Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1B-E-sC2xa6JHMcqlAYmFKCCajA.roa
File:                     1B-E-sC2xa6JHMcqlAYmFKCCajA.roa (raw, json)
Hash identifier:          /cOPc4qRJcSnMP46rxbBtDLGbgHGX1lI6C0KjE69VDk=
Subject key identifier:   D4:1F:84:FA:C0:B6:C5:AE:89:1C:C7:2A:94:06:26:14:A0:82:6A:30
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       25F2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1B-E-sC2xa6JHMcqlAYmFKCCajA.roa
Signing time:             Fri 22 Aug 2025 08:42:25 +0000
ROA not before:           Fri 22 Aug 2025 08:42:25 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24163
IP address blocks:        49.158.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9714 (0x25f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:25 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D41F84FAC0B6C5AE891CC72A94062614A0826A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:1b:ca:24:2a:1b:a5:fb:0d:e5:c0:e2:e3:
                    75:9f:ea:b9:b8:12:d5:49:95:06:32:ed:ff:4d:da:
                    b5:8e:d2:ef:ec:a9:15:a5:89:5c:6a:fd:e7:02:16:
                    ec:5c:13:ed:fe:db:eb:69:e7:77:38:5a:02:0b:07:
                    dd:8e:65:ad:bf:2a:62:81:5c:0e:33:e0:ff:cf:27:
                    e4:92:bf:c5:65:de:80:c6:69:e3:ef:69:d6:d8:10:
                    9a:bd:b9:10:3f:eb:87:ac:de:ba:b6:a9:79:41:24:
                    77:b9:29:24:1e:30:ce:b7:64:6f:f8:e4:d7:07:75:
                    4b:ad:20:db:42:4d:24:08:cb:da:ef:79:a9:8b:c4:
                    a2:07:94:bd:b5:bb:e1:69:ac:a9:8f:fc:f4:ed:06:
                    11:05:30:53:86:b8:ea:6a:03:34:ea:0c:b1:fa:5e:
                    7c:69:fb:1b:61:98:e1:a9:82:02:45:30:63:b0:72:
                    bf:d0:31:7c:4d:8e:d2:a0:1b:7a:e6:59:2e:aa:13:
                    52:23:6b:ab:68:f4:32:7a:9f:54:b6:c5:15:76:b7:
                    a5:38:6a:28:c8:e2:a2:5c:6a:72:b8:e6:23:86:f5:
                    40:ae:17:48:50:85:11:96:b2:07:e8:93:30:2e:2a:
                    4e:2a:84:7d:a3:ee:a8:f3:70:e8:fb:68:ce:62:f9:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1F:84:FA:C0:B6:C5:AE:89:1C:C7:2A:94:06:26:14:A0:82:6A:30
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1B-E-sC2xa6JHMcqlAYmFKCCajA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:b4:12:91:44:b5:75:a6:5c:82:96:43:a2:1c:0d:ff:b7:ed:
         77:d0:e8:4e:59:2d:03:be:a4:21:e1:cc:0d:70:bd:fb:58:d8:
         5c:cc:78:8c:ac:25:2d:e2:e4:ec:93:ca:51:d7:52:51:6f:7a:
         ac:a3:3d:c0:55:59:de:ca:a6:87:94:49:83:4f:2d:40:8c:04:
         e3:18:45:05:ff:49:17:f7:79:e1:56:e9:ca:97:ba:6f:90:33:
         21:57:70:b8:3e:60:2e:06:40:73:66:15:66:7b:0b:92:da:b3:
         be:98:f8:54:98:e8:16:6f:8a:dd:a6:c5:46:28:c0:42:d9:90:
         75:11:8a:c6:4f:7f:aa:64:30:a2:1b:57:2a:b7:b4:80:ab:2d:
         2b:54:01:0b:8b:52:99:00:64:55:3e:3c:71:62:50:53:8a:57:
         e4:44:32:05:58:1b:b0:b5:9e:06:7f:13:27:24:a3:9a:8e:17:
         bf:0a:2d:3a:7d:73:4c:9c:c4:ef:6e:cc:ff:9b:8f:da:e2:45:
         2b:78:b4:82:d3:69:9f:7d:61:9a:aa:18:71:9a:be:91:11:e6:
         ad:50:87:ea:bb:08:f6:8d:33:03:96:e1:94:df:46:d8:b4:0e:
         9f:bf:53:c2:9e:e7:58:70:c7:73:b0:5c:36:5c:dc:32:b3:14:
         7c:5f:55:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:38:45 2025 by rpki-client