:1c:d2:d5:a3:83:c7:55:68:
                    84:d8:62:fd:0d:c8:ef:d3:0e:6b:e3:92:52:64:4e:
                    bb:5a:1e:cc:99:78:c6:f1:75:af:54:a7:99:42:fd:
                    a1:72:84:71:ce:45:a7:c8:78:98:c3:aa:87:f5:44:
                    58:5d:ae:39:3a:d7:85:84:fd:53:e2:7a:dd:b0:1d:
                    1f:53:0c:1e:16:a6:69:14:e2:73:41:32:80:44:f4:
                    d1:6a:3f:b1:45:c7:29:94:d1:30:e8:8a:8a:e0:cb:
                    e2:a3:75:7e:f2:18:58:90:d0:0f:a9:db:7f:1e:c7:
                    00:0e:75:15:ae:f5:ac:4e:f0:4d:41:f3:7a:9f:9f:
                    d0:91:1f:98:b0:16:94:c1:48:d3:f5:f9:80:9a:e0:
                    12:13:31:18:49:0c:42:d2:14:9e:a1:55:4e:e6:74:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:87:75:C5:21:16:7A:85:C0:29:3F:6A:65:DC:0E:F1:1E:FA:D6:55
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uId1xSEWeoXAKT9qZdwO8R761lU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:a9:f7:a3:d0:03:64:d8:15:af:c9:32:6c:fc:3a:3d:91:0d:
         26:1d:4e:be:2b:69:4f:88:65:c6:ab:a3:0a:13:5b:4c:e1:aa:
         ad:ba:8b:c9:a4:62:79:98:f9:bf:8f:2e:81:c4:a8:27:f0:80:
         25:e9:20:9c:53:3f:16:27:8c:d5:07:d0:a6:af:b3:c0:b8:e5:
         4f:f5:51:30:7b:c1:9f:1c:69:7c:5b:ad:d5:66:83:22:51:a6:
         77:46:6e:2c:96:5b:a2:13:7e:6b:1b:25:f3:03:e1:94:2a:b8:
         47:ac:5d:d3:21:62:90:b0:13:fa:39:89:0c:af:8a:48:1e:a5:
         3f:26:00:b5:a6:8c:e5:e2:01:6e:6f:30:e3:3e:a8:4c:05:dd:
         68:2e:73:d4:2c:08:80:6a:55:af:b4:e2:19:b2:fb:34:8e:a7:
         20:e1:0f:36:54:38:e4:22:a4:f8:36:dc:7b:03:a4:56:b8:13:
         4e:e9:60:ba:de:7e:d6:64:16:ff:4d:46:6a:2d:ca:6b:92:9d:
         c0:3b:d6:cb:b9:76:6e:ad:4f:97:55:9f:b9:9e:69:11:0d:5e:
         bf:86:b7:39:dc:49:48:95:97:6d:d7:10:07:de:11:5f:99:5f:
         c6:4a:90:14:b4:1e:44:9f:03:09:a8:61:cd:d1:97:59:35:98:
         75:dd:44:26
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE4NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI4ODc3NUM1MjExNjdB
ODVDMDI5M0Y2QTY1REMwRUYxMUVGQUQ2NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDV9NizxhIKQlTyRlDf6Y6gJ8Q9hrQM0UJ0mbzdssB7osUo8F1H
xGn2a5B1vDMXvsF+yzkOG8BuMgh4KWD/S9yOK99bmBsTIpmP8e2Rz3Tuau8maO/p
d2+HcUsjC89IjaUc0tWjg8dVaITYYv0NyO/TDmvjklJkTrtaHsyZeMbxda9Up5lC
/aFyhHHORafIeJjDqof1RFhdrjk614WE/VPiet2wHR9TDB4WpmkU4nNBMoBE9NFq
P7FFxymU0TDoiorgy+KjdX7yGFiQ0A+p238exwAOdRWu9axO8E1B83qfn9CRH5iw
FpTBSNP1+YCa4BITMRhJDELSFJ6hVU7mdEBdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuId1xSEWeoXAKT9qZdwO8R761lUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3VJZDF4U0VXZW9YQUtUOXFa
ZHdPOFI3NjFsVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
nkwwDQYJKoZIhvcNAQELBQADggEBACup96PQA2TYFa/JMmz8Oj2RDSYdTr4raU+I
ZcarowoTW0zhqq26i8mkYnmY+b+PLoHEqCfwgCXpIJxTPxYnjNUH0Kavs8C45U/1
UTB7wZ8caXxbrdVmgyJRpndGbiyWW6ITfmsbJfMD4ZQquEesXdMhYpCwE/o5iQyv
ikgepT8mALWmjOXiAW5vMOM+qEwF3Wguc9QsCIBqVa+04hmy+zSOpyDhDzZUOOQi
pPg23HsDpFa4E07pYLreftZkFv9NRmotymuSncA71su5dm6tT5dVn7meaRENXr+G
tzncSUiVl23XEAfeEV+ZX8ZKkBS0HkSfAwmoYc3Rl1k1mHXdRCY=
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:08:27 2025 by rpki-client