Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LTDKOqOwtGAXGIIKBoddLq59Ppw.roa
File:                     LTDKOqOwtGAXGIIKBoddLq59Ppw.roa (raw, json)
Hash identifier:          +uWhz+y7ZfOXEakgCpaEzJ/gexGy2Rk7wcIDTV9xzjw=
Subject key identifier:   2D:30:CA:3A:A3:B0:B4:60:17:18:82:0A:06:87:5D:2E:AE:7D:3E:9C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2402
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LTDKOqOwtGAXGIIKBoddLq59Ppw.roa
Signing time:             Mon 10 Feb 2025 14:18:10 +0000
ROA not before:           Mon 10 Feb 2025 14:18:10 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24163
IP address blocks:        61.61.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9218 (0x2402)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:10 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=2D30CA3AA3B0B4601718820A06875D2EAE7D3E9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a5:b2:8e:48:f2:ef:27:53:19:1b:d3:04:6e:
                    be:6f:17:59:b6:70:e6:b3:71:02:f7:0c:2d:95:ab:
                    ec:ce:00:0f:75:26:9b:a6:4f:49:48:97:a6:7b:d2:
                    29:83:09:32:28:b7:bb:30:b2:c8:82:79:2b:6f:6a:
                    7f:af:15:88:c8:98:2f:d3:53:39:e1:f6:b3:00:e1:
                    58:7a:e7:be:78:81:ba:a4:27:24:f2:49:dc:96:03:
                    80:00:45:cd:95:1e:a6:bc:69:a9:6f:70:6d:58:9d:
                    c9:62:65:6e:31:dc:a4:81:68:6e:ee:02:14:b4:15:
                    27:fc:48:7b:fa:81:98:da:99:78:1e:21:3d:77:4b:
                    69:a8:9d:5f:9e:a6:3e:f8:81:0f:fd:36:85:b1:ec:
                    09:aa:f4:fe:7f:c3:91:f3:44:6c:e8:e8:0b:ba:d3:
                    f8:00:5a:f4:7a:e2:e4:cf:90:fd:1d:47:df:ef:b4:
                    85:04:b1:de:d3:ab:06:b7:a9:20:3e:97:63:0c:18:
                    af:89:30:21:97:db:2e:2e:b1:e3:56:7b:a7:ca:34:
                    99:d0:0c:0e:5b:fc:d3:a2:fe:87:c7:24:c9:32:99:
                    70:13:5d:93:71:c6:a8:d9:c9:06:5f:69:5d:c2:06:
                    2f:96:e3:39:ef:f0:f7:3c:e2:86:08:c8:e2:b3:1e:
                    e1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:30:CA:3A:A3:B0:B4:60:17:18:82:0A:06:87:5D:2E:AE:7D:3E:9C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LTDKOqOwtGAXGIIKBoddLq59Ppw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:10:06:ca:e8:81:55:3b:16:15:23:fb:6e:0c:4d:15:86:67:
         f8:ac:80:16:30:d1:75:5e:c3:19:96:53:23:2f:9e:99:10:87:
         17:0d:0b:95:22:45:2b:25:3a:29:24:7e:42:12:17:0e:4d:84:
         89:b9:4b:c6:89:fe:15:3e:a8:ad:a9:59:36:2e:3d:aa:a7:17:
         3d:71:cb:f1:5d:fa:0d:5c:84:8d:8a:56:3d:c5:16:b8:8b:f0:
         82:84:6a:05:ad:a2:e9:41:eb:c7:d0:c4:1e:ff:b3:7b:16:ce:
         58:11:b6:b7:31:18:7e:a8:3a:fd:d7:b6:08:a0:11:8e:58:d6:
         76:a9:38:c7:8d:78:cb:7a:60:58:e4:d4:d1:b0:e9:ee:1b:ff:
         35:b5:46:d9:6c:9c:38:0e:77:72:02:a5:f9:a5:3d:d7:09:54:
         10:a1:03:52:82:dd:c6:ea:89:78:7b:da:a5:56:ca:43:9f:59:
         38:71:bd:03:55:cc:48:3f:fa:f3:f0:57:18:89:86:6d:2e:09:
         31:2e:3d:47:c1:41:d8:33:e7:70:a5:eb:22:01:29:80:2e:de:
         eb:2d:e2:f0:03:f7:0c:27:45:85:74:a8:4d:8a:80:c0:6a:03:
         c2:38:a7:f7:ca:af:7a:1a:eb:33:7a:ed:1d:b1:37:51:e1:56:
         e1:b1:c9:e9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJAIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE4MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJEMzBDQTNBQTNCMEI0
NjAxNzE4ODIwQTA2ODc1RDJFQUU3RDNFOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxpbKOSPLvJ1MZG9MEbr5vF1m2cOazcQL3DC2Vq+zOAA91Jpum
T0lIl6Z70imDCTIot7swssiCeStvan+vFYjImC/TUznh9rMA4Vh65754gbqkJyTy
SdyWA4AARc2VHqa8aalvcG1YncliZW4x3KSBaG7uAhS0FSf8SHv6gZjamXgeIT13
S2monV+epj74gQ/9NoWx7Amq9P5/w5HzRGzo6Au60/gAWvR64uTPkP0dR9/vtIUE
sd7Tqwa3qSA+l2MMGK+JMCGX2y4useNWe6fKNJnQDA5b/NOi/ofHJMkymXATXZNx
xqjZyQZfaV3CBi+W4znv8Pc84oYIyOKzHuGfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULTDKOqOwtGAXGIIKBoddLq59PpwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0xUREtPcU93dEdBWEdJSUtC
b2RkTHE1OVBwdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
PdwwDQYJKoZIhvcNAQELBQADggEBAFEQBsrogVU7FhUj+24MTRWGZ/isgBYw0XVe
wxmWUyMvnpkQhxcNC5UiRSslOikkfkISFw5NhIm5S8aJ/hU+qK2pWTYuPaqnFz1x
y/Fd+g1chI2KVj3FFriL8IKEagWtoulB68fQxB7/s3sWzlgRtrcxGH6oOv3Xtgig
EY5Y1napOMeNeMt6YFjk1NGw6e4b/zW1RtlsnDgOd3ICpfmlPdcJVBChA1KC3cbq
iXh72qVWykOfWThxvQNVzEg/+vPwVxiJhm0uCTEuPUfBQdgz53Cl6yIBKYAu3ust
4vAD9wwnRYV0qE2KgMBqA8I4p/fKr3oa6zN67R2xN1HhVuGxyek=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:54 2025 by rpki-client on console.sobornost.net