Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UiI_OZmgWQmeA1Rgl1GinPfadzs.roa
File:                     UiI_OZmgWQmeA1Rgl1GinPfadzs.roa (raw, json)
Hash identifier:          7MPphrEpmfjdtqBYzg2lvI8NEToPCA6uZ8W3XM1Ljrs=
Subject key identifier:   52:22:3F:39:99:A0:59:09:9E:03:54:60:97:51:A2:9C:F7:DA:77:3B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       239F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UiI_OZmgWQmeA1Rgl1GinPfadzs.roa
Signing time:             Mon 10 Feb 2025 14:17:45 +0000
ROA not before:           Mon 10 Feb 2025 14:17:45 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        211.76.46.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9119 (0x239f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:17:45 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=52223F3999A059099E0354609751A29CF7DA773B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:1a:2c:a0:52:13:a9:4b:e1:95:56:84:7d:
                    0f:bc:5d:c5:1a:2b:9d:bb:72:a1:a5:10:c4:52:c3:
                    a3:08:3d:91:25:48:48:5f:f1:82:9e:7b:b7:db:10:
                    c5:49:96:a0:57:c5:ea:e2:5e:e9:9b:43:df:91:f2:
                    4c:e8:57:4d:21:24:4f:9b:44:25:a0:f6:e8:00:0d:
                    b9:72:08:00:02:38:3d:3d:db:af:25:b6:fe:dd:01:
                    4e:52:f4:e1:3c:77:84:3a:39:3c:7c:8c:f7:c6:ee:
                    83:4c:c8:c1:1e:8d:aa:83:7c:80:11:8f:2a:9e:b8:
                    e7:e5:b7:7f:43:a2:3b:5e:f4:a9:da:f8:e4:9f:bb:
                    94:30:d0:91:79:72:b7:32:ad:ec:73:64:4c:4c:b6:
                    67:ff:59:49:d0:9a:db:9a:e5:25:0c:56:61:78:7d:
                    1b:33:28:7a:e0:b1:d8:83:6e:77:6d:2c:24:a7:80:
                    c6:38:96:1b:41:fa:c8:7e:ce:c6:e7:9d:7d:e1:86:
                    94:12:36:42:73:0a:36:a6:0a:73:a1:67:ad:f2:03:
                    b6:e8:6e:9a:8a:fb:c1:73:03:39:84:f9:87:1d:43:
                    25:c5:84:27:a6:3f:00:e2:31:f0:ef:6d:b1:b8:c0:
                    76:b4:3f:f8:18:f4:63:3f:e0:89:e0:18:f4:4c:0a:
                    a2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:22:3F:39:99:A0:59:09:9E:03:54:60:97:51:A2:9C:F7:DA:77:3B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UiI_OZmgWQmeA1Rgl1GinPfadzs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:23:06:6d:6d:15:eb:d8:d9:60:71:a2:35:17:1b:6a:bf:13:
         c9:ee:cd:94:83:4e:d2:ce:4d:a8:c7:7d:1b:fd:21:95:52:17:
         ac:68:58:65:24:cf:72:78:44:12:41:b2:d6:c2:f1:ea:88:cd:
         2c:76:87:4c:bc:8b:47:3b:38:8d:af:24:db:90:0c:2b:ad:f1:
         0e:1f:aa:00:d8:f5:f4:79:66:57:6d:2c:5c:cb:33:6c:8d:fc:
         21:40:7d:76:51:b2:4f:2b:54:21:7d:3e:2c:77:c7:08:f9:1f:
         f6:78:71:12:0d:6f:4d:35:8f:15:08:7a:d5:13:5f:29:6a:20:
         0d:2a:4c:91:c7:74:96:0c:a1:33:22:1b:2a:83:7c:26:41:46:
         98:35:d3:19:05:93:78:b7:7c:2b:d0:8f:f8:ba:27:38:2b:16:
         44:37:e8:f1:10:5a:9c:95:c5:2e:4e:67:fd:ca:15:74:9c:72:
         79:79:d9:0b:85:5d:0d:df:fa:51:58:fe:4f:4e:b2:ad:9e:62:
         d2:71:37:c6:53:76:31:1e:69:72:fb:24:dc:cc:f7:90:24:f4:
         1f:ed:f5:46:06:de:29:1b:f3:b9:33:f4:b5:71:61:7f:b2:a2:
         18:1b:31:7f:19:16:2c:0c:1a:c4:c3:12:a0:9e:d6:b6:a3:33:
         ab:0f:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:55 2025 by rpki-client on console.sobornost.net