Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z8Hehn4l3QBvt1lxweKBHDYXobA.roa
File:                     Z8Hehn4l3QBvt1lxweKBHDYXobA.roa (raw, json)
Hash identifier:          2YnM8Is9WMoLaCFLPfktfrBb2ZIRDiq2brKoUnGVCzU=
Subject key identifier:   67:C1:DE:86:7E:25:DD:00:6F:B7:59:71:C1:E2:81:1C:36:17:A1:B0
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2475
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z8Hehn4l3QBvt1lxweKBHDYXobA.roa
Signing time:             Mon 10 Feb 2025 14:18:39 +0000
ROA not before:           Mon 10 Feb 2025 14:18:39 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24163
IP address blocks:        122.100.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9333 (0x2475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:39 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=67C1DE867E25DD006FB75971C1E2811C3617A1B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9f:92:6f:a8:c2:62:72:48:d7:a1:51:47:a4:
                    49:a6:1a:19:f2:14:81:99:30:09:13:43:47:8e:3e:
                    94:aa:b7:2c:28:c1:2b:d3:4b:da:52:45:2a:1f:79:
                    c8:7f:0d:99:d6:39:3c:83:84:2d:36:3b:b6:80:41:
                    be:c5:db:06:40:a1:ae:ef:f2:9b:f5:24:38:4d:6a:
                    62:06:cb:fd:99:42:39:7a:3c:c8:e7:e3:7d:11:b0:
                    63:4f:f1:12:e4:4e:ea:24:09:ab:46:79:5d:d2:e6:
                    dd:8d:d5:f0:fa:8a:d3:e7:17:4e:4b:39:ab:f8:76:
                    b2:bd:30:a8:ce:dc:f0:95:ed:97:0c:c7:c8:b4:cc:
                    a0:e7:68:dc:e9:ed:c3:59:71:69:1c:15:6f:19:9b:
                    1c:50:20:89:ae:e9:4e:3e:ba:54:21:b2:96:de:3a:
                    ad:9c:6a:ea:24:9d:c8:9d:3a:d3:25:c3:78:60:6e:
                    fd:4b:e1:11:90:1d:29:ef:27:eb:da:a7:3a:50:d2:
                    0f:f7:c6:4e:94:78:ba:8d:53:97:31:e8:87:67:fe:
                    92:86:2b:99:81:16:08:dd:c5:ba:14:cd:1f:65:b0:
                    dd:00:a0:d1:ad:69:f7:bb:ee:a8:60:6f:3c:10:f2:
                    58:46:1e:2c:fa:27:41:13:6d:9b:f5:fd:b8:f4:a7:
                    5e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C1:DE:86:7E:25:DD:00:6F:B7:59:71:C1:E2:81:1C:36:17:A1:B0
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z8Hehn4l3QBvt1lxweKBHDYXobA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:6a:c1:48:a1:b4:5e:68:08:92:3e:29:89:f8:8c:f0:02:fe:
         b2:cf:17:b1:ea:c8:09:2e:dc:23:69:ea:9d:f8:be:6c:de:18:
         6b:f9:18:43:d8:e4:45:83:4e:25:23:ec:37:33:d2:4c:15:ab:
         58:32:2f:e0:2a:27:07:3b:c8:85:e8:c3:fa:0a:cb:38:b0:6d:
         71:ce:5e:9c:d9:00:9a:8a:86:d6:f3:d7:11:60:4b:52:39:18:
         e7:63:92:d4:e3:d7:8e:2a:87:e5:d4:64:03:dd:3d:60:21:96:
         93:27:91:3e:03:3a:ba:bd:d1:2a:13:7f:6a:88:13:75:a0:63:
         1a:f8:b9:7c:cd:72:8b:b2:ce:87:93:e7:b2:24:9d:e6:a0:89:
         4c:43:13:2a:47:08:1a:0f:32:56:da:a6:7c:c8:f0:d6:62:62:
         dd:75:c0:47:9e:95:59:6e:de:66:94:e0:72:34:3a:63:88:36:
         d8:a4:45:92:79:03:88:7c:3d:56:a4:0f:74:67:f7:54:98:b2:
         01:54:cd:d9:34:ef:16:33:56:99:e0:a4:e8:a5:43:7d:4d:56:
         dd:a6:f8:4b:42:59:2d:29:78:12:7f:fa:1e:89:a5:01:b8:97:
         29:eb:b2:84:8f:36:81:b5:62:b5:1f:25:fe:bc:85:35:3c:e9:
         ad:58:a5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:55 2025 by rpki-client on console.sobornost.net