Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TwR_b0noR46U4HotUomy9jiKM9I.roa
File:                     TwR_b0noR46U4HotUomy9jiKM9I.roa (raw, json)
Hash identifier:          u/JM2ae5JIYgds0m6aBLcZOccoh2RXARq3laeCyqn4I=
Subject key identifier:   4F:04:7F:6F:49:E8:47:8E:94:E0:7A:2D:52:89:B2:F6:38:8A:33:D2
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       26B2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TwR_b0noR46U4HotUomy9jiKM9I.roa
Signing time:             Fri 22 Aug 2025 08:43:10 +0000
ROA not before:           Fri 22 Aug 2025 08:43:10 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        180.218.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9906 (0x26b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:10 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4F047F6F49E8478E94E07A2D5289B2F6388A33D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:6e:40:70:d2:4e:17:e5:9f:a4:41:1e:1d:
                    bb:4c:b2:94:b8:d7:e7:0c:f7:63:83:0e:e3:1e:c3:
                    99:d4:7e:6b:79:50:ea:68:ab:44:17:cf:0d:f5:7f:
                    1c:f5:37:96:0c:dc:ef:ed:09:1c:c0:22:6c:77:1e:
                    10:02:e5:c6:78:3a:9b:87:9a:50:e3:57:76:97:f0:
                    bc:e7:5e:61:03:7f:55:6c:42:16:91:0f:85:b0:42:
                    31:d5:f3:55:da:ca:a7:dd:c7:58:1a:9c:b1:fc:93:
                    8f:68:a1:37:95:5a:d2:57:09:5b:f3:23:00:d8:ce:
                    e2:f6:53:af:a8:7e:e0:f3:c9:4c:e4:48:ec:89:78:
                    58:0e:00:8d:f5:64:e4:ab:0a:ea:89:37:ce:ab:35:
                    b6:0f:0b:5d:85:ce:05:ce:2a:ae:3e:49:f0:35:36:
                    1e:f3:6e:a3:10:f6:e1:ed:12:a1:97:f5:68:c1:ff:
                    79:83:ae:e2:60:36:1d:51:82:11:5e:7c:ea:ff:26:
                    95:d0:fd:35:3b:62:d1:a9:14:89:9d:1c:3a:57:19:
                    98:08:b5:74:9f:b0:b9:3c:b7:bb:54:3b:9f:98:2f:
                    86:80:f1:8b:c7:74:1c:39:47:70:b8:0d:82:92:f7:
                    85:80:ab:d7:36:87:7a:eb:96:1f:55:a2:22:86:73:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:04:7F:6F:49:E8:47:8E:94:E0:7A:2D:52:89:B2:F6:38:8A:33:D2
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TwR_b0noR46U4HotUomy9jiKM9I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:f9:e5:85:36:3f:a4:23:de:18:63:8a:a6:20:c4:b3:00:6e:
         5b:96:34:07:92:77:02:7d:4f:bd:e6:5b:d9:14:73:26:88:c1:
         23:5a:95:ba:f8:a6:54:3a:ba:22:aa:fe:05:76:14:a1:fa:6b:
         79:d6:8c:35:a9:99:15:68:fb:0c:8d:2d:da:9e:60:6b:53:f5:
         ed:85:cf:69:67:a3:48:a1:4e:43:6e:57:fb:54:9c:c8:b1:f5:
         61:83:74:cc:40:8e:07:10:a9:34:71:ad:af:56:f0:78:94:2b:
         7d:9b:92:e6:a3:32:e8:ac:25:ea:7d:75:b4:56:24:71:09:ee:
         40:88:2f:c8:32:f7:c2:8c:57:75:b1:a1:e3:36:12:59:ec:58:
         cc:84:6c:8b:51:3f:b7:9b:5e:be:ba:8f:ad:49:1d:80:7e:96:
         44:4f:c2:be:bf:37:6a:fb:c5:6d:d7:c8:cd:20:2e:82:b1:1c:
         94:6c:a7:5f:29:4b:e8:79:cc:77:1f:6f:7e:21:22:f1:fd:fb:
         a7:0d:7f:53:ba:5a:06:2a:ab:6a:35:0f:76:40:9c:83:98:6d:
         7a:5d:7f:c9:81:40:69:1a:6b:0e:1d:ee:86:6a:19:ad:1d:a6:
         78:07:71:0f:6e:f7:3c:0f:0c:76:69:bd:42:df:48:2d:bf:b9:
         25:57:52:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:38:47 2025 by rpki-client