Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jni7A7_8QrnRKkWW67AXb-VzPbE.roa
File:                     Jni7A7_8QrnRKkWW67AXb-VzPbE.roa (raw, json)
Hash identifier:          AgxAruQEdf1SeMcYZ5vtj8/OyvvwjoUOLUdwQTMAcUk=
Subject key identifier:   26:78:BB:03:BF:FC:42:B9:D1:2A:45:96:EB:B0:17:6F:E5:73:3D:B1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       26F6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jni7A7_8QrnRKkWW67AXb-VzPbE.roa
Signing time:             Fri 22 Aug 2025 08:43:25 +0000
ROA not before:           Fri 22 Aug 2025 08:43:25 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        49.159.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9974 (0x26f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:25 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=2678BB03BFFC42B9D12A4596EBB0176FE5733DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:af:eb:ca:93:ab:1a:31:40:9a:86:47:b3:25:
                    70:03:f7:e2:60:2c:2c:54:15:8e:ea:c8:f2:f6:17:
                    d7:66:c6:0b:f6:7d:bd:78:c4:ea:c7:c4:7c:3d:09:
                    c7:0c:74:a2:35:d9:a5:3c:25:16:50:ba:a0:78:9d:
                    41:cc:5b:0f:4f:d6:42:fe:fd:bc:be:5e:3b:2c:0f:
                    7f:e8:0a:63:76:9c:02:b4:48:84:ce:fd:ba:c0:d7:
                    de:62:44:eb:c9:d4:31:9c:6b:05:83:5c:5a:10:c7:
                    b6:e9:51:0d:72:e0:a9:29:e9:56:99:01:1b:83:e4:
                    4f:38:4c:60:a8:06:55:51:6e:b3:84:34:61:34:37:
                    83:43:52:79:c8:05:df:8e:d6:67:5d:f2:53:c3:73:
                    8b:2a:b9:2c:42:a2:9b:59:ca:1d:df:a6:0d:3a:01:
                    9e:5e:8a:a6:7a:47:f9:38:6d:af:38:ae:da:63:24:
                    18:e2:f9:e1:02:34:a7:b7:e0:7c:8f:4e:db:a2:7f:
                    d3:29:db:62:63:80:ea:71:46:7b:1b:1d:2c:1e:4f:
                    54:48:9f:3a:e2:e3:d5:da:8f:a5:da:f3:6e:70:35:
                    af:d3:3e:4d:45:61:75:ad:0e:7d:f9:2d:03:5f:e0:
                    4b:e4:38:9b:b9:2b:12:68:08:fa:1d:fd:23:8f:89:
                    41:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:78:BB:03:BF:FC:42:B9:D1:2A:45:96:EB:B0:17:6F:E5:73:3D:B1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jni7A7_8QrnRKkWW67AXb-VzPbE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:fa:1c:17:90:13:e0:de:c4:85:a3:42:a0:65:c3:42:16:20:
         57:2c:33:ed:fc:b4:78:07:78:cb:42:74:90:85:d7:ea:94:19:
         28:a0:5f:85:9c:a8:91:72:ea:eb:58:e3:79:cc:41:c6:b9:b0:
         47:d5:7c:e0:ab:d3:dc:50:cd:8e:a6:af:6e:b0:9d:49:15:94:
         01:71:c1:a7:55:13:79:1b:0d:36:e8:20:47:c5:03:85:94:ea:
         9a:74:5b:78:4d:5c:cd:58:42:44:11:81:20:a1:1f:26:2e:08:
         80:48:01:8d:74:eb:06:19:b6:3b:99:96:12:41:b6:26:60:77:
         72:48:a3:45:82:2a:1f:f6:13:b7:34:e5:84:f6:ae:f8:67:09:
         ee:67:ee:9e:7e:75:a2:de:a5:27:05:8c:9b:03:99:25:3d:7a:
         0d:11:d6:da:9c:48:ab:d5:5b:b9:31:bd:43:f7:f6:ed:4b:d8:
         9a:58:9f:fe:6e:48:77:98:18:fc:59:93:63:e8:a2:34:f1:bb:
         23:b1:27:74:88:d6:f2:e8:9c:a0:d6:3a:79:ae:ac:98:63:9a:
         92:c4:e8:17:b6:66:84:0d:b3:48:14:38:d2:19:6b:7c:af:e0:
         df:07:c1:81:b1:4d:3b:1f:fe:1d:be:33:33:f0:ab:de:83:1d:
         31:62:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:46 2025 by rpki-client