Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SmuR0yf-NXCRVEKKPounA--dW6o.roa
File:                     SmuR0yf-NXCRVEKKPounA--dW6o.roa (raw, json)
Hash identifier:          a25HYTs7+JYjvqaXIelMMNvajn601lxL0VRuHcVuUTU=
Subject key identifier:   4A:6B:91:D3:27:FE:35:70:91:54:42:8A:3E:8B:A7:03:EF:9D:5B:AA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2641
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SmuR0yf-NXCRVEKKPounA--dW6o.roa
Signing time:             Fri 22 Aug 2025 08:42:45 +0000
ROA not before:           Fri 22 Aug 2025 08:42:45 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        211.76.32.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9793 (0x2641)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:45 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4A6B91D327FE35709154428A3E8BA703EF9D5BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:01:3c:0d:62:9b:0c:29:61:26:40:43:fd:
                    3c:de:a5:ca:f0:94:a4:9e:94:8e:88:ff:eb:55:b5:
                    59:86:16:37:7b:63:b4:b2:c7:ef:24:49:b0:81:e9:
                    50:da:38:d8:41:c0:11:5c:c5:ff:c5:15:0e:ec:db:
                    c1:b5:bf:b5:f7:2d:e3:e6:ce:93:f6:04:ba:28:66:
                    75:c7:d5:2c:f3:12:ad:7f:38:b2:cd:21:54:13:12:
                    e2:f3:ac:48:10:dc:29:b4:b1:c2:46:d3:0a:c9:71:
                    9c:26:47:89:02:88:b8:60:a8:27:1e:8c:f8:78:ed:
                    8b:38:50:ee:9f:4c:a4:41:e4:61:00:ac:5d:9f:03:
                    92:39:72:18:28:e4:b9:27:e5:07:1d:2e:3a:1d:b0:
                    6e:66:39:47:71:6f:41:1c:42:2d:cd:46:fc:69:20:
                    3d:95:fc:81:80:59:3d:0c:5b:6f:02:80:78:ca:ae:
                    83:2d:31:a5:83:a5:60:a2:fa:35:f7:e5:ad:80:84:
                    52:61:df:2c:d0:55:43:59:ec:bc:1b:4e:c9:17:c0:
                    e3:71:5f:a7:bf:e1:6e:c3:e0:71:40:6f:5f:07:f9:
                    7d:09:f6:ab:c2:f3:68:cb:af:61:91:27:ae:55:bb:
                    e6:99:8e:cb:4a:82:9c:56:1d:4d:2c:15:37:b5:0a:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6B:91:D3:27:FE:35:70:91:54:42:8A:3E:8B:A7:03:EF:9D:5B:AA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SmuR0yf-NXCRVEKKPounA--dW6o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:4a:37:e0:56:31:65:cd:53:83:14:c8:7f:76:79:b2:e7:a1:
         ee:ff:93:91:2d:cd:b3:bb:b7:67:6c:42:48:b4:1d:f5:0b:0a:
         9d:33:d9:76:f5:ff:5e:7a:e1:5b:94:bf:4d:82:00:35:5d:f6:
         15:70:bc:47:8f:91:50:b1:0d:dd:90:20:ca:ee:60:46:29:f5:
         a7:16:7e:86:bd:3e:c7:a4:e8:27:55:96:64:fa:c8:9c:46:bd:
         5f:00:82:90:fb:9a:0d:4c:b4:3a:a3:16:78:07:15:88:77:61:
         f8:7b:7e:a3:24:d7:c1:cd:68:4f:1d:2c:36:00:a5:55:47:d0:
         0e:d4:96:4c:44:a8:86:a5:54:0d:eb:8c:ab:bf:86:8c:5d:5b:
         b0:91:2e:1c:ab:0d:21:31:28:42:d5:b8:4f:99:d8:a5:f9:a7:
         3b:cf:df:7b:36:df:5f:f8:20:1d:c0:bc:eb:10:a7:9f:93:c9:
         d9:53:7a:34:6c:41:7a:d5:15:9d:04:74:64:53:2f:f6:9b:a5:
         e9:bc:54:26:e7:68:62:e3:27:1e:bc:c5:f7:94:e5:f3:05:70:
         78:e2:dd:7f:06:c4:ba:aa:1c:e6:8d:c6:d0:2d:63:6c:de:31:
         c8:b6:8f:c6:ab:d1:b5:23:14:47:94:d5:a4:69:e9:49:d9:65:
         52:e0:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:46 2025 by rpki-client