Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UNCCNrF6OiSC14UHq1RTmmVvAPU.roa
File:                     UNCCNrF6OiSC14UHq1RTmmVvAPU.roa (raw, json)
Hash identifier:          PROZcSIsksOMPa8FFE5eVHx7aTIYeU/zFVJ4+NqqQCY=
Subject key identifier:   50:D0:82:36:B1:7A:3A:24:82:D7:85:07:AB:54:53:9A:65:6F:00:F5
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       260F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UNCCNrF6OiSC14UHq1RTmmVvAPU.roa
Signing time:             Fri 22 Aug 2025 08:42:32 +0000
ROA not before:           Fri 22 Aug 2025 08:42:32 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        211.76.64.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9743 (0x260f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:32 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=50D08236B17A3A2482D78507AB54539A656F00F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:7e:fd:55:c0:b2:5d:13:fb:9d:8a:a8:e6:
                    82:93:3d:26:d5:cb:57:5f:67:a0:9f:4f:73:1b:44:
                    32:c1:e3:42:36:77:5b:ae:da:ce:f8:2a:54:9b:d4:
                    fd:62:57:dc:d9:74:cc:ee:82:fe:e9:f0:5d:36:aa:
                    f5:b2:52:29:ce:71:91:72:d1:5c:85:13:4a:7f:7c:
                    52:5d:19:ac:43:a4:73:ee:84:17:2f:d4:90:ce:cd:
                    2c:76:1a:e3:13:ca:0f:ab:fe:14:d6:2c:d6:18:73:
                    23:ea:83:00:fb:3d:55:4e:c4:2d:dc:b9:e1:2a:c2:
                    e7:e2:a2:88:66:f0:ec:db:22:c5:ec:92:fe:41:4c:
                    87:a0:a6:e4:83:c9:58:ed:8a:f7:ab:a8:af:e0:da:
                    0e:fc:bd:05:89:78:d0:df:44:73:f3:fb:3d:87:48:
                    50:22:3d:86:28:c5:b6:d3:f3:0d:4e:ec:23:be:cd:
                    81:c7:15:6d:e8:4b:63:31:dd:f2:48:a8:5e:2e:11:
                    30:2b:66:6b:8a:00:fc:b0:cd:22:f8:69:13:a1:53:
                    d8:4d:dc:65:ae:4c:bb:d0:c3:39:95:af:a1:0f:38:
                    f5:54:a8:7c:50:0e:d1:68:24:f3:b7:c3:85:3a:33:
                    b5:e8:1b:84:23:0a:5c:34:85:95:2c:f6:a5:85:0b:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D0:82:36:B1:7A:3A:24:82:D7:85:07:AB:54:53:9A:65:6F:00:F5
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UNCCNrF6OiSC14UHq1RTmmVvAPU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:55:59:03:43:3d:67:89:d1:d7:99:04:4e:81:ac:9a:21:f8:
         a3:d0:0c:3c:ed:33:7b:81:86:b7:d8:4a:cd:ca:ce:75:2d:d2:
         1a:ef:ea:df:77:30:20:b7:a6:17:94:bb:bb:6e:78:07:69:79:
         8f:f9:d9:08:6d:36:c5:5d:12:fd:c2:a4:c5:a0:2f:1c:5c:da:
         50:55:23:8e:78:67:42:c3:1c:8e:13:4c:fe:db:d0:7d:a7:73:
         2a:1e:45:a3:a8:d0:60:07:b9:09:7e:03:1e:fc:28:29:02:dd:
         37:b2:66:63:c6:05:0a:7b:b6:8b:04:ec:be:f6:c4:11:d5:d8:
         ca:34:4f:75:2c:b0:46:a1:f5:6d:4c:b0:e4:e4:15:d4:cd:80:
         69:10:f7:6d:df:f9:43:8a:b2:c3:09:c1:16:30:9b:6d:3b:bb:
         40:52:fe:a2:16:9b:79:11:b4:ea:d4:98:fc:29:4c:4a:4d:18:
         36:d4:d9:ff:f5:ec:fa:fc:86:b7:d9:7c:1c:11:16:54:0e:28:
         2a:a0:6b:46:c4:91:59:35:69:65:b5:60:7b:5a:b4:31:f3:fd:
         ac:5c:7c:e7:85:7f:6b:b8:6b:43:1e:cc:f3:a0:78:aa:64:83:
         de:76:73:06:c9:1b:ae:49:ae:87:90:d3:59:b1:35:a2:8e:1a:
         31:1e:10:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:38:33 2025 by rpki-client