Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vwEsk3SUIMWErekhx81AFl6zK0o.roa
File:                     vwEsk3SUIMWErekhx81AFl6zK0o.roa (raw, json)
Hash identifier:          0uTAkwI1WBdNMeAmgtXuqs9mQJUc7g4TF+ZffWBWXJU=
Subject key identifier:   BF:01:2C:93:74:94:20:C5:84:AD:E9:21:C7:CD:40:16:5E:B3:2B:4A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       23F4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vwEsk3SUIMWErekhx81AFl6zK0o.roa
Signing time:             Mon 10 Feb 2025 14:18:07 +0000
ROA not before:           Mon 10 Feb 2025 14:18:07 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24163
IP address blocks:        49.158.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 18:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9204 (0x23f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:07 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=BF012C93749420C584ADE921C7CD40165EB32B4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5e:d1:68:fc:1e:a1:86:20:1d:cd:8a:bc:8b:
                    b4:a4:2f:c2:06:ad:75:1c:19:2a:26:f8:0e:d1:45:
                    a7:d0:11:cc:1a:8b:6d:85:a5:aa:82:3a:8d:3a:41:
                    d7:27:9f:d9:6d:01:10:ad:9c:91:a2:14:63:34:ee:
                    51:fc:57:f9:77:b4:a7:47:50:ef:e9:16:d5:4b:fb:
                    9d:43:ad:4e:07:2e:e7:24:f2:09:0f:6d:64:e0:19:
                    b3:6e:55:f3:12:81:84:26:19:a2:91:cd:3b:f4:86:
                    2d:4d:68:d7:69:c4:93:31:01:a6:4b:42:ae:e7:d8:
                    c3:ff:5a:eb:64:53:d1:51:e5:a5:cc:c1:36:b5:2d:
                    dc:39:84:3c:b8:a9:09:21:cc:fa:3e:c1:69:33:86:
                    04:e1:3d:f2:47:93:eb:35:d0:d9:ab:8a:61:b3:e8:
                    36:86:61:f7:54:30:43:e4:47:48:d3:34:e9:c1:a2:
                    e9:80:c7:3d:dc:02:f7:5c:8b:cf:4b:a1:63:e5:74:
                    64:0f:34:8f:cc:e5:af:e1:99:2e:91:f6:17:9b:3e:
                    22:12:4f:8e:73:6e:1b:7a:34:37:98:b9:d0:de:fb:
                    cb:b0:95:e9:a5:85:18:af:e7:5a:cc:27:d8:1d:b8:
                    e2:4d:2e:91:bd:2e:57:34:83:01:df:a7:0b:df:f8:
                    ed:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:01:2C:93:74:94:20:C5:84:AD:E9:21:C7:CD:40:16:5E:B3:2B:4A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vwEsk3SUIMWErekhx81AFl6zK0o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:1d:6b:02:eb:cf:df:e3:cd:1e:e2:0b:0d:ec:1c:52:4e:5f:
         3f:b0:8d:d4:ce:25:ac:59:ef:51:e7:89:4a:e2:0c:97:61:43:
         97:76:a1:ea:c0:5c:5b:b9:91:81:03:71:24:64:44:1c:5d:06:
         6b:0f:0b:2e:57:0f:77:78:47:11:2f:da:71:61:2f:31:75:ca:
         b9:df:13:f7:f1:0b:66:3b:b0:20:0d:ea:c0:66:74:2f:91:4b:
         9c:d7:90:4e:87:cf:1f:32:00:90:8b:1b:2a:a0:98:29:67:7f:
         85:af:17:2f:af:92:2e:00:b3:b1:85:01:eb:a1:1d:5a:a9:ee:
         d5:d8:93:17:f8:3e:a7:43:fa:10:d2:2c:39:f7:a0:67:f7:33:
         de:46:68:ef:14:73:ca:ca:ba:f5:de:78:fa:4f:3f:11:b7:e2:
         38:70:18:49:e6:96:88:c2:c1:db:b5:1f:88:41:81:22:b5:5d:
         42:5d:f2:7f:c3:4e:7e:99:e1:f3:b5:b5:aa:e9:0b:7f:1d:92:
         ab:44:ec:6c:2e:ba:3c:66:74:45:03:b2:08:2a:16:11:d0:9f:
         be:58:90:9b:62:17:f1:ea:ac:94:e3:ab:94:95:ac:1f:ea:c2:
         d0:43:eb:8c:15:63:07:69:1e:df:36:88:7c:9e:fc:1a:db:40:
         69:b7:bb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:54:10 2025 by rpki-client