Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xQAEoyHatiZFsIJaqQD5lyzYkos.roa
File:                     xQAEoyHatiZFsIJaqQD5lyzYkos.roa (raw, json)
Hash identifier:          dzzQAxSH1DE8joD6P8GBDzGRaw3CtlqweqjpCQdODog=
Subject key identifier:   C5:00:04:A3:21:DA:B6:26:45:B0:82:5A:A9:00:F9:97:2C:D8:92:8B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       23A7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xQAEoyHatiZFsIJaqQD5lyzYkos.roa
Signing time:             Mon 10 Feb 2025 14:17:47 +0000
ROA not before:           Mon 10 Feb 2025 14:17:47 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24165
IP address blocks:        124.6.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 22:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9127 (0x23a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:17:47 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C50004A321DAB62645B0825AA900F9972CD8928B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:39:2b:48:ef:a9:74:9e:19:ac:70:99:b5:
                    7d:d7:66:b9:1a:95:d1:39:73:8d:76:2d:fb:3f:b5:
                    37:ab:74:5d:d7:69:a3:05:85:b1:7c:f9:05:45:ea:
                    d9:83:91:f9:80:f3:5f:1d:f9:c9:b4:b7:0b:01:47:
                    ca:1e:21:da:b7:de:79:32:5e:81:77:3a:93:ab:33:
                    7b:15:9a:dc:65:5e:35:06:58:a1:48:70:df:29:fc:
                    08:d3:57:69:23:dd:43:0e:4c:a0:dc:21:ca:f2:b0:
                    f8:f0:17:f4:4e:03:79:96:9c:3f:32:f5:be:93:a9:
                    f8:a3:ad:2a:45:8a:41:5d:3e:4a:08:f2:81:a5:f2:
                    4f:40:fc:f2:d5:9e:b9:40:06:72:63:3e:c3:01:ec:
                    4d:6f:6d:a3:0b:00:12:d6:71:4e:a8:01:30:98:a2:
                    04:23:32:8c:f5:59:70:e7:7d:bb:96:b1:fd:9d:4c:
                    7d:03:05:90:13:d5:69:32:bb:ab:8c:4e:85:0c:19:
                    80:30:77:52:70:d0:e3:ab:32:30:78:8b:2e:88:66:
                    9a:3d:40:50:3c:9f:87:d3:6a:8d:06:fd:35:ee:d7:
                    0a:b2:2d:68:2b:d9:43:25:04:50:20:b9:1d:c7:4b:
                    30:de:86:c6:e3:65:37:20:18:aa:68:5d:55:a4:0d:
                    ee:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:00:04:A3:21:DA:B6:26:45:B0:82:5A:A9:00:F9:97:2C:D8:92:8B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xQAEoyHatiZFsIJaqQD5lyzYkos.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:b6:5c:5a:de:61:0f:1a:4a:9a:db:9d:86:34:7f:08:64:8f:
         1e:87:8c:be:4a:c0:c1:ec:25:7b:ef:c1:ba:02:bc:7a:8c:cf:
         3c:29:ba:cb:f6:c1:d6:79:ff:72:c2:46:ba:2e:72:85:dc:41:
         58:c3:cb:06:f3:f1:ab:64:27:df:f2:c7:2b:99:f9:45:be:a5:
         f5:06:40:c6:71:7d:14:a6:b3:33:ec:f1:9e:21:cc:91:e3:b1:
         70:fd:ba:8c:04:74:6b:b9:d9:0d:7e:9e:14:bb:6c:c8:ef:fb:
         b3:cc:be:b5:ec:71:83:85:8f:a3:da:1b:21:21:e2:3f:d8:7a:
         67:d8:83:97:36:15:13:70:4d:c1:af:bd:90:6b:30:60:fe:d5:
         a0:75:2e:04:52:f1:4c:1b:16:1a:52:31:1a:92:67:33:83:4e:
         ca:f4:3f:55:88:a6:bc:09:85:25:67:ba:e7:ac:3e:33:e0:1e:
         b9:ff:6e:78:2f:d1:ba:54:54:56:66:ce:44:4d:e1:62:74:20:
         67:d1:f7:9b:49:c6:c7:c2:35:fa:2e:3d:0f:03:82:c8:57:39:
         a9:68:b4:5c:93:a2:2b:d6:8b:3a:34:78:b4:00:43:06:23:d1:
         86:91:37:1e:be:f7:9d:95:e4:fc:b1:03:12:b0:bb:a2:6f:44:
         fe:32:c8:bb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICI6cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE3NDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM1MDAwNEEzMjFEQUI2
MjY0NUIwODI1QUE5MDBGOTk3MkNEODkyOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGPzkrSO+pdJ4ZrHCZtX3XZrkaldE5c412Lfs/tTerdF3XaaMF
hbF8+QVF6tmDkfmA818d+cm0twsBR8oeIdq33nkyXoF3OpOrM3sVmtxlXjUGWKFI
cN8p/AjTV2kj3UMOTKDcIcrysPjwF/ROA3mWnD8y9b6TqfijrSpFikFdPkoI8oGl
8k9A/PLVnrlABnJjPsMB7E1vbaMLABLWcU6oATCYogQjMoz1WXDnfbuWsf2dTH0D
BZAT1Wkyu6uMToUMGYAwd1Jw0OOrMjB4iy6IZpo9QFA8n4fTao0G/TXu1wqyLWgr
2UMlBFAguR3HSzDehsbjZTcgGKpoXVWkDe5PAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUxQAEoyHatiZFsIJaqQD5lyzYkoswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3hRQUVveUhhdGlaRnNJSmFx
UUQ1bHl6WWtvcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ8
BhAwDQYJKoZIhvcNAQELBQADggEBAHm2XFreYQ8aSprbnYY0fwhkjx6HjL5KwMHs
JXvvwboCvHqMzzwpusv2wdZ5/3LCRroucoXcQVjDywbz8atkJ9/yxyuZ+UW+pfUG
QMZxfRSmszPs8Z4hzJHjsXD9uowEdGu52Q1+nhS7bMjv+7PMvrXscYOFj6PaGyEh
4j/YemfYg5c2FRNwTcGvvZBrMGD+1aB1LgRS8UwbFhpSMRqSZzODTsr0P1WIprwJ
hSVnuuesPjPgHrn/bngv0bpUVFZmzkRN4WJ0IGfR95tJxsfCNfouPQ8DgshXOalo
tFyToivWizo0eLQAQwYj0YaRNx6+952V5PyxAxKwu6JvRP4yyLs=
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:04:39 2025 by rpki-client