Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TO-M5xPLunYzSVk4v78G9kZANRM.roa
File:                     TO-M5xPLunYzSVk4v78G9kZANRM.roa (raw, json)
Hash identifier:          b97gkCt9ZqYZKaYnEPxZ4v5HbcjuItPCtjfgcqPzSE4=
Subject key identifier:   4C:EF:8C:E7:13:CB:BA:76:33:49:59:38:BF:BF:06:F6:46:40:35:13
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       266C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TO-M5xPLunYzSVk4v78G9kZANRM.roa
Signing time:             Fri 22 Aug 2025 08:42:54 +0000
ROA not before:           Fri 22 Aug 2025 08:42:54 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        124.6.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9836 (0x266c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:54 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4CEF8CE713CBBA7633495938BFBF06F646403513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:18:16:4c:75:71:5e:05:e4:b6:f3:aa:35:b6:
                    c2:7f:59:7e:b9:e9:1f:ba:11:37:69:7b:41:e0:e6:
                    87:14:e7:67:ad:06:ca:63:ae:41:11:e3:42:29:5a:
                    71:b7:f5:90:7e:eb:56:1f:0a:be:70:42:63:8c:e7:
                    75:54:5c:59:44:41:6d:b7:82:52:1b:a4:62:05:aa:
                    22:5d:53:87:27:9a:4a:13:22:8d:ea:99:33:7d:01:
                    03:86:2c:a4:09:60:c2:54:30:0a:88:02:b5:25:21:
                    fb:e8:f5:0d:dd:4d:3a:7e:6e:d6:fb:b2:63:5b:52:
                    85:d6:41:4d:1a:26:fb:63:6d:14:c7:65:07:87:4f:
                    6f:c8:73:3d:57:4c:7e:df:2b:68:ad:bf:8e:6b:52:
                    77:67:a2:7f:ca:35:e2:02:7b:25:66:96:67:8e:99:
                    91:73:c9:f6:e7:13:09:71:72:b2:24:cf:a1:f3:9d:
                    6f:1f:fe:6f:21:a5:23:a2:c1:09:99:c4:cb:22:fe:
                    ce:e7:88:b7:e5:a0:b1:92:06:83:34:2e:a1:5b:d9:
                    36:74:be:06:a3:58:5e:7c:4f:f2:f8:75:aa:a8:09:
                    c2:47:ec:af:fe:38:f4:32:53:ec:ae:e1:fb:19:25:
                    1c:da:43:01:60:59:76:7d:29:a5:fe:4e:b1:93:98:
                    d3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EF:8C:E7:13:CB:BA:76:33:49:59:38:BF:BF:06:F6:46:40:35:13
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TO-M5xPLunYzSVk4v78G9kZANRM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:1d:b8:13:ad:df:3b:0e:3d:86:0a:ae:53:31:cf:7f:54:b7:
         61:78:c9:dc:fe:e0:13:89:ff:e9:75:56:79:57:78:a0:6a:47:
         fb:cc:25:7c:b4:d0:f6:6e:30:8c:91:74:37:d4:30:ed:a9:cd:
         a8:37:39:e6:33:65:a7:12:21:bd:55:0e:06:72:05:88:e6:df:
         bf:c6:6f:cf:51:33:80:45:88:01:22:a6:83:c9:a4:2d:d4:c1:
         dd:69:0c:5e:5c:2e:44:f9:ab:60:b5:05:f6:e1:96:60:0d:96:
         6d:e1:2a:66:44:bf:c3:34:ae:89:20:85:f6:fc:7f:4f:4f:9d:
         a7:a2:da:e6:90:a0:bd:82:1d:57:9e:2a:07:4b:f9:d6:41:e3:
         fe:1c:a2:58:2e:c6:a1:a3:d7:27:88:f6:d2:65:02:87:6c:af:
         49:9d:80:35:63:ac:ac:25:10:01:1d:0d:4f:d8:d6:81:99:ed:
         9e:9c:d4:66:15:97:ed:d3:10:52:2e:fc:33:c6:6e:69:68:59:
         c3:7b:a5:f0:7c:5c:2c:97:3d:b8:71:9e:db:b0:15:bd:4e:37:
         5f:00:2a:7e:a2:98:0b:99:88:74:13:90:8b:63:7b:1e:1a:0b:
         47:50:36:19:75:4e:31:91:ab:99:31:8e:f2:2b:cb:9c:fc:6b:
         ed:55:42:fa
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJmwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw
ODQyNTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRDRUY4Q0U3MTNDQkJB
NzYzMzQ5NTkzOEJGQkYwNkY2NDY0MDM1MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDyGBZMdXFeBeS286o1tsJ/WX656R+6ETdpe0Hg5ocU52etBspj
rkER40IpWnG39ZB+61YfCr5wQmOM53VUXFlEQW23glIbpGIFqiJdU4cnmkoTIo3q
mTN9AQOGLKQJYMJUMAqIArUlIfvo9Q3dTTp+btb7smNbUoXWQU0aJvtjbRTHZQeH
T2/Icz1XTH7fK2itv45rUndnon/KNeICeyVmlmeOmZFzyfbnEwlxcrIkz6HznW8f
/m8hpSOiwQmZxMsi/s7niLfloLGSBoM0LqFb2TZ0vgajWF58T/L4daqoCcJH7K/+
OPQyU+yu4fsZJRzaQwFgWXZ9KaX+TrGTmNOfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUTO+M5xPLunYzSVk4v78G9kZANRMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1RPLU01eFBMdW5ZelNWazR2
NzhHOWtaQU5STS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ8
BhQwDQYJKoZIhvcNAQELBQADggEBAGcduBOt3zsOPYYKrlMxz39Ut2F4ydz+4BOJ
/+l1VnlXeKBqR/vMJXy00PZuMIyRdDfUMO2pzag3OeYzZacSIb1VDgZyBYjm37/G
b89RM4BFiAEipoPJpC3Uwd1pDF5cLkT5q2C1BfbhlmANlm3hKmZEv8M0rokghfb8
f09Pnaei2uaQoL2CHVeeKgdL+dZB4/4colguxqGj1yeI9tJlAodsr0mdgDVjrKwl
EAEdDU/Y1oGZ7Z6c1GYVl+3TEFIu/DPGbmloWcN7pfB8XCyXPbhxntuwFb1ON18A
Kn6imAuZiHQTkItjex4aC0dQNhl1TjGRq5kxjvIry5z8a+1VQvo=
-----END CERTIFICATE-----
Generated at Sun Aug 24 11:39:26 2025 by rpki-client