Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B-TW6cB0ibwE_kr2nt3vDPuDiPg.roa
File:                     B-TW6cB0ibwE_kr2nt3vDPuDiPg.roa (raw, json)
Hash identifier:          ujVNQTLyQ48NB1BLim7yZ72SAhhoHaO32A1NqIGqNB8=
Subject key identifier:   07:E4:D6:E9:C0:74:89:BC:04:FE:4A:F6:9E:DD:EF:0C:FB:83:88:F8
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2450
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B-TW6cB0ibwE_kr2nt3vDPuDiPg.roa
Signing time:             Mon 10 Feb 2025 14:18:30 +0000
ROA not before:           Mon 10 Feb 2025 14:18:30 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     4662
IP address blocks:        122.254.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9296 (0x2450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:30 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=07E4D6E9C07489BC04FE4AF69EDDEF0CFB8388F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7a:ed:ec:53:02:27:b4:3f:04:b7:a2:de:7b:
                    af:9c:83:fa:3a:0b:39:37:a1:e8:93:bc:f3:f9:66:
                    0c:b0:44:b9:4e:93:b8:e3:8d:14:d4:5a:cb:46:d7:
                    9c:7b:54:30:d6:e8:7e:2c:1b:b4:5c:02:60:16:d1:
                    25:89:ea:77:7f:84:34:4e:1e:41:13:9a:51:27:cb:
                    b6:47:25:17:5b:a9:eb:18:fa:52:34:3a:b0:b6:6c:
                    58:4e:d4:59:0d:31:c8:54:b9:3d:c3:e5:15:6f:71:
                    fd:8b:5d:9d:b3:61:81:84:96:6f:15:66:6a:dc:77:
                    99:52:98:49:ad:32:ed:24:0e:17:1b:f2:e5:2b:b8:
                    31:18:b9:65:a7:9f:75:d4:c8:8e:9f:84:53:90:1f:
                    3c:6d:fc:1b:54:be:16:1e:3a:cd:7a:de:0d:a8:48:
                    7f:25:17:7e:08:1c:49:cd:6e:40:06:11:d4:76:31:
                    ef:1b:8a:d0:a8:87:37:ad:8e:e1:ca:4e:55:e4:be:
                    8e:71:6f:69:4a:f9:aa:30:12:79:26:a2:12:cc:b3:
                    a2:bd:f1:79:43:83:2a:00:3c:8f:0b:99:bf:8b:32:
                    63:39:7a:2f:cf:6f:c8:df:6c:74:26:d3:fa:bd:d1:
                    1e:58:16:75:d9:1e:2d:78:a9:24:be:78:dd:ab:8f:
                    f3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E4:D6:E9:C0:74:89:BC:04:FE:4A:F6:9E:DD:EF:0C:FB:83:88:F8
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B-TW6cB0ibwE_kr2nt3vDPuDiPg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2e:d0:c3:37:e2:f3:b1:ff:6a:c1:80:4b:e4:db:04:7e:1f:29:
         7b:b5:6c:ae:7d:09:ec:aa:df:df:d7:58:ef:bd:2d:8a:ba:3e:
         30:46:b2:7b:d2:01:70:0e:13:22:b8:64:37:c6:9e:c7:91:96:
         51:4d:ac:c7:d9:98:d7:3b:6f:f0:54:b1:6a:42:8c:6b:4a:92:
         c2:50:b0:5e:f4:8d:70:73:17:6a:1d:d5:87:b4:ac:ab:ca:d4:
         e6:1f:64:7c:fd:ee:0d:fd:19:2f:5b:3d:9d:6b:4e:af:4f:ce:
         69:88:2f:01:44:9b:c6:11:ca:4e:15:f5:ea:03:9f:71:c4:e0:
         23:33:36:73:a7:d2:bc:4c:21:d4:3b:56:40:49:a7:a7:a2:10:
         52:aa:85:e2:33:6d:c0:54:f2:a2:5e:2e:29:e7:ad:b9:47:a2:
         9d:c4:92:3b:c1:c3:86:56:ce:4a:15:46:14:89:a8:94:74:4b:
         f6:f4:5d:f1:97:52:e7:cc:ae:6d:cb:e5:42:ad:aa:93:61:66:
         88:29:29:07:2e:ca:0a:59:dd:9a:16:6a:4b:9c:92:cf:20:de:
         72:54:0e:b5:5f:0b:8b:56:e6:90:6b:ea:5a:c8:7d:07:f2:e1:
         05:54:ef:37:0c:e3:f5:13:dd:76:fd:0d:b6:4f:83:af:c2:b4:
         0a:71:df:e3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJFAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE4MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA3RTRENkU5QzA3NDg5
QkMwNEZFNEFGNjlFRERFRjBDRkI4Mzg4RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIeu3sUwIntD8Et6Lee6+cg/o6Czk3oeiTvPP5ZgywRLlOk7jj
jRTUWstG15x7VDDW6H4sG7RcAmAW0SWJ6nd/hDROHkETmlEny7ZHJRdbqesY+lI0
OrC2bFhO1FkNMchUuT3D5RVvcf2LXZ2zYYGElm8VZmrcd5lSmEmtMu0kDhcb8uUr
uDEYuWWnn3XUyI6fhFOQHzxt/BtUvhYeOs163g2oSH8lF34IHEnNbkAGEdR2Me8b
itCohzetjuHKTlXkvo5xb2lK+aowEnkmohLMs6K98XlDgyoAPI8Lmb+LMmM5ei/P
b8jfbHQm0/q90R5YFnXZHi14qSS+eN2rj/PdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUB+TW6cB0ibwE/kr2nt3vDPuDiPgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ItVFc2Y0IwaWJ3RV9rcjJu
dDN2RFB1RGlQZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6
/gAwDQYJKoZIhvcNAQELBQADggEBAC7Qwzfi87H/asGAS+TbBH4fKXu1bK59Ceyq
39/XWO+9LYq6PjBGsnvSAXAOEyK4ZDfGnseRllFNrMfZmNc7b/BUsWpCjGtKksJQ
sF70jXBzF2od1Ye0rKvK1OYfZHz97g39GS9bPZ1rTq9PzmmILwFEm8YRyk4V9eoD
n3HE4CMzNnOn0rxMIdQ7VkBJp6eiEFKqheIzbcBU8qJeLinnrblHop3EkjvBw4ZW
zkoVRhSJqJR0S/b0XfGXUufMrm3L5UKtqpNhZogpKQcuygpZ3ZoWakucks8g3nJU
DrVfC4tW5pBr6lrIfQfy4QVU7zcM4/UT3Xb9DbZPg6/CtApx3+M=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:54 2025 by rpki-client on console.sobornost.net