Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/REe7f2vHzpWM-Jeuke3-8ow9BUk.roa
File:                     REe7f2vHzpWM-Jeuke3-8ow9BUk.roa (raw, json)
Hash identifier:          UsNkxeX5nnIKJZ2H7p72BRdb6dNBSlCD4VoSQVyKSts=
Subject key identifier:   44:47:BB:7F:6B:C7:CE:95:8C:F8:97:AE:91:ED:FE:F2:8C:3D:05:49
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       26D7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/REe7f2vHzpWM-Jeuke3-8ow9BUk.roa
Signing time:             Fri 22 Aug 2025 08:43:18 +0000
ROA not before:           Fri 22 Aug 2025 08:43:18 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        180.218.160.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9943 (0x26d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:18 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4447BB7F6BC7CE958CF897AE91EDFEF28C3D0549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c0:3e:41:5e:8c:a3:3e:31:99:b1:ae:ba:97:
                    4d:15:e7:df:5e:f9:cf:a1:e1:fa:7f:93:45:a7:87:
                    fd:30:92:a0:ef:02:13:ff:cf:7a:e9:a3:fb:6b:08:
                    6f:7f:28:d1:83:1f:41:8f:a2:a2:77:b8:aa:c3:86:
                    22:48:ff:30:6f:ff:19:ce:99:e8:e3:1b:93:30:fb:
                    41:f1:c4:10:33:27:57:11:f1:68:a9:64:0b:aa:a3:
                    87:7e:43:83:01:92:ee:3e:39:d7:2d:fe:c0:54:50:
                    99:62:03:82:07:76:4c:ef:35:98:cd:28:91:f5:a0:
                    6c:cb:a3:65:67:66:3d:a9:83:ce:ef:9f:b3:51:ed:
                    d0:9c:f9:f3:7c:a9:74:4e:48:48:ba:ef:06:5c:af:
                    84:92:84:b1:b0:e1:11:0a:5b:46:40:81:fc:4e:55:
                    9c:cc:44:fb:3d:01:ef:9e:d6:a9:e2:7e:bf:75:7a:
                    c1:b2:e5:a3:97:aa:62:96:a8:ac:50:60:26:f5:94:
                    48:9e:15:8c:c0:7d:1c:20:3f:c1:79:33:11:9c:2e:
                    68:35:e6:6f:49:33:15:0b:e5:d4:ce:02:4e:ad:8f:
                    8e:ce:61:3b:98:91:83:34:c7:0f:bf:fc:09:f2:eb:
                    2a:59:c7:54:0a:64:58:c3:d3:22:ee:ac:d2:8d:67:
                    33:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:47:BB:7F:6B:C7:CE:95:8C:F8:97:AE:91:ED:FE:F2:8C:3D:05:49
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/REe7f2vHzpWM-Jeuke3-8ow9BUk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:04:18:94:9d:3b:50:e3:f9:10:cd:d6:9f:56:10:da:ac:62:
         a0:9e:bc:48:44:b4:86:e1:3b:98:15:a1:87:bf:56:92:87:63:
         b3:59:21:4f:64:ea:81:ff:6b:e8:2f:8f:e6:23:a4:d9:66:f2:
         a1:95:47:ad:9c:4e:e9:89:2e:38:b7:66:7e:34:5f:5d:bb:d2:
         0e:8f:a1:90:a0:5c:02:fb:8f:d2:85:e1:85:bc:b6:1c:b9:5c:
         a3:a8:6b:18:62:4f:d7:75:e9:dd:11:c7:6b:f0:88:60:c2:97:
         2f:2a:5b:79:d7:87:79:5d:a5:ae:80:4e:68:74:90:d4:22:ad:
         8c:15:55:53:f6:e0:2f:b5:ca:54:50:cd:70:79:5c:03:91:46:
         dc:11:c0:c8:91:9b:92:5f:4c:98:63:37:f4:1d:cf:6a:21:27:
         df:f5:06:2c:b9:ed:7b:eb:e0:84:c3:94:c1:08:74:c6:23:51:
         a7:40:30:43:9c:38:b8:f3:b1:d9:e6:78:e6:86:a7:6d:f4:73:
         5d:74:71:78:22:30:cc:0c:3d:bb:d8:6c:fe:9e:5f:34:3f:75:
         27:b2:92:cd:10:e5:9d:9f:8c:79:f4:a8:9b:e1:6d:95:58:fb:
         92:06:57:52:8d:71:12:be:27:9c:68:01:ee:9f:49:ef:4a:e9:
         0e:5f:d0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:44 2025 by rpki-client