Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N9mv7rzywNl2Dazf0532rfQQo1g.roa
File:                     N9mv7rzywNl2Dazf0532rfQQo1g.roa (raw, json)
Hash identifier:          P2GwfZc39g7QG9/y1C29hbCSGlg3fgioSZ+2AE3fUso=
Subject key identifier:   37:D9:AF:EE:BC:F2:C0:D9:76:0D:AC:DF:D3:9D:F6:AD:F4:10:A3:58
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       26AC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N9mv7rzywNl2Dazf0532rfQQo1g.roa
Signing time:             Fri 22 Aug 2025 08:43:09 +0000
ROA not before:           Fri 22 Aug 2025 08:43:09 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24163
IP address blocks:        115.165.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9900 (0x26ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:09 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=37D9AFEEBCF2C0D9760DACDFD39DF6ADF410A358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:7d:fe:30:21:f6:64:f3:f5:62:8d:59:96:
                    c4:7e:52:5b:be:f0:e7:4d:74:24:ba:91:c0:49:ef:
                    b8:68:95:de:ba:c2:23:d7:99:a1:43:00:22:68:9f:
                    2b:fa:38:32:75:cc:b0:2d:f6:f4:7d:56:2c:52:10:
                    f2:c1:5b:9c:4e:30:2e:a7:4a:0a:f0:5b:2e:15:4e:
                    b2:f1:7a:18:21:2b:aa:81:c9:ab:bd:e7:a6:c7:2a:
                    ca:2d:8a:d3:3a:cc:70:49:a4:fc:39:28:77:67:1a:
                    aa:b0:d8:b1:f5:75:5d:16:5e:3c:6c:f6:ed:a2:63:
                    5a:96:f2:d3:7b:7f:47:fc:e6:f0:7f:fe:29:28:37:
                    69:c7:a0:45:94:50:c7:40:38:20:cf:e9:4b:dc:e6:
                    96:f0:80:1f:cc:c9:ac:da:61:5e:39:18:76:60:f9:
                    26:d6:8f:3a:7d:80:b2:ea:77:e2:ca:94:81:d2:b0:
                    ac:60:53:df:7a:cf:d5:77:a8:8c:60:f2:e4:bb:83:
                    47:df:57:74:c2:8c:43:16:e6:24:97:c2:4a:1b:8a:
                    9c:6d:e2:ef:f6:ce:6c:41:b6:21:41:de:44:79:29:
                    a1:44:e9:b2:49:68:28:0c:84:d8:fd:74:93:24:11:
                    3c:26:59:d3:6f:22:52:6c:52:18:04:db:22:75:9a:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D9:AF:EE:BC:F2:C0:D9:76:0D:AC:DF:D3:9D:F6:AD:F4:10:A3:58
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N9mv7rzywNl2Dazf0532rfQQo1g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3a:da:d5:d1:96:d3:2f:ce:94:2f:1a:dd:76:b2:4f:a7:5b:c0:
         b2:66:08:74:c0:ad:0c:8d:37:47:79:53:3b:d7:bb:b5:ee:d7:
         ec:9c:18:b6:20:98:82:59:61:14:56:c0:1d:38:e0:0b:df:72:
         3f:51:23:7d:44:f4:6f:63:12:8d:7f:17:cf:8a:db:ed:1b:0f:
         69:87:44:68:d7:3b:df:93:95:30:cb:bd:37:79:d2:7e:92:f4:
         23:04:45:9e:6d:24:ab:ad:55:26:84:c5:98:ee:06:c2:ae:da:
         50:02:8a:c5:55:cf:92:eb:6e:95:1a:8b:8a:b9:93:b0:9f:2b:
         e6:d9:79:09:75:56:91:53:bb:eb:eb:18:2a:d2:cd:7b:31:95:
         5d:b2:a0:78:ea:a8:06:3e:c0:19:1e:b4:a6:9e:21:8c:1d:05:
         30:51:c0:e5:c9:0b:e7:ac:ee:fb:46:38:6d:61:1c:3d:56:86:
         ab:15:92:41:22:b4:89:e2:2a:4a:90:76:7b:0f:55:40:39:a5:
         00:87:9f:99:9d:0d:eb:d9:2a:90:e4:b7:63:60:b0:db:6c:08:
         b7:65:44:3e:46:b5:a0:dc:fd:9f:40:f0:21:c5:9a:ad:3a:ef:
         19:aa:88:e5:e7:05:bc:87:be:53:62:9b:97:e0:91:8b:a7:2f:
         34:16:db:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:38 2025 by rpki-client