Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Dc6Vya5giZeLyw0Y03N6bkbqsk0.roa
File:                     Dc6Vya5giZeLyw0Y03N6bkbqsk0.roa (raw, json)
Hash identifier:          U8JHXRKCsP5eiE6VpYaivJ6sXYA5X2LQdS0ox60Olgo=
Subject key identifier:   0D:CE:95:C9:AE:60:89:97:8B:CB:0D:18:D3:73:7A:6E:46:EA:B2:4D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       261B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Dc6Vya5giZeLyw0Y03N6bkbqsk0.roa
Signing time:             Fri 22 Aug 2025 08:42:35 +0000
ROA not before:           Fri 22 Aug 2025 08:42:35 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        180.218.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9755 (0x261b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:35 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=0DCE95C9AE6089978BCB0D18D3737A6E46EAB24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:f6:90:4c:26:a5:95:58:af:6d:d8:23:ab:
                    59:7c:2e:cb:50:6b:d7:62:12:f7:89:05:f2:22:1a:
                    46:d0:cb:3a:04:7e:74:60:5c:92:18:9c:45:05:89:
                    0d:bf:60:76:9e:ce:0e:65:a3:8a:23:d3:ad:72:d7:
                    69:f8:77:99:cd:0e:0d:e1:fc:55:ab:82:c3:86:bd:
                    0c:c1:75:a5:d8:95:a0:85:aa:44:84:62:93:50:71:
                    4c:c9:5c:1e:fe:23:09:6b:94:66:32:e6:96:de:51:
                    d3:3e:2f:23:ea:1a:c5:59:67:24:51:fe:0d:1f:48:
                    b8:ba:f1:da:6b:e9:60:6b:bb:63:04:17:e6:32:16:
                    ee:57:d9:e9:87:d5:8c:9f:0f:fe:4b:48:ff:bc:f2:
                    1d:ea:b1:13:e2:9c:9d:31:39:db:ad:52:f5:ea:f8:
                    71:73:ee:dd:7e:b0:13:aa:47:7e:98:a5:e8:05:77:
                    32:9a:82:90:f9:19:d4:24:e1:a5:85:91:ed:c9:ba:
                    10:ed:f5:b4:f6:3f:fd:1f:e0:a2:d0:09:2e:50:19:
                    a0:7b:84:91:cf:27:dd:a7:e5:ed:09:46:72:87:0d:
                    1a:3a:a8:ea:76:93:45:e0:19:4d:6a:e6:a0:cf:64:
                    79:c7:b2:5a:cf:49:55:56:9e:1e:fb:a1:41:12:9e:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CE:95:C9:AE:60:89:97:8B:CB:0D:18:D3:73:7A:6E:46:EA:B2:4D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Dc6Vya5giZeLyw0Y03N6bkbqsk0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:48:1d:ff:47:05:42:87:ea:09:66:cc:1f:09:41:30:75:06:
         ec:d6:75:29:e5:c8:3d:d4:52:d9:93:fe:d2:62:ee:ee:03:66:
         ff:ba:5d:32:f5:c8:a3:bc:74:73:de:7e:e0:74:20:ec:f8:7d:
         cb:ee:7f:e3:5a:b5:d0:1a:ef:d5:e0:7f:e9:24:04:90:23:43:
         4a:6c:5c:61:f6:9f:98:50:49:c2:91:f9:d9:57:02:42:da:16:
         01:09:11:a3:68:81:be:b9:47:73:9e:df:83:7e:53:84:54:d6:
         54:b7:f0:82:83:e2:a1:ff:65:77:49:ef:d3:5b:c0:29:f7:6f:
         5b:67:e8:9d:36:5c:4d:53:31:47:f1:c2:40:04:11:d6:26:5c:
         3a:be:62:84:d6:88:26:88:30:2f:07:2b:56:d8:e4:94:d1:73:
         91:c4:fe:97:6d:47:5c:74:e3:e6:b1:7e:da:21:fc:1d:fa:21:
         38:c8:da:f5:52:49:4e:dc:16:46:ef:4b:72:fe:aa:bf:3f:4a:
         e9:21:8d:21:22:a1:48:0e:35:87:b7:ca:f3:a3:68:e8:50:c0:
         0c:f8:8d:7e:8a:a2:14:7f:b7:45:6a:08:59:71:89:70:51:fe:
         62:e2:21:7a:26:a3:39:8e:7a:e8:93:92:75:ad:8b:3a:5c:86:
         ae:9e:05:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:46 2025 by rpki-client