Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JPMmfUMgWaUHfafjxxnU956w9VA.roa
File:                     JPMmfUMgWaUHfafjxxnU956w9VA.roa (raw, json)
Hash identifier:          OS6vviVz52/vdxzDdICg+Qao8fjlUp5MAUggxpkVIhw=
Subject key identifier:   24:F3:26:7D:43:20:59:A5:07:7D:A7:E3:C7:19:D4:F7:9E:B0:F5:50
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       26AE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JPMmfUMgWaUHfafjxxnU956w9VA.roa
Signing time:             Fri 22 Aug 2025 08:43:09 +0000
ROA not before:           Fri 22 Aug 2025 08:43:09 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4662
IP address blocks:        61.58.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9902 (0x26ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:09 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=24F3267D432059A5077DA7E3C719D4F79EB0F550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:dd:cf:b1:29:57:0c:b0:ba:32:f6:c5:73:fb:
                    15:41:5c:c1:ce:ee:f7:e3:fe:4b:35:7e:fb:36:8e:
                    68:df:24:fe:7b:e2:be:2d:5d:99:45:55:45:92:83:
                    dd:a8:93:7f:fc:ec:29:26:11:03:b2:6c:bd:d9:fb:
                    92:39:aa:0b:bd:05:3b:fc:7c:79:bc:db:f1:48:b3:
                    b9:2e:76:d9:dc:5e:45:0b:eb:c7:73:d7:47:a8:e6:
                    10:8a:f0:de:79:d7:4e:6f:2e:4b:c7:55:58:17:26:
                    f8:5e:63:f8:4f:68:bb:89:c3:27:d3:3f:b7:c8:f2:
                    6f:8f:64:4e:bb:50:d4:b3:7e:9b:fa:a6:c9:70:31:
                    94:5d:ef:48:8a:01:38:99:86:e3:f7:48:d3:15:4b:
                    bb:2a:6f:81:bf:9d:3e:8e:8a:fb:da:ec:2e:42:32:
                    ea:99:53:18:f1:80:8e:3a:21:c4:86:5e:03:61:4a:
                    3e:b8:85:1e:df:d9:bb:c3:df:f8:c6:66:df:37:53:
                    21:6e:57:84:89:40:fb:70:1f:65:e0:80:6c:26:88:
                    86:c3:f7:3a:51:35:91:eb:08:bb:7d:ae:0c:cd:27:
                    2a:68:34:63:b6:85:75:1f:17:c8:94:6a:17:72:71:
                    38:80:bc:33:48:33:e1:68:e6:d3:3b:4e:40:ef:76:
                    a2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F3:26:7D:43:20:59:A5:07:7D:A7:E3:C7:19:D4:F7:9E:B0:F5:50
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JPMmfUMgWaUHfafjxxnU956w9VA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:23:32:2f:61:d5:b5:fe:1a:fc:8b:5e:b7:40:05:50:67:df:
         42:74:a4:03:4c:1d:71:54:e8:26:d3:52:fe:67:5e:3a:c3:85:
         96:b1:f4:18:b0:ca:bc:79:5b:cd:ae:33:e5:3b:1e:6c:53:5b:
         74:9a:9e:ce:3e:61:36:03:d3:9c:92:2a:ec:d5:6a:39:10:06:
         2e:4c:6f:7a:4e:72:75:e0:79:b2:bf:ff:3d:10:4c:57:53:4b:
         07:95:a2:ec:88:d7:38:68:e3:68:13:9b:7e:08:a3:fc:4b:72:
         50:5d:0b:f7:14:ff:62:5b:eb:9b:c8:44:7d:57:76:ca:80:42:
         c9:c8:5c:85:de:45:a8:ba:ab:2f:da:58:4c:fd:68:f6:9a:8f:
         44:8f:eb:6b:34:9e:bc:36:f5:fa:08:4b:ee:24:ff:af:89:df:
         12:58:85:c1:6e:42:bb:85:9a:73:52:4d:dd:d3:75:8a:7c:07:
         91:84:12:e5:b3:5a:15:43:ce:ad:1b:8c:a0:08:36:93:98:b3:
         e9:11:1e:e0:3a:18:17:70:2b:a0:dc:0c:03:05:f2:6e:4a:20:
         df:05:35:7d:12:c2:35:53:5b:cd:44:48:86:7c:81:c6:11:cd:
         37:2a:83:8b:0a:86:ad:b1:f1:9d:3c:06:32:51:9c:97:df:52:
         84:a8:06:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:39:22 2025 by rpki-client