Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Re05NoF3lYjWwtqMRDROWlg56Eo.roa
File:                     Re05NoF3lYjWwtqMRDROWlg56Eo.roa (raw, json)
Hash identifier:          4naE+6YnIGGZTSKiQr6YBl9xxsLMeerpugPfQkUDmlY=
Subject key identifier:   45:ED:39:36:81:77:95:88:D6:C2:DA:8C:44:34:4E:5A:58:39:E8:4A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       26CB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Re05NoF3lYjWwtqMRDROWlg56Eo.roa
Signing time:             Fri 22 Aug 2025 08:43:15 +0000
ROA not before:           Fri 22 Aug 2025 08:43:15 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        119.77.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9931 (0x26cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:15 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=45ED393681779588D6C2DA8C44344E5A5839E84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:1b:6a:c9:d0:31:df:5c:41:5a:dd:61:ae:
                    0c:07:b8:92:07:c1:50:a6:1a:9c:66:c8:30:c2:f0:
                    a5:b9:d6:0e:1d:a1:d1:88:dd:60:61:41:21:d4:aa:
                    31:61:83:36:00:8e:be:ac:52:88:bf:07:1a:1c:08:
                    ab:a9:b3:4e:d2:e7:54:c3:ba:b8:64:c6:0f:0c:2a:
                    2d:28:7a:89:cd:a9:d0:d5:68:6b:7e:5a:ed:2e:65:
                    77:77:02:26:d9:62:8e:26:de:9b:f5:a9:5b:86:3c:
                    9a:43:ec:24:0b:ab:23:bb:d7:0a:d4:69:f0:74:a2:
                    cb:5c:fd:e0:0e:2b:79:8b:9c:f9:69:0b:9e:60:11:
                    0e:c3:ae:98:30:7c:52:36:5e:46:ff:b5:3d:af:8c:
                    d5:55:bd:1f:61:7a:39:35:c4:fd:f4:21:b0:ed:d8:
                    00:71:99:83:f8:32:7e:bd:b9:4d:78:f4:3c:66:32:
                    16:b6:e9:cf:a7:90:7d:7f:15:fc:82:c2:f9:42:7d:
                    18:04:17:2e:35:97:eb:a0:65:ad:ca:7c:ae:36:9f:
                    a8:60:58:11:67:31:c2:dd:ca:74:20:1d:93:d3:74:
                    8a:54:23:2e:f5:ac:de:5e:bb:4b:4b:a0:cc:0a:bd:
                    2c:c4:d3:e2:1c:47:0f:cb:1a:95:b9:2f:fa:ac:87:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:ED:39:36:81:77:95:88:D6:C2:DA:8C:44:34:4E:5A:58:39:E8:4A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Re05NoF3lYjWwtqMRDROWlg56Eo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:8f:07:4e:25:87:b2:e0:68:3f:b8:7a:df:e1:8a:96:9e:cb:
         fe:75:89:45:9d:4d:56:76:26:ce:07:93:73:f4:9b:dc:a0:90:
         b1:73:47:2e:16:3a:48:45:ad:68:54:72:74:5c:72:13:b7:72:
         8f:ed:59:0d:31:8a:eb:2c:22:59:d1:06:0d:6e:19:77:0b:4d:
         5e:5e:d1:23:b0:8a:67:7e:a7:3d:cf:e2:5a:49:bb:da:c2:c1:
         3d:55:69:3d:00:64:ad:b0:55:6c:f3:5c:ce:fe:d9:4c:e9:90:
         fd:4b:7a:4f:dd:f3:90:82:f8:4a:0d:5e:9e:3a:ef:62:5b:46:
         0f:66:6b:76:aa:16:06:ec:5d:87:50:91:07:80:24:72:4c:1e:
         82:08:b5:dd:da:0e:cc:3b:b3:e2:c3:07:91:82:96:23:68:6e:
         75:8e:06:8c:ae:37:c6:f6:9a:12:ef:1f:4f:7f:b7:b0:51:c7:
         7b:51:ad:e9:35:6f:71:22:20:03:75:d9:99:28:94:bb:bb:60:
         af:53:fb:bc:e7:af:77:36:34:8e:35:78:f6:9a:37:86:75:2e:
         d0:49:f4:d5:9a:c1:86:bc:79:d3:a4:fe:53:db:83:bc:17:b3:
         f9:f7:4c:bd:ec:b2:80:a1:29:6a:64:bb:46:0c:4c:90:f2:1b:
         cd:a6:48:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:39:39 2025 by rpki-client