Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mpf4W2OjUzDocrgR0-5233ud2zA.roa
File:                     mpf4W2OjUzDocrgR0-5233ud2zA.roa (raw, json)
Hash identifier:          97otHYTUU73uY3Npgk1dwYZLRkQq6T9vR9J5oo39cxk=
Subject key identifier:   9A:97:F8:5B:63:A3:53:30:E8:72:B8:11:D3:EE:76:DF:7B:9D:DB:30
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       24A8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mpf4W2OjUzDocrgR0-5233ud2zA.roa
Signing time:             Mon 10 Feb 2025 14:18:52 +0000
ROA not before:           Mon 10 Feb 2025 14:18:52 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        49.158.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9384 (0x24a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb 10 14:18:52 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=9A97F85B63A35330E872B811D3EE76DF7B9DDB30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:37:9c:dc:69:c1:4a:00:f4:3c:fa:f1:ff:
                    ad:4b:29:b0:37:7b:e3:c7:f7:83:cb:00:c7:06:6c:
                    21:16:35:9e:0c:23:02:e9:78:99:cd:74:34:e4:08:
                    29:ae:1d:ee:cd:7f:93:ab:e0:9c:47:f4:fc:b9:14:
                    81:48:8d:42:68:0a:7f:f4:d0:06:c0:c6:be:62:33:
                    86:73:48:fe:69:9e:73:e8:e4:87:a5:c6:7c:bb:72:
                    f8:14:af:69:65:2c:9b:52:42:b7:0b:e9:89:ce:3a:
                    47:37:3f:95:ee:20:01:2b:b7:eb:da:d7:01:1b:43:
                    95:13:21:e6:13:11:06:dc:2d:e8:b4:0e:c2:d7:13:
                    10:3b:e1:a7:c8:5e:11:4b:61:29:72:f6:96:58:38:
                    3f:c2:b2:cd:89:15:c0:a6:51:f2:09:ae:1c:06:8b:
                    ea:53:48:dc:02:da:f4:ce:72:55:02:a1:cb:07:f8:
                    12:74:c3:66:d9:f7:50:dc:ef:a9:bd:6b:86:83:f3:
                    a3:14:07:78:a2:48:63:39:dc:64:18:61:0a:12:24:
                    e4:5b:62:d9:cd:c7:d7:85:43:67:6f:4a:dd:07:84:
                    a6:fb:38:2c:4e:19:01:2e:b3:f4:1c:e9:23:8b:e0:
                    15:c5:da:eb:6a:68:0f:93:c8:e5:d1:9d:d6:58:7c:
                    48:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:97:F8:5B:63:A3:53:30:E8:72:B8:11:D3:EE:76:DF:7B:9D:DB:30
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mpf4W2OjUzDocrgR0-5233ud2zA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:ce:b7:4c:81:12:aa:c1:44:38:c7:e4:e3:59:81:8a:7d:75:
         2c:77:27:c4:22:4b:d6:b1:0e:48:c6:11:88:08:22:5d:b0:e7:
         0d:1b:26:c9:2f:58:c7:68:f1:af:cd:71:dd:3a:2d:25:04:e9:
         f2:51:75:5f:81:e2:3c:d0:1f:44:37:fd:02:0a:a1:2b:1f:da:
         d2:d7:d1:5d:d3:60:b2:98:91:46:75:2c:b8:d4:6a:b9:b2:0f:
         00:eb:c3:bb:e1:04:ee:b6:4e:13:72:2f:95:21:cf:09:ef:33:
         92:28:d8:15:dc:06:55:f0:30:2d:07:d3:a3:b6:55:6b:d2:f3:
         e4:55:96:87:d1:dc:8d:1d:40:9f:45:d7:11:2d:39:35:02:56:
         9e:1e:e7:48:14:b7:6d:f5:98:7a:3b:8b:94:0e:14:88:1e:b9:
         3b:31:8f:5b:e2:da:f4:83:87:47:6c:12:67:7f:aa:d9:77:0a:
         1b:93:dd:65:ed:21:ca:9e:57:41:00:b3:b5:64:96:40:9a:ed:
         52:11:e3:76:5a:55:19:48:39:13:a9:15:76:ba:2a:83:a5:35:
         64:10:b1:5d:2e:53:84:df:57:e2:82:4d:9f:a0:bf:70:77:2d:
         25:f5:92:50:3f:31:94:33:24:96:91:24:5a:e7:f2:58:33:82:
         57:a7:6e:42
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICJKgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE4NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlBOTdGODVCNjNBMzUz
MzBFODcyQjgxMUQzRUU3NkRGN0I5RERCMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2lzec3GnBSgD0PPrx/61LKbA3e+PH94PLAMcGbCEWNZ4MIwLp
eJnNdDTkCCmuHe7Nf5Or4JxH9Py5FIFIjUJoCn/00AbAxr5iM4ZzSP5pnnPo5Iel
xny7cvgUr2llLJtSQrcL6YnOOkc3P5XuIAErt+va1wEbQ5UTIeYTEQbcLei0DsLX
ExA74afIXhFLYSly9pZYOD/Css2JFcCmUfIJrhwGi+pTSNwC2vTOclUCocsH+BJ0
w2bZ91Dc76m9a4aD86MUB3iiSGM53GQYYQoSJORbYtnNx9eFQ2dvSt0HhKb7OCxO
GQEus/Qc6SOL4BXF2utqaA+TyOXRndZYfEgRAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUmpf4W2OjUzDocrgR0+5233ud2zAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL21wZjRXMk9qVXpEb2NyZ1Iw
LTUyMzN1ZDJ6QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAx
njANBgkqhkiG9w0BAQsFAAOCAQEAaM63TIESqsFEOMfk41mBin11LHcnxCJL1rEO
SMYRiAgiXbDnDRsmyS9Yx2jxr81x3TotJQTp8lF1X4HiPNAfRDf9AgqhKx/a0tfR
XdNgspiRRnUsuNRqubIPAOvDu+EE7rZOE3IvlSHPCe8zkijYFdwGVfAwLQfTo7ZV
a9Lz5FWWh9HcjR1An0XXES05NQJWnh7nSBS3bfWYejuLlA4UiB65OzGPW+La9IOH
R2wSZ3+q2XcKG5PdZe0hyp5XQQCztWSWQJrtUhHjdlpVGUg5E6kVdroqg6U1ZBCx
XS5ThN9X4oJNn6C/cHctJfWSUD8xlDMklpEkWufyWDOCV6duQg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:55 2025 by rpki-client on console.sobornost.net