Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MMwo73IbUUitSrUlYw8xJrKt3ow.roa
File:                     MMwo73IbUUitSrUlYw8xJrKt3ow.roa (raw, json)
Hash identifier:          NHufEqVy9NF570qviJZL3D3zfiQNY4eokbhGIXY2lW8=
Subject key identifier:   30:CC:28:EF:72:1B:51:48:AD:4A:B5:25:63:0F:31:26:B2:AD:DE:8C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2606
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MMwo73IbUUitSrUlYw8xJrKt3ow.roa
Signing time:             Fri 22 Aug 2025 08:42:30 +0000
ROA not before:           Fri 22 Aug 2025 08:42:30 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        61.61.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9734 (0x2606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:30 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=30CC28EF721B5148AD4AB525630F3126B2ADDE8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:b4:14:11:83:2e:ad:f7:37:e4:01:e1:a7:
                    b5:2a:ca:69:c5:9b:cd:38:0f:90:92:85:91:47:c5:
                    22:00:ea:72:b7:12:61:56:45:dd:02:43:a4:05:ef:
                    15:9a:af:04:08:27:52:2f:23:53:60:5b:3e:d6:92:
                    55:33:7b:9b:34:e0:d6:04:ca:13:d5:93:ae:ae:3f:
                    66:60:c5:33:16:99:a8:f8:cb:89:4e:9b:ce:5c:a0:
                    e7:4e:eb:84:6c:8d:cd:c8:29:d3:24:f8:58:31:26:
                    17:50:a0:82:8a:4e:68:83:c7:f9:dc:24:3d:3b:ad:
                    14:3e:36:99:f7:3c:a8:84:fc:43:96:72:a5:33:ba:
                    54:1a:01:8d:c7:6b:27:91:12:9c:bc:46:d5:3a:90:
                    4e:1f:97:4d:92:23:05:98:ac:c8:16:b4:4a:89:d4:
                    bd:85:15:29:7e:32:e5:3c:4c:f2:5b:38:1a:6c:74:
                    85:f6:fc:fa:03:d3:11:64:74:d8:99:c1:bd:a6:68:
                    41:69:cd:1b:38:6b:d8:80:7e:a3:04:d6:6a:60:c2:
                    73:9e:12:54:99:36:bb:f1:05:fa:20:a1:73:07:15:
                    b1:5c:fc:2b:ee:60:84:5a:e5:ab:eb:a7:df:bf:bb:
                    69:a0:58:83:31:e0:b7:2c:ac:bb:08:02:76:ab:7a:
                    a0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CC:28:EF:72:1B:51:48:AD:4A:B5:25:63:0F:31:26:B2:AD:DE:8C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MMwo73IbUUitSrUlYw8xJrKt3ow.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:fe:65:a7:69:ba:ac:c3:1e:55:ea:ad:70:b4:02:5d:e1:c4:
         e5:d6:0c:e9:4c:66:a4:3a:0c:ae:d2:b5:4c:cf:6d:ae:cc:07:
         88:b1:89:8c:5a:7f:03:1f:7d:23:97:21:0c:9f:32:bb:da:94:
         43:b0:cc:9e:39:58:32:41:f9:c2:2e:a9:4b:be:d1:eb:eb:c6:
         f7:7a:1c:4e:04:27:d1:1d:e9:8e:a2:cb:92:a6:6d:75:ba:41:
         15:1d:a4:81:4a:e2:89:cf:da:fe:56:e3:63:71:1c:2e:11:c2:
         46:cf:f0:3d:29:b9:9a:bd:9e:fe:9c:72:58:ec:cc:19:89:55:
         f3:0b:03:b4:3d:e0:fa:40:d5:fa:b9:2b:47:59:2a:b7:60:36:
         7d:2b:70:bb:22:1e:fd:81:45:55:0d:07:3b:f6:6e:f8:ea:41:
         bb:a9:b7:b4:81:b0:73:3c:14:a5:98:c1:62:cb:9f:4b:09:45:
         97:dc:8e:47:7c:d1:89:68:d5:e6:26:d7:41:23:20:fd:7a:d1:
         2b:5c:f2:7b:1b:74:16:09:a9:c2:33:cf:ee:63:4f:88:2f:e4:
         94:a6:61:01:e0:8d:e7:05:7f:a2:b3:24:e7:54:8d:d1:a3:00:
         92:f3:cc:60:30:29:54:05:a6:87:69:0e:37:23:2e:ae:a8:0e:
         d5:b6:9f:70
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJgYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw
ODQyMzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMwQ0MyOEVGNzIxQjUx
NDhBRDRBQjUyNTYzMEYzMTI2QjJBRERFOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCre7QUEYMurfc35AHhp7UqymnFm804D5CShZFHxSIA6nK3EmFW
Rd0CQ6QF7xWarwQIJ1IvI1NgWz7WklUze5s04NYEyhPVk66uP2ZgxTMWmaj4y4lO
m85coOdO64Rsjc3IKdMk+FgxJhdQoIKKTmiDx/ncJD07rRQ+Npn3PKiE/EOWcqUz
ulQaAY3HayeREpy8RtU6kE4fl02SIwWYrMgWtEqJ1L2FFSl+MuU8TPJbOBpsdIX2
/PoD0xFkdNiZwb2maEFpzRs4a9iAfqME1mpgwnOeElSZNrvxBfogoXMHFbFc/Cvu
YIRa5avrp9+/u2mgWIMx4LcsrLsIAnareqCfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUMMwo73IbUUitSrUlYw8xJrKt3owwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL01Nd283M0liVVVpdFNyVWxZ
dzh4SnJLdDNvdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
PdQwDQYJKoZIhvcNAQELBQADggEBAEX+ZadpuqzDHlXqrXC0Al3hxOXWDOlMZqQ6
DK7StUzPba7MB4ixiYxafwMffSOXIQyfMrvalEOwzJ45WDJB+cIuqUu+0evrxvd6
HE4EJ9Ed6Y6iy5KmbXW6QRUdpIFK4onP2v5W42NxHC4RwkbP8D0puZq9nv6ccljs
zBmJVfMLA7Q94PpA1fq5K0dZKrdgNn0rcLsiHv2BRVUNBzv2bvjqQbupt7SBsHM8
FKWYwWLLn0sJRZfcjkd80Ylo1eYm10EjIP160Stc8nsbdBYJqcIzz+5jT4gv5JSm
YQHgjecFf6KzJOdUjdGjAJLzzGAwKVQFpodpDjcjLq6oDtW2n3A=
-----END CERTIFICATE-----
Generated at Sun Aug 24 11:39:41 2025 by rpki-client