Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RAmvr_ptQfpHplsGbR_46kqJJWI.roa
File:                     RAmvr_ptQfpHplsGbR_46kqJJWI.roa (raw, json)
Hash identifier:          UUB/Lrww1uXyhVSLYWchE7DcDPrv4CNTP5pbvqa6wE8=
Subject key identifier:   44:09:AF:AF:FA:6D:41:FA:47:A6:5B:06:6D:1F:F8:EA:4A:89:25:62
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       270A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RAmvr_ptQfpHplsGbR_46kqJJWI.roa
Signing time:             Fri 22 Aug 2025 08:43:30 +0000
ROA not before:           Fri 22 Aug 2025 08:43:30 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        123.0.48.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9994 (0x270a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:30 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4409AFAFFA6D41FA47A65B066D1FF8EA4A892562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:73:55:4c:50:7f:cd:d1:d5:80:0c:9f:81:
                    95:61:f6:f6:85:3d:9a:a2:99:89:be:15:05:c4:cf:
                    73:ca:a3:c8:93:9d:37:b8:7a:ad:c5:c4:90:8b:88:
                    26:fa:cb:4e:aa:4f:9b:f0:0f:30:ff:e4:ca:27:db:
                    64:ca:7d:88:67:fa:e1:d7:65:fd:95:8a:65:7b:47:
                    90:d9:a2:d9:ac:37:47:dd:19:d6:da:f6:fb:9a:e0:
                    27:80:db:56:00:ea:d9:ba:72:e2:ca:a0:8d:49:6a:
                    69:fb:d9:da:20:e2:14:4c:e5:3e:6c:f1:62:96:89:
                    43:97:52:d4:36:4e:28:b4:02:6f:a0:3b:c6:7b:f9:
                    8d:26:a6:31:f2:47:fe:55:35:f9:42:45:ac:90:54:
                    c5:41:49:2b:f3:6a:e1:5b:c6:f9:09:46:7b:3f:4f:
                    ea:50:5a:37:46:22:f7:95:7b:a5:a5:e1:c2:e9:7b:
                    dd:1b:01:d6:d7:bc:ed:94:67:ef:97:cf:bc:bf:2c:
                    82:73:7c:e1:ef:33:1e:8b:c1:37:4b:51:c1:7c:ed:
                    2b:f4:25:ea:9c:be:18:af:d1:56:27:a1:c8:16:8a:
                    fe:7a:32:23:f8:a6:4a:d9:bd:4c:81:d9:88:72:f3:
                    83:6a:ae:9b:1d:1f:b2:3e:79:d0:e6:8e:ad:05:66:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:09:AF:AF:FA:6D:41:FA:47:A6:5B:06:6D:1F:F8:EA:4A:89:25:62
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RAmvr_ptQfpHplsGbR_46kqJJWI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:ca:7f:90:14:4c:d7:d9:5a:ed:87:ae:be:dd:4d:4c:c6:6e:
         e5:7e:29:77:43:d3:8a:2d:db:96:b6:4f:04:61:68:5b:ce:4c:
         51:7a:d9:7e:9a:c2:66:f1:29:3f:51:23:7a:50:fa:d5:d6:3b:
         89:22:fa:14:a8:0e:2b:27:00:98:6e:6f:bf:e2:1a:0e:fb:ba:
         33:86:f5:e4:40:0f:81:30:47:be:f6:1b:1a:85:0d:76:86:f6:
         51:aa:99:db:cf:9d:df:a4:2a:b1:05:93:47:69:50:5b:1a:ba:
         4b:ef:6b:1c:1c:3d:63:c7:e1:a7:9c:20:66:48:b1:3b:53:97:
         17:ec:1e:ce:75:f0:01:78:c9:7e:4b:52:59:8a:a4:aa:d9:ce:
         f2:c1:92:80:4c:7b:f0:77:46:d9:84:55:7d:9f:e9:a2:44:d1:
         8c:eb:1a:e8:35:3f:2c:45:6a:40:4e:09:66:b9:ee:60:7e:03:
         00:05:c0:38:b7:e4:e4:dd:f7:a7:be:ab:1c:03:dd:0d:5b:3b:
         a7:f3:73:0b:10:f3:ec:75:6f:ba:e9:2d:6f:07:0e:63:87:91:
         dd:01:fd:fa:cb:f6:24:5c:ba:76:01:27:3d:ee:37:b0:56:77:
         66:f1:13:9b:8e:93:90:df:b9:ec:ac:2d:4b:62:4a:5b:0f:b8:
         8b:58:ed:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:04 2025 by rpki-client