Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9i6uFVE-7Tr_m7nmncDt0CLJWPA.roa
File:                     9i6uFVE-7Tr_m7nmncDt0CLJWPA.roa (raw, json)
Hash identifier:          VlXQ+SWI6VJ5Zyo7vz5RLsxJF+Hpe9a/E8M9f+B+vdQ=
Subject key identifier:   F6:2E:AE:15:51:3E:ED:3A:FF:9B:B9:E6:9D:C0:ED:D0:22:C9:58:F0
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       267F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9i6uFVE-7Tr_m7nmncDt0CLJWPA.roa
Signing time:             Fri 22 Aug 2025 08:42:59 +0000
ROA not before:           Fri 22 Aug 2025 08:42:59 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24163
IP address blocks:        49.159.176.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9855 (0x267f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:59 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F62EAE15513EED3AFF9BB9E69DC0EDD022C958F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:13:41:ae:0e:25:03:70:a7:7b:87:56:7c:
                    c9:8b:36:13:82:03:72:ba:9e:09:d9:d7:00:68:a8:
                    3d:c1:49:52:99:82:fb:a5:d8:00:e3:ee:c7:5d:ca:
                    43:a0:c8:df:b0:6b:e4:2c:bf:7c:0d:21:24:82:ad:
                    37:e9:a4:38:99:3b:54:0a:3b:aa:ad:fc:a5:43:b1:
                    96:ea:47:41:95:3e:af:ce:c0:c8:89:d6:80:aa:a1:
                    08:d7:fe:34:fd:7c:52:48:28:c0:dd:21:5f:0c:f0:
                    c1:76:13:0f:f7:90:b8:b1:5f:7e:e3:3b:dc:2a:51:
                    31:66:66:f8:e2:69:43:c6:4e:16:f5:58:5d:01:b4:
                    20:49:2c:e7:d7:22:66:7f:1c:18:93:6f:35:01:2b:
                    7a:10:99:90:3a:f1:6f:22:38:b2:86:d7:b1:13:9d:
                    76:ef:79:48:41:95:ae:9d:9b:7c:a9:0a:d6:34:89:
                    b5:b4:8c:fb:59:fa:56:88:f3:e0:e5:27:a9:6f:4c:
                    e7:ee:97:3c:f0:46:8b:56:05:a2:54:f4:07:7a:05:
                    41:b8:8e:db:8c:03:e3:50:b4:cd:d6:26:f4:5e:20:
                    8b:33:2a:a8:24:26:1a:9d:37:94:c7:23:c6:44:4e:
                    6b:ce:7c:53:c4:1e:45:9a:a7:dc:22:1b:74:e9:4c:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2E:AE:15:51:3E:ED:3A:FF:9B:B9:E6:9D:C0:ED:D0:22:C9:58:F0
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9i6uFVE-7Tr_m7nmncDt0CLJWPA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:cc:12:2e:49:62:d6:6b:c0:88:47:68:b8:0d:51:f9:a6:62:
         6a:69:33:23:90:50:e3:6a:09:8f:de:3b:b2:d6:17:de:10:91:
         f7:8f:ee:51:28:17:7a:78:2e:fc:c4:51:9e:ab:1a:5e:74:cd:
         fa:35:fe:4f:10:9e:9b:ec:9e:c5:18:b9:e2:f8:e1:92:17:f0:
         50:57:37:20:d4:d3:03:a3:0c:51:a2:0e:39:8d:fc:a3:c5:37:
         95:7b:ac:47:83:0b:4c:d0:69:7d:65:63:ef:84:16:88:9f:01:
         8e:03:ef:4c:11:7e:57:b0:ae:28:32:92:b7:b9:ce:4d:7d:29:
         15:9a:7a:d2:5c:91:a0:64:66:31:40:a2:79:05:7e:2b:61:e5:
         2f:3c:8b:af:30:7e:a1:d6:4d:fa:0d:8b:7e:19:17:0e:51:02:
         6b:7b:f7:59:e8:ad:d7:68:4d:71:0e:ec:28:c1:6f:f5:45:d5:
         aa:2d:d6:de:27:cf:8b:44:f8:4e:de:a9:96:c2:d4:2e:ef:9c:
         33:86:c7:5d:52:ea:0e:cc:75:c4:72:03:70:08:53:e5:d9:89:
         ef:a6:21:96:92:c7:ad:91:13:36:13:06:77:3b:8f:ff:f7:24:
         e4:77:fa:6e:e3:b8:09:c6:7d:8a:6f:64:4a:c6:4c:a5:5f:97:
         33:2b:bc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:36 2025 by rpki-client