Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GXTocPbgEoHEcmzp14jNyO1s0zA.roa
File:                     GXTocPbgEoHEcmzp14jNyO1s0zA.roa (raw, json)
Hash identifier:          jJ4gRgVW1J4ydoS/fz0BsI+tzN8ops9CgyJW/m/ZS3c=
Subject key identifier:   19:74:E8:70:F6:E0:12:81:C4:72:6C:E9:D7:88:CD:C8:ED:6C:D3:30
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       26F0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GXTocPbgEoHEcmzp14jNyO1s0zA.roa
Signing time:             Fri 22 Aug 2025 08:43:24 +0000
ROA not before:           Fri 22 Aug 2025 08:43:24 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        180.218.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9968 (0x26f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:24 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=1974E870F6E01281C4726CE9D788CDC8ED6CD330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:17:7c:45:07:b5:ef:0b:82:77:1d:dd:5b:
                    3c:2c:67:13:10:e3:fd:e5:29:08:d3:16:b9:73:7d:
                    10:b8:97:98:ab:52:47:7e:1a:57:13:6a:cd:9f:6c:
                    64:3a:70:4d:83:2d:a4:18:9c:b2:1f:33:e2:d5:ab:
                    bd:b1:7e:0b:95:0e:69:b3:e7:d8:8c:a2:54:cd:34:
                    6f:74:5d:41:ab:6d:1f:6c:dc:a8:f7:11:3c:c7:56:
                    a2:ed:bc:b8:ce:9a:e5:1b:8f:65:8d:d7:af:24:39:
                    d9:f9:fa:18:97:5b:f8:be:ed:1d:64:db:f0:5e:f8:
                    86:90:75:21:2f:a4:15:04:4f:c8:9d:cc:97:cf:f7:
                    14:f0:21:73:a7:72:c8:15:b9:a4:0c:a1:67:18:f7:
                    96:bf:a8:b2:73:b0:50:2a:25:14:5c:43:47:40:71:
                    a5:07:83:0a:eb:1e:d1:42:83:23:43:a5:f4:c1:0b:
                    68:d9:7d:81:27:95:b7:11:65:fa:48:4b:b8:24:50:
                    a0:43:c0:dc:9d:b7:15:cb:35:bb:36:86:9a:dd:75:
                    ea:92:91:16:bd:e6:03:f7:54:b8:ab:4a:f4:6c:ee:
                    e1:ec:0e:a8:47:39:9b:ea:3d:da:ea:75:c6:71:2b:
                    35:22:e3:b6:fc:19:0f:b3:72:b9:e7:5b:ba:c9:75:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:74:E8:70:F6:E0:12:81:C4:72:6C:E9:D7:88:CD:C8:ED:6C:D3:30
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GXTocPbgEoHEcmzp14jNyO1s0zA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:11:b6:ff:cf:e9:3d:c2:0f:a0:12:2d:1b:14:80:26:7e:70:
         bf:ae:e3:a6:70:6d:26:8e:ed:06:fd:c4:80:9b:d2:2b:6f:a0:
         79:ae:a9:41:16:8c:1c:6a:ed:32:0f:fa:c3:9b:ac:f5:29:88:
         f8:c3:1d:a8:e7:7c:4b:ac:a8:32:6f:2f:f9:fc:e6:9b:62:8b:
         bc:b8:a9:fb:1b:81:89:61:a3:32:bc:a3:a3:4f:c2:08:d6:f5:
         f1:24:19:42:6c:81:47:6e:ee:de:6a:f8:82:dd:8a:ef:d7:3b:
         0f:ec:96:e5:fa:35:d6:0c:e3:75:5b:20:63:65:e7:f6:0f:f1:
         ba:0b:29:43:dc:b4:40:5e:28:13:a3:3b:04:d1:27:0f:9e:05:
         92:69:03:c5:09:86:9c:6f:82:c6:0d:14:c7:6f:5d:af:0e:09:
         c1:67:d8:59:df:4f:b1:28:f0:88:8b:60:da:67:3d:8a:91:b8:
         82:4a:9d:1c:e4:80:35:df:54:7f:41:fc:7a:24:f9:b2:75:f8:
         57:67:ec:06:3f:ec:bf:67:4b:22:f8:6a:d4:dc:37:d3:e8:4e:
         7a:6f:c6:60:69:1a:af:24:c8:a4:4c:3c:d4:6b:7c:61:f1:d4:
         12:5c:b7:ed:a2:49:26:72:07:9f:d3:38:99:88:18:de:90:95:
         62:05:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:38:32 2025 by rpki-client