Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eB8aSS3TK190n-KKnoPhgVggXJs.roa
File:                     eB8aSS3TK190n-KKnoPhgVggXJs.roa (raw, json)
Hash identifier:          aNpL/X1F2WuEx6CgikWOp/Du+9/OiCBDkK+usbvm5Qo=
Subject key identifier:   78:1F:1A:49:2D:D3:2B:5F:74:9F:E2:8A:9E:83:E1:81:58:20:5C:9B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2360
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eB8aSS3TK190n-KKnoPhgVggXJs.roa
Signing time:             Mon 10 Feb 2025 14:17:31 +0000
ROA not before:           Mon 10 Feb 2025 14:17:31 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24163
IP address blocks:        49.158.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9056 (0x2360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:17:31 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=781F1A492DD32B5F749FE28A9E83E18158205C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:e5:f7:40:07:43:ae:e9:f9:e1:a2:61:73:
                    a4:5e:a9:0e:1a:44:7f:3b:43:9c:d3:c3:6b:e2:cb:
                    e1:d4:d9:e4:8c:a4:17:1e:cc:8e:a2:5b:29:99:87:
                    01:ca:4c:5e:87:01:da:67:09:6a:bd:0d:1f:7a:9a:
                    a5:2a:c1:39:32:42:02:63:12:35:06:c4:d9:c3:77:
                    54:f0:a6:7d:29:4f:86:94:31:60:27:6d:56:93:69:
                    a1:19:4f:79:a9:e2:78:43:ab:f6:cd:9b:34:96:73:
                    bc:d2:3b:2b:13:5e:69:1a:12:c9:d4:49:b6:a8:0a:
                    df:d3:fe:df:3a:b6:39:75:a5:8c:4f:e9:90:ae:24:
                    85:97:d3:83:42:61:dc:50:04:b8:74:f5:9a:48:d9:
                    49:5b:df:74:dd:3c:6e:48:07:25:6e:94:f9:b3:ed:
                    30:92:55:fc:2e:9f:c6:15:a0:c2:94:d3:34:72:6a:
                    b2:99:d9:51:6e:da:c1:04:00:91:b6:f5:8e:7c:ee:
                    fc:2c:59:83:33:6d:66:00:21:87:3f:eb:f6:30:3a:
                    de:ca:46:7f:e7:2e:7b:dc:5c:a4:3b:63:81:ff:d0:
                    77:b7:4d:6a:d1:4d:d0:ec:ea:94:50:bd:49:38:df:
                    c9:d5:cf:4b:fc:53:1a:6b:60:7e:b1:83:ad:8c:80:
                    59:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1F:1A:49:2D:D3:2B:5F:74:9F:E2:8A:9E:83:E1:81:58:20:5C:9B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eB8aSS3TK190n-KKnoPhgVggXJs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         05:b8:fa:42:3e:3c:04:96:b1:1d:59:c2:93:8a:c3:c6:25:c3:
         82:c8:e9:c5:f5:95:53:60:e3:43:5a:83:8e:1b:e2:66:69:35:
         f6:53:e6:a6:ba:d3:3f:ad:11:f2:db:8e:d4:2b:f0:0f:58:a6:
         28:de:6c:0f:76:b3:f1:60:d1:9a:bd:1e:c0:48:6a:20:f0:74:
         fe:d0:f7:93:95:d7:23:30:41:c2:60:bf:4f:39:5b:78:44:77:
         2b:41:d8:5f:25:f4:0d:27:fe:5f:69:26:08:1f:cb:32:2f:c5:
         51:70:e8:51:fb:7d:28:74:39:2b:05:f0:af:6d:c7:a1:eb:50:
         9b:cd:7d:60:9d:43:87:8e:cc:1d:14:39:59:96:76:52:7b:31:
         19:64:11:a8:14:30:a9:de:c7:a7:6e:f1:e4:91:af:d2:fc:35:
         b2:bc:76:f4:2f:8b:ad:a0:a0:f3:0b:d5:c4:28:20:d9:a9:a3:
         57:70:ae:39:50:3b:b3:08:24:d0:9d:96:f4:06:b6:c1:0c:fe:
         f8:b8:75:3f:cb:9f:c7:b6:b8:32:5b:f7:fb:bb:08:ed:41:07:
         83:2a:9a:4d:a8:be:1e:f4:d9:dc:3a:22:63:3a:68:ea:bb:dc:
         ea:50:63:df:03:54:f6:96:7c:12:1a:fd:be:5a:7f:28:fd:87:
         76:89:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:55 2025 by rpki-client on console.sobornost.net