Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FIrwYb4QqIVPU9RhyaljGqAj01E.roa
File:                     FIrwYb4QqIVPU9RhyaljGqAj01E.roa (raw, json)
Hash identifier:          ba1zKEplUmLzEobtf36ypBxqi9Odp1qwAsGvI5ZuE70=
Subject key identifier:   14:8A:F0:61:BE:10:A8:85:4F:53:D4:61:C9:A9:63:1A:A0:23:D3:51
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       24CE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FIrwYb4QqIVPU9RhyaljGqAj01E.roa
Signing time:             Mon 10 Feb 2025 14:19:02 +0000
ROA not before:           Mon 10 Feb 2025 14:19:02 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        49.159.56.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9422 (0x24ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:19:02 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=148AF061BE10A8854F53D461C9A9631AA023D351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:58:75:23:60:02:7b:d9:9f:f0:7e:de:4f:
                    3a:62:23:2a:33:6a:0c:87:5c:fd:a3:85:f6:34:67:
                    27:8b:76:9d:54:20:2f:85:9b:5b:19:f0:d6:85:77:
                    23:d1:0d:7c:6b:76:cc:bd:2c:cf:a2:95:5f:91:f3:
                    9e:9f:53:93:d7:ea:fc:a7:04:0f:49:05:c0:46:19:
                    7c:b7:02:aa:57:bd:b9:86:fb:bf:83:80:28:9d:f3:
                    df:52:93:28:4b:78:7e:b6:dd:d8:ad:b6:e4:43:34:
                    d5:b9:9f:d4:3b:81:9b:4f:f1:42:dc:7a:19:96:b5:
                    cb:90:64:9d:74:52:64:44:83:ce:88:a0:c7:2b:e0:
                    e1:5c:d5:da:91:c1:f7:d7:a0:06:d9:71:34:a8:10:
                    cd:f0:4b:78:f2:bf:b9:25:dd:c2:b2:34:d2:7b:cd:
                    a1:26:5c:a0:e8:be:92:0d:9a:f4:0e:c6:aa:4e:f2:
                    0a:b4:3d:5d:84:fd:8a:fb:8d:6a:e0:00:d4:b3:df:
                    18:fc:ad:00:ef:fb:15:47:09:bf:8c:e2:e5:13:d7:
                    13:fc:82:e3:29:f1:8a:53:ba:6c:57:0a:59:ef:86:
                    a1:cb:d9:2d:a0:21:05:20:ed:87:a7:c0:eb:28:45:
                    d8:12:8c:d2:76:e8:2f:b7:e6:81:e9:4c:2a:ab:ab:
                    6c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8A:F0:61:BE:10:A8:85:4F:53:D4:61:C9:A9:63:1A:A0:23:D3:51
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FIrwYb4QqIVPU9RhyaljGqAj01E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:50:6a:da:1c:dd:65:de:5a:11:e7:a6:f5:af:d4:e7:45:be:
         2d:eb:0b:93:d2:a1:80:46:86:45:23:80:8c:a1:a8:1e:fa:50:
         c9:8d:01:3f:cb:be:82:4c:27:75:61:82:17:e0:23:3a:ad:d4:
         9f:c4:3f:c8:2f:62:c7:f4:1f:67:93:13:5d:e2:cd:19:87:f4:
         1b:12:b0:45:b8:03:73:29:43:30:e3:7e:9e:a7:44:4d:19:27:
         da:11:58:08:36:35:f6:58:88:f8:e8:56:16:4f:1b:7f:b8:95:
         e5:d0:94:0b:ad:c3:3c:1a:95:bc:8b:4e:77:70:8c:3a:95:53:
         b3:07:27:26:5d:9e:ff:ca:27:de:13:94:44:50:7a:ea:d3:c7:
         77:00:81:24:95:df:a5:39:3c:b9:1e:0e:24:35:33:ac:bf:bc:
         d6:02:7b:22:73:7f:70:5f:fe:3e:be:be:de:2b:5e:4d:78:3d:
         55:2e:1f:de:f5:f3:43:fe:66:b3:99:30:e2:ee:20:55:fa:e7:
         18:b0:d8:ca:66:ad:35:7b:94:63:01:be:a6:b8:84:65:67:03:
         04:b3:d5:a4:bf:c7:32:44:41:10:fd:a7:1d:b3:0d:af:12:da:
         de:29:18:52:58:a4:36:ab:d2:9a:e4:a3:23:74:9f:27:67:b4:
         13:5e:c1:79
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE5MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE0OEFGMDYxQkUxMEE4
ODU0RjUzRDQ2MUM5QTk2MzFBQTAyM0QzNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3DVh1I2ACe9mf8H7eTzpiIyozagyHXP2jhfY0ZyeLdp1UIC+F
m1sZ8NaFdyPRDXxrdsy9LM+ilV+R856fU5PX6vynBA9JBcBGGXy3AqpXvbmG+7+D
gCid899SkyhLeH623dittuRDNNW5n9Q7gZtP8ULcehmWtcuQZJ10UmREg86IoMcr
4OFc1dqRwffXoAbZcTSoEM3wS3jyv7kl3cKyNNJ7zaEmXKDovpINmvQOxqpO8gq0
PV2E/Yr7jWrgANSz3xj8rQDv+xVHCb+M4uUT1xP8guMp8YpTumxXClnvhqHL2S2g
IQUg7YenwOsoRdgSjNJ26C+35oHpTCqrq2z9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFIrwYb4QqIVPU9RhyaljGqAj01EwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZJcndZYjRRcUlWUFU5Umh5
YWxqR3FBajAxRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nzgwDQYJKoZIhvcNAQELBQADggEBADlQatoc3WXeWhHnpvWv1OdFvi3rC5PSoYBG
hkUjgIyhqB76UMmNAT/LvoJMJ3VhghfgIzqt1J/EP8gvYsf0H2eTE13izRmH9BsS
sEW4A3MpQzDjfp6nRE0ZJ9oRWAg2NfZYiPjoVhZPG3+4leXQlAutwzwalbyLTndw
jDqVU7MHJyZdnv/KJ94TlERQeurTx3cAgSSV36U5PLkeDiQ1M6y/vNYCeyJzf3Bf
/j6+vt4rXk14PVUuH97180P+ZrOZMOLuIFX65xiw2MpmrTV7lGMBvqa4hGVnAwSz
1aS/xzJEQRD9px2zDa8S2t4pGFJYpDar0prkoyN0nydntBNewXk=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:54 2025 by rpki-client on console.sobornost.net