Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9wTzEAe5e_iFO7YtUkOJIKmx2DM.roa
File:                     9wTzEAe5e_iFO7YtUkOJIKmx2DM.roa (raw, json)
Hash identifier:          aO41DwgkeOXhSaJG4FhXShyMCPuRVzRSxlzV+E0PXCc=
Subject key identifier:   F7:04:F3:10:07:B9:7B:F8:85:3B:B6:2D:52:43:89:20:A9:B1:D8:33
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       266E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9wTzEAe5e_iFO7YtUkOJIKmx2DM.roa
Signing time:             Fri 22 Aug 2025 08:42:55 +0000
ROA not before:           Fri 22 Aug 2025 08:42:55 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        211.76.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9838 (0x266e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:55 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F704F31007B97BF8853BB62D52438920A9B1D833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:9e:42:11:bf:fb:84:5c:88:75:ce:10:32:
                    2a:d9:8b:33:37:52:c2:92:23:ef:29:45:ec:6d:7c:
                    e9:e7:f7:64:fd:b2:db:c5:f4:9f:d1:ea:0f:f1:77:
                    6d:0c:6f:a0:57:90:ff:22:e5:cc:2a:f6:03:60:fc:
                    48:e6:c2:28:7a:9e:b7:15:33:92:1e:84:90:74:63:
                    38:90:86:60:18:13:4e:49:25:a4:ab:2f:da:c8:08:
                    a0:42:7a:17:59:12:90:b1:54:16:83:c1:01:9d:79:
                    61:b4:77:80:d5:ad:55:f5:10:71:f4:40:75:85:08:
                    39:b1:3c:e6:56:80:c7:45:c7:c3:22:d6:40:09:4d:
                    de:12:a6:16:1a:0b:ed:f6:f3:11:fa:90:bc:cf:de:
                    84:ac:c2:82:18:e3:3b:27:e5:38:78:d1:95:4e:5c:
                    1b:2f:9c:5e:4a:aa:86:d7:28:2d:b2:57:17:e3:57:
                    49:32:3b:02:00:67:1f:d5:5d:47:55:83:11:a1:ab:
                    f7:31:75:8f:a3:5e:7f:b4:a6:a8:bb:14:85:6e:6d:
                    82:cd:c1:9e:28:e8:71:8a:06:65:57:63:a8:66:76:
                    51:53:63:75:90:e4:f2:82:de:2f:f4:08:9e:37:08:
                    e1:78:6a:03:e3:ca:2b:e0:3b:c4:8c:de:71:4f:5b:
                    ae:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:04:F3:10:07:B9:7B:F8:85:3B:B6:2D:52:43:89:20:A9:B1:D8:33
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9wTzEAe5e_iFO7YtUkOJIKmx2DM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:37:56:57:74:e3:75:dd:99:5a:b6:2e:2c:98:6c:e5:2b:1a:
         9a:00:26:e8:1a:ef:29:5b:85:10:be:76:4a:bb:08:71:c9:15:
         2e:27:8f:4b:bf:27:01:ce:30:9f:eb:0f:42:1f:c8:42:1e:79:
         cd:d3:b7:fd:49:96:84:1d:50:49:14:0e:c1:c8:7a:7d:f7:69:
         5f:20:29:e9:49:5b:d1:e0:3d:c9:b9:c5:17:07:fd:9f:93:36:
         bb:b1:66:db:66:21:b1:ea:c5:fa:18:9f:95:e4:59:f7:01:d1:
         43:90:ad:12:c8:cb:6c:50:f4:a9:24:6f:3d:36:b2:75:9b:12:
         fe:90:c4:2f:9c:7d:7b:85:85:1d:03:62:81:eb:b9:d7:1b:9f:
         7b:bb:3c:1d:0a:cb:fe:9e:fd:e2:5d:d4:9e:a9:ff:3c:05:c1:
         26:a8:62:3f:73:18:a6:0b:94:46:40:35:e1:1b:82:b2:02:1f:
         1d:d4:06:9e:18:3a:2b:29:54:d5:b3:4c:66:96:71:4e:3e:1d:
         ce:09:ef:09:21:17:4a:1f:b1:0b:6d:89:50:aa:8b:c9:74:ee:
         3e:49:cb:5f:62:eb:63:04:01:4f:14:ba:3d:56:22:fb:75:2a:
         b7:17:85:01:30:e7:24:22:3f:9b:c7:f1:04:7c:f2:75:fb:25:
         6a:20:2d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:42 2025 by rpki-client