Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EoFryyXhFMN09EPOMpC4ovEW3lw.roa
File:                     EoFryyXhFMN09EPOMpC4ovEW3lw.roa (raw, json)
Hash identifier:          db7yJvnUE5iiRjq90oOR24YQE910ZZvirAGrUuWYrkQ=
Subject key identifier:   12:81:6B:CB:25:E1:14:C3:74:F4:43:CE:32:90:B8:A2:F1:16:DE:5C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       26E6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EoFryyXhFMN09EPOMpC4ovEW3lw.roa
Signing time:             Fri 22 Aug 2025 08:43:22 +0000
ROA not before:           Fri 22 Aug 2025 08:43:22 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        49.158.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9958 (0x26e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:22 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=12816BCB25E114C374F443CE3290B8A2F116DE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8d:76:44:3a:01:08:f9:40:84:a0:de:ce:9f:
                    22:1f:c7:98:46:27:db:c9:88:80:d8:92:42:70:34:
                    c5:74:35:cb:e5:ba:f0:9e:bd:3a:af:78:16:79:bf:
                    59:09:22:a6:e2:35:51:0e:96:1f:a9:cb:be:ca:60:
                    86:7b:08:ac:e6:85:a0:f4:55:86:ba:b0:c9:93:bf:
                    81:5a:d2:cc:dc:d4:61:e5:90:c6:92:33:81:45:ee:
                    86:19:62:ce:e6:79:31:83:ec:59:fe:38:dd:86:9a:
                    30:56:05:3e:6d:fe:45:ff:0e:f6:7e:82:94:4f:04:
                    e5:26:65:5e:2f:b8:05:8b:86:b3:ac:7d:b8:f3:9d:
                    a2:b9:07:e3:54:23:86:07:8d:6c:3d:2a:bd:a0:8e:
                    a7:62:6d:c8:b8:06:10:b4:fb:d7:98:6b:42:87:12:
                    20:1c:5f:74:4b:64:7d:fb:8e:27:fc:ae:bf:11:70:
                    69:ee:59:c0:96:b4:26:7e:ce:6f:b8:e4:99:e2:71:
                    03:26:85:28:55:6d:80:1f:29:81:4f:60:9a:42:bb:
                    fa:c3:54:11:23:ef:8f:34:fa:f8:44:6e:05:eb:12:
                    51:72:e2:ef:b1:0c:3e:1a:08:09:13:2b:bf:ea:a6:
                    7d:92:91:d8:43:7b:c3:da:45:58:1e:b5:1f:7b:30:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:81:6B:CB:25:E1:14:C3:74:F4:43:CE:32:90:B8:A2:F1:16:DE:5C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EoFryyXhFMN09EPOMpC4ovEW3lw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:a5:66:c2:e7:fc:a2:03:e4:bd:18:97:35:b6:15:d1:30:86:
         a0:3c:d8:db:be:5f:2e:6d:cb:ac:db:b7:25:4d:3c:b1:04:6d:
         d4:64:45:02:1f:e9:49:2d:fd:da:dd:10:3e:9f:4e:b7:8e:d5:
         e9:05:8b:90:68:34:27:9d:8f:0d:80:0d:ac:31:44:a7:1a:7a:
         76:d2:7b:a4:a4:30:f2:32:0d:81:6f:f4:68:47:91:36:da:2a:
         33:a0:0b:c8:0c:1b:36:6c:dd:98:cc:7e:35:6b:18:8c:b0:5c:
         10:1d:6d:84:80:e7:6b:32:01:a9:df:60:8e:9a:52:a2:12:0d:
         47:30:c3:1d:86:60:cd:2f:3f:20:66:c1:7a:97:7b:b2:2f:bc:
         b7:10:9e:a8:8a:52:45:6a:e0:b4:c8:7f:b1:89:30:2c:71:f3:
         dd:58:89:a0:cf:41:02:ff:4d:2a:96:1e:9c:cf:21:60:09:ba:
         e6:ae:d2:c1:48:4e:2d:f8:7d:94:db:7b:6a:98:ff:c4:ec:04:
         23:ea:ae:a3:15:bd:7c:a5:c3:94:fa:f2:57:a6:9d:32:b6:a4:
         93:e4:0d:2e:1b:6e:d8:cb:39:4d:1a:b3:64:96:f2:3d:8f:a7:
         5e:17:58:ba:4e:57:82:6a:06:c7:bf:a6:3a:15:1b:4a:dc:cd:
         b6:24:34:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:38:32 2025 by rpki-client