Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0Mm-J9zlW0KfSZXTjeCwTQar-dU.roa
File:                     0Mm-J9zlW0KfSZXTjeCwTQar-dU.roa (raw, json)
Hash identifier:          fpYP4RICJC1WyG8fBw76HfJh8ttUAmOvZky9Xt6SEXo=
Subject key identifier:   D0:C9:BE:27:DC:E5:5B:42:9F:49:95:D3:8D:E0:B0:4D:06:AB:F9:D5
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       26B0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0Mm-J9zlW0KfSZXTjeCwTQar-dU.roa
Signing time:             Fri 22 Aug 2025 08:43:09 +0000
ROA not before:           Fri 22 Aug 2025 08:43:09 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        119.77.144.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9904 (0x26b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:09 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D0C9BE27DCE55B429F4995D38DE0B04D06ABF9D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b1:f5:42:32:d3:0e:fd:db:3e:80:10:20:31:
                    73:77:47:fd:63:11:8a:b6:60:8f:b1:4b:07:e5:0c:
                    25:eb:15:ac:e2:4a:10:f3:8e:bf:d0:84:bc:b8:dc:
                    46:f9:29:fb:fd:ec:b1:88:7e:17:64:45:e0:33:7f:
                    c8:5d:f3:7f:7a:57:4f:e1:c6:60:a6:d8:6d:89:9c:
                    92:5f:14:fe:ae:3d:ad:d3:24:47:93:e4:eb:d8:b4:
                    eb:0b:7e:52:3e:a8:d6:69:08:1d:49:6e:01:b4:05:
                    27:cd:f0:c3:62:e0:94:79:63:e7:72:ce:7f:22:7c:
                    e8:ef:d4:1b:ce:8e:81:8c:02:e1:fb:a7:b8:10:4a:
                    ba:60:78:62:0c:f9:2d:99:d7:92:aa:ea:0b:74:3c:
                    ed:57:67:96:19:e8:8f:51:c9:e2:bd:56:82:70:8a:
                    58:27:99:df:88:25:34:82:38:dd:5c:9b:6c:ce:4c:
                    12:0e:7f:00:37:71:7c:46:3e:36:0b:be:16:57:25:
                    4a:0d:86:ce:2c:22:d5:a9:0a:f5:82:b0:83:f6:ca:
                    a0:4d:f9:9c:d8:43:b7:55:8c:74:de:1a:7d:8b:08:
                    df:aa:8e:11:59:1c:4c:5f:81:18:7d:13:ca:53:cd:
                    e7:13:6e:51:9c:a9:37:8a:7e:b1:0e:53:e2:c5:38:
                    96:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C9:BE:27:DC:E5:5B:42:9F:49:95:D3:8D:E0:B0:4D:06:AB:F9:D5
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0Mm-J9zlW0KfSZXTjeCwTQar-dU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:5d:e4:e5:de:e1:bc:dd:c4:20:84:16:91:99:38:b7:a4:3e:
         1f:e6:a4:2e:e1:70:8f:22:7f:ba:5b:6b:19:62:f8:2b:62:06:
         74:09:7c:70:3e:0c:9e:a0:a3:ed:69:c9:a4:8a:52:9f:c2:31:
         df:f6:f0:a3:52:e2:b4:1d:16:cc:2c:11:87:92:b5:c0:67:17:
         9c:95:b7:52:74:98:5f:bd:4b:48:ab:4c:af:19:3a:fa:97:7b:
         36:62:43:a9:b7:b2:0c:64:91:44:4c:16:0d:a0:ec:71:f5:7c:
         5e:3d:4d:87:0a:09:40:e8:76:fb:5d:e5:49:a6:82:ac:5d:1d:
         10:fe:9e:cd:11:26:c3:45:96:d6:01:52:83:ad:ff:99:6f:2e:
         42:19:78:03:b5:20:ac:1a:e8:0f:0d:e2:5a:92:e6:20:31:a1:
         e6:43:6c:0d:22:2f:01:da:e7:0b:ab:eb:6b:65:b9:52:6e:e2:
         32:e5:c5:92:2f:a8:d7:20:23:b0:dc:62:cd:c2:7a:2f:1a:ce:
         27:db:fe:dc:28:71:05:10:e4:9c:42:8b:10:ed:31:4e:23:9f:
         0a:76:9e:97:66:b5:28:b8:ec:49:2f:cc:6c:03:bb:87:e0:5e:
         27:b8:19:7b:b1:2b:92:ff:d2:57:29:72:5a:e1:d2:0a:e8:34:
         bc:4c:58:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:39:41 2025 by rpki-client