Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1fJw0rinRkZCsBsRTB-MjQeLnmo.roa
File:                     1fJw0rinRkZCsBsRTB-MjQeLnmo.roa (raw, json)
Hash identifier:          z0E3YCMNuOju94ycM3TKiOx5LY8qTzt6k1SN8qrZAGE=
Subject key identifier:   D5:F2:70:D2:B8:A7:46:46:42:B0:1B:11:4C:1F:8C:8D:07:8B:9E:6A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       248F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1fJw0rinRkZCsBsRTB-MjQeLnmo.roa
Signing time:             Mon 10 Feb 2025 14:18:46 +0000
ROA not before:           Mon 10 Feb 2025 14:18:46 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        180.218.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9359 (0x248f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:46 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D5F270D2B8A7464642B01B114C1F8C8D078B9E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5a:f5:b4:82:cd:e2:ac:33:a1:31:b2:56:b3:
                    c9:81:96:c2:2e:0e:0b:e3:e4:b5:b3:50:25:f9:fa:
                    32:1c:c9:1d:e9:d8:19:f3:02:54:e9:15:97:f1:a7:
                    89:4a:ae:85:ed:1e:7d:a8:d8:f8:19:6f:51:a3:77:
                    db:dc:c9:7c:df:42:44:30:0f:b9:33:67:a3:03:69:
                    6b:49:47:93:fc:60:e8:24:4c:05:c4:ce:c4:b8:18:
                    0a:e8:3f:2b:97:3a:e6:ff:57:0c:1b:76:41:36:0f:
                    f3:24:7a:4a:e5:35:dc:ec:ec:00:b6:f9:1d:f5:ff:
                    7b:15:a3:ba:ec:c8:ec:52:08:4d:c1:79:23:dd:10:
                    a1:df:58:92:dd:a3:4e:0c:df:9a:f7:25:24:42:94:
                    74:ec:2f:99:8c:3e:70:b0:16:b8:05:19:7f:4b:7c:
                    5b:e6:c5:94:ce:29:5a:90:0d:e9:09:bf:d9:61:1e:
                    0e:c6:a1:6c:01:eb:3e:2a:0b:8f:3a:0c:15:94:ac:
                    b0:1b:ce:2d:7d:6e:25:83:76:a4:7e:8a:bc:61:e7:
                    8c:da:e5:6b:75:b2:bc:86:34:f2:db:35:fa:6e:f2:
                    5b:2f:e2:37:0c:de:af:e8:5b:74:7d:ac:96:cf:cd:
                    5e:36:a5:49:56:46:4f:c2:e7:4a:4a:f3:e6:db:77:
                    28:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F2:70:D2:B8:A7:46:46:42:B0:1B:11:4C:1F:8C:8D:07:8B:9E:6A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1fJw0rinRkZCsBsRTB-MjQeLnmo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:f9:6a:f3:4d:2e:e1:6c:09:d6:75:fd:3b:01:52:a9:2a:ab:
         cb:c1:91:a0:ef:0c:0d:73:11:69:e2:fc:62:09:17:60:0c:2e:
         27:6e:5e:2b:f6:81:a3:11:c5:46:00:4d:5b:81:11:b1:e8:5d:
         e9:d4:68:c7:52:76:0a:33:84:e2:dd:5b:23:2d:46:1b:22:16:
         ac:94:10:a7:86:27:0d:b0:23:20:5c:11:67:dc:ab:52:2a:b0:
         3f:fb:c3:4b:fb:6d:37:f4:34:d1:e0:ac:0c:be:02:43:f1:8a:
         41:91:d5:6a:42:bc:8d:93:1a:d2:d4:39:35:51:18:ce:ce:ca:
         8d:e5:72:15:c6:af:4a:a2:ca:d8:86:6a:fb:4d:9a:9b:3c:83:
         44:e7:e5:67:3a:ff:ef:c6:0b:e6:4a:7f:b0:00:dc:ac:c1:ec:
         b7:16:f2:02:ee:f1:e5:f0:f9:6f:c7:fb:7a:36:a4:11:2e:1b:
         c4:da:1b:14:f0:77:b9:c4:77:4d:ea:38:4a:04:1a:80:0e:4a:
         8e:e6:11:79:e8:dc:b3:4a:84:1f:bc:12:e3:51:eb:4f:b2:2a:
         cf:5d:d5:34:e7:a0:da:11:76:7a:fe:98:0f:b2:35:25:f6:4d:
         63:ef:c6:16:96:42:9c:03:fb:23:bf:55:81:0e:5c:39:81:37:
         76:81:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:54 2025 by rpki-client on console.sobornost.net