Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0WpS50fpuEaWEKabCd4QionC6xc.roa
File:                     0WpS50fpuEaWEKabCd4QionC6xc.roa (raw, json)
Hash identifier:          qj65nyoZkWqeVN44jqJkoJmzpOg078Utrz9j8uX6SKA=
Subject key identifier:   D1:6A:52:E7:47:E9:B8:46:96:10:A6:9B:09:DE:10:8A:89:C2:EB:17
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       25F1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0WpS50fpuEaWEKabCd4QionC6xc.roa
Signing time:             Fri 22 Aug 2025 08:42:24 +0000
ROA not before:           Fri 22 Aug 2025 08:42:24 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        180.218.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9713 (0x25f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:24 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D16A52E747E9B8469610A69B09DE108A89C2EB17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:11:cb:08:12:a5:fc:68:b9:4c:e1:27:e2:
                    c2:82:f3:27:e2:4b:15:79:1b:e8:e3:6d:7d:4d:84:
                    33:36:3b:70:ea:6d:ea:12:5a:83:58:06:36:56:0b:
                    10:6a:a8:03:c1:73:f3:97:9b:cd:df:da:da:0b:a6:
                    d4:9a:bb:45:4c:90:2e:ca:c0:de:ce:1a:76:81:59:
                    44:bc:7a:38:67:c0:e4:11:00:4a:b1:07:9f:8e:9f:
                    b6:53:37:0e:ef:81:f3:1d:b8:b7:db:4a:b1:ac:ec:
                    ed:df:29:e8:8a:bf:39:57:51:7a:8b:e3:f7:71:ed:
                    c3:77:f9:ad:3d:77:11:fa:ea:a0:f4:92:c8:57:67:
                    8f:05:82:87:40:c2:99:b9:d6:d8:f8:0b:85:10:8a:
                    6e:c2:66:42:70:1e:ee:6d:a9:be:cd:9a:84:34:27:
                    bb:8c:48:cd:1a:27:13:e2:27:ea:49:15:ac:e7:76:
                    fb:ab:d0:68:3d:2e:d6:b5:69:c3:88:16:f2:6b:c2:
                    a4:e7:f4:1a:5e:5d:14:67:a2:d4:7f:72:66:e0:c1:
                    64:95:28:9c:5e:e3:b0:4f:2d:5b:b2:ec:c3:f1:19:
                    3a:a6:4e:d8:5b:08:a3:d2:96:71:22:6a:47:c5:59:
                    f0:5c:10:7d:6f:c8:46:a2:11:23:04:05:39:29:56:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6A:52:E7:47:E9:B8:46:96:10:A6:9B:09:DE:10:8A:89:C2:EB:17
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0WpS50fpuEaWEKabCd4QionC6xc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8a:21:45:78:7b:90:da:73:13:20:5c:fc:e9:19:34:dd:83:5a:
         db:77:f3:74:46:d5:a5:5b:a5:11:9b:43:01:7d:a8:b6:e9:fa:
         75:4b:0a:4a:0d:1e:72:7e:7d:6f:45:f8:cd:5a:4b:dd:96:8d:
         76:fa:68:f5:3f:d4:c6:1a:20:95:4d:f2:9e:31:68:31:5c:0f:
         b4:ff:65:0f:52:d2:eb:aa:86:b6:cd:44:31:ab:9d:d5:c8:3c:
         92:55:45:be:69:3d:c3:67:d7:03:95:5d:78:6e:6f:29:bf:85:
         32:bf:19:4a:54:57:dd:8d:36:fc:8a:e7:6f:d9:3c:ca:56:85:
         3c:60:11:4d:5a:ba:77:a8:fb:0f:2b:d9:8a:dc:2a:5b:28:f7:
         d5:96:8e:cd:2e:7f:e0:1c:64:c0:18:f4:c5:59:d1:c2:75:d5:
         74:8a:c1:2e:a1:03:b5:b5:32:b9:a9:63:d5:07:51:1b:d6:15:
         68:96:1c:5d:1e:53:81:45:98:f4:0a:89:1d:4b:d0:be:d6:24:
         47:93:24:00:37:d8:f6:a8:1c:b9:1d:51:c1:4e:c7:c2:eb:a9:
         8e:f2:8a:5c:2e:b9:ed:ff:b0:ca:45:52:98:9b:b7:f0:83:f6:
         fd:46:b3:a5:05:82:ef:83:2a:0a:03:1b:4b:be:ad:42:41:8c:
         4c:ae:a9:49
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJfEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw
ODQyMjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQxNkE1MkU3NDdFOUI4
NDY5NjEwQTY5QjA5REUxMDhBODlDMkVCMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTYhHLCBKl/Gi5TOEn4sKC8yfiSxV5G+jjbX1NhDM2O3DqbeoS
WoNYBjZWCxBqqAPBc/OXm83f2toLptSau0VMkC7KwN7OGnaBWUS8ejhnwOQRAEqx
B5+On7ZTNw7vgfMduLfbSrGs7O3fKeiKvzlXUXqL4/dx7cN3+a09dxH66qD0kshX
Z48FgodAwpm51tj4C4UQim7CZkJwHu5tqb7NmoQ0J7uMSM0aJxPiJ+pJFazndvur
0Gg9Lta1acOIFvJrwqTn9BpeXRRnotR/cmbgwWSVKJxe47BPLVuy7MPxGTqmTthb
CKPSlnEiakfFWfBcEH1vyEaiESMEBTkpVpHnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU0WpS50fpuEaWEKabCd4QionC6xcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzBXcFM1MGZwdUVhV0VLYWJD
ZDRRaW9uQzZ4Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa0
2gAwDQYJKoZIhvcNAQELBQADggEBAIohRXh7kNpzEyBc/OkZNN2DWtt383RG1aVb
pRGbQwF9qLbp+nVLCkoNHnJ+fW9F+M1aS92WjXb6aPU/1MYaIJVN8p4xaDFcD7T/
ZQ9S0uuqhrbNRDGrndXIPJJVRb5pPcNn1wOVXXhubym/hTK/GUpUV92NNvyK52/Z
PMpWhTxgEU1auneo+w8r2YrcKlso99WWjs0uf+AcZMAY9MVZ0cJ11XSKwS6hA7W1
MrmpY9UHURvWFWiWHF0eU4FFmPQKiR1L0L7WJEeTJAA32PaoHLkdUcFOx8LrqY7y
ilwuue3/sMpFUpibt/CD9v1Gs6UFgu+DKgoDG0u+rUJBjEyuqUk=
-----END CERTIFICATE-----
Generated at Sun Aug 24 11:38:37 2025 by rpki-client