Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Cl8BlJ82gvypIVwMTzvUAg8qfUs.roa
File:                     Cl8BlJ82gvypIVwMTzvUAg8qfUs.roa (raw, json)
Hash identifier:          vv8YkaK+GUOVg36w/bEyKvGO/Jd2xIJlhsa1LlcggSI=
Subject key identifier:   0A:5F:01:94:9F:36:82:FC:A9:21:5C:0C:4F:3B:D4:02:0F:2A:7D:4B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2694
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Cl8BlJ82gvypIVwMTzvUAg8qfUs.roa
Signing time:             Fri 22 Aug 2025 08:43:05 +0000
ROA not before:           Fri 22 Aug 2025 08:43:05 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        180.218.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9876 (0x2694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:05 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=0A5F01949F3682FCA9215C0C4F3BD4020F2A7D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:71:14:9a:36:4b:90:10:cd:98:6b:c1:90:
                    bf:1a:a2:9a:fb:f2:8d:e1:60:dc:be:e1:f7:9f:08:
                    61:a5:f5:34:10:e0:34:3e:00:ce:97:7e:60:c8:5d:
                    aa:7f:ec:1f:ea:bf:fe:bf:73:27:66:5f:f4:6c:4b:
                    2c:e7:da:e7:e1:4f:c1:e7:88:87:a7:48:85:49:7f:
                    14:3e:a1:63:57:2c:d8:d2:14:d9:5e:62:6a:13:c0:
                    e4:4d:63:98:8e:8f:8a:ab:89:7a:16:2c:d1:3c:83:
                    e7:18:fa:72:f2:df:fd:8b:bb:c9:fe:09:68:d6:02:
                    db:d6:f4:5b:cf:0c:41:ae:8d:39:71:90:36:9e:69:
                    fd:58:51:1d:97:fe:7d:c8:d2:e3:5d:cb:49:9c:38:
                    77:11:87:9a:4c:ba:66:cd:f5:27:50:c4:45:47:68:
                    1d:a4:da:4b:b7:0c:0a:ef:07:00:cc:51:23:58:d9:
                    88:0d:73:02:44:97:da:b0:fe:33:6c:61:a8:5b:91:
                    41:f0:d2:32:aa:8b:2e:ea:27:f5:01:de:09:2f:94:
                    06:f1:34:83:fb:8e:b0:8d:62:76:d0:3d:2b:d4:5b:
                    76:34:bc:db:87:b9:8e:e7:1f:fd:02:63:5c:39:fd:
                    b5:33:d2:8f:94:68:c3:67:ac:07:99:e7:12:a5:91:
                    95:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5F:01:94:9F:36:82:FC:A9:21:5C:0C:4F:3B:D4:02:0F:2A:7D:4B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Cl8BlJ82gvypIVwMTzvUAg8qfUs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         58:f1:74:67:bb:50:ab:8b:aa:13:cb:a6:af:e5:ed:55:6b:e8:
         86:bf:81:dc:68:ff:cd:8c:d5:45:14:cf:96:df:3b:57:76:e5:
         6f:ce:6b:a7:b2:e2:f9:40:e3:05:14:ad:aa:57:5e:e3:b4:63:
         d7:b5:b9:89:dc:be:6a:1f:8a:81:ac:14:75:56:00:3a:36:ac:
         71:a4:19:12:04:a3:b2:0a:ba:c0:ed:b9:86:41:a7:19:d8:a9:
         3f:5a:62:4b:6a:4a:0a:4c:84:01:cd:00:b2:eb:8c:87:40:51:
         6b:f2:c1:4e:94:46:a5:ad:90:73:a7:e6:d0:e6:a1:8f:7c:65:
         8b:27:87:f6:e9:c0:6e:f1:73:af:8e:4c:5b:34:5d:70:86:6e:
         c4:ab:35:f7:7b:01:05:3f:49:d7:af:20:8e:0c:0d:d5:9e:b9:
         e7:e7:c1:9a:57:ce:70:74:69:58:a1:33:b4:c6:02:cf:9b:0a:
         f5:96:8a:c5:da:e0:ca:60:af:c0:5e:1c:b8:75:7a:ab:18:ab:
         0f:c5:06:dc:01:43:c2:b7:26:3e:38:92:32:a7:dc:b3:20:89:
         6d:27:10:f4:d1:b7:b0:62:5f:92:fc:a8:75:78:ef:2e:a1:6e:
         2e:83:09:d1:21:46:20:8d:ec:68:ec:f7:ed:01:f1:9f:48:26:
         f8:11:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:40:33 2025 by rpki-client