Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6eAqheBPssaqMAPssdGKmhhxasA.roa
File:                     6eAqheBPssaqMAPssdGKmhhxasA.roa (raw, json)
Hash identifier:          N/W0UYUa/e0EXx4TrNDshZFnfTzst2Ui4Zghjco7THE=
Subject key identifier:   E9:E0:2A:85:E0:4F:B2:C6:AA:30:03:EC:B1:D1:8A:9A:18:71:6A:C0
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2721
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6eAqheBPssaqMAPssdGKmhhxasA.roa
Signing time:             Fri 22 Aug 2025 08:43:35 +0000
ROA not before:           Fri 22 Aug 2025 08:43:35 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24165
IP address blocks:        180.218.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10017 (0x2721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:35 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E9E02A85E04FB2C6AA3003ECB1D18A9A18716AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:7f:23:2d:2a:2d:ec:0f:e3:7c:2c:45:e9:
                    1d:d0:c5:22:14:71:40:f2:e0:ae:7a:9c:74:a4:17:
                    7d:cf:03:14:e9:31:1d:ee:f8:ab:44:af:7b:9f:17:
                    66:8e:f1:f7:14:c0:67:ca:ca:88:b3:64:aa:01:c5:
                    a0:9b:63:de:35:59:de:55:80:bb:36:34:df:1b:0b:
                    dd:03:6b:aa:7c:48:fc:c6:ce:38:89:3b:b4:95:ee:
                    86:8c:7b:49:2b:d6:de:e2:47:10:fa:5c:79:69:91:
                    03:ff:2a:e3:4b:08:23:ca:24:2c:4a:fb:72:6a:41:
                    51:ea:ed:e6:80:23:8f:6c:23:e2:31:8c:2a:db:74:
                    14:96:38:7c:f0:03:92:6c:ce:f7:73:a2:55:5e:5d:
                    18:8a:17:49:c0:7c:9f:b8:a6:a7:2b:8f:15:95:a9:
                    5d:c0:86:47:a7:f5:73:15:4b:43:d7:a7:68:27:44:
                    f1:f1:61:fc:eb:08:11:69:8c:f8:56:e3:40:ed:9e:
                    89:53:ea:12:9e:2b:16:25:51:50:4b:b9:e7:56:3c:
                    14:5c:3b:15:12:9b:0e:4c:bd:15:d1:cc:2a:ba:b7:
                    b2:e4:41:f8:3a:9e:b5:85:78:59:a6:2a:77:b8:73:
                    37:06:c8:78:f2:ad:f7:93:03:b6:8c:d0:d9:eb:af:
                    ce:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E0:2A:85:E0:4F:B2:C6:AA:30:03:EC:B1:D1:8A:9A:18:71:6A:C0
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6eAqheBPssaqMAPssdGKmhhxasA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:c4:c3:4e:53:b2:37:fd:4d:dd:8a:52:c1:3e:cd:3b:94:c3:
         d3:ad:4d:42:4d:c1:ba:c8:5b:36:ca:9e:52:a3:68:6e:98:48:
         f7:80:cf:3e:77:32:23:f2:ad:da:2a:fa:fc:32:3e:39:b4:33:
         4c:d5:f7:9a:66:66:99:20:24:41:07:d7:ec:f0:7b:7c:30:73:
         3c:37:06:b2:16:0f:84:16:0a:ac:65:b3:c0:5c:6a:64:2e:77:
         69:22:1d:18:88:58:ca:34:67:29:ce:1b:c9:39:ed:58:dd:33:
         c1:65:52:f2:4f:36:fb:84:b9:cd:a2:b2:8c:fa:c0:66:49:b2:
         fd:5b:d8:a4:14:c4:36:4a:12:41:c7:4a:c8:aa:35:21:98:ea:
         70:d2:d9:ff:c1:8e:08:d2:3f:cd:1f:54:34:11:73:38:23:1c:
         65:76:69:4a:b2:21:79:b1:64:b5:1a:b7:4f:98:08:74:61:b4:
         f0:df:65:0b:ee:ff:50:fa:f1:09:32:e5:d2:d2:38:82:84:22:
         a9:0b:42:75:6e:61:09:35:ea:70:20:0b:2d:b8:ec:e6:e0:d0:
         ba:f5:72:56:55:4d:cd:0e:83:22:05:f8:b4:3c:e4:2a:c5:05:
         2c:17:36:d8:c7:86:9d:4d:a5:91:13:4d:c3:87:37:20:2f:c7:
         a1:69:53:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:40:25 2025 by rpki-client