Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UslutVTnnDFOfZl3V40Y1wNNONc.roa
File:                     UslutVTnnDFOfZl3V40Y1wNNONc.roa (raw, json)
Hash identifier:          Rr9P1NXpz/+WrdcLYQXI/IfoONDcRBdSoXb85O34jSM=
Subject key identifier:   52:C9:6E:B5:54:E7:9C:31:4E:7D:99:77:57:8D:18:D7:03:4D:38:D7
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2714
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UslutVTnnDFOfZl3V40Y1wNNONc.roa
Signing time:             Fri 22 Aug 2025 08:43:33 +0000
ROA not before:           Fri 22 Aug 2025 08:43:33 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24165
IP address blocks:        49.159.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10004 (0x2714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:33 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=52C96EB554E79C314E7D9977578D18D7034D38D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:47:16:86:17:d9:11:f4:43:3f:ee:6a:8a:
                    27:87:9a:55:48:5e:ca:4e:f8:5e:a5:45:d3:2a:26:
                    0c:24:8f:d3:0a:02:80:c7:28:3a:78:2c:b1:77:d1:
                    12:6c:6b:eb:f9:65:ff:2d:3f:bf:e3:ec:99:ea:af:
                    51:6d:d4:b0:99:58:eb:b6:74:f9:2d:c7:98:60:0f:
                    d4:bf:99:45:8e:70:34:0b:18:5d:42:e7:c6:91:ab:
                    9d:fa:51:9e:c7:3e:c8:9c:75:c8:05:63:d0:44:36:
                    e6:17:2b:15:60:9d:ec:c2:db:23:00:67:bb:be:07:
                    3a:b5:3d:52:ee:8b:5d:84:36:1a:d2:41:be:cf:b8:
                    15:cc:a8:81:a6:ee:0a:f1:73:30:f6:26:d1:95:ad:
                    5a:65:86:a2:57:a1:0c:fa:f0:0c:df:45:6a:af:70:
                    6d:fd:21:58:78:86:71:be:3a:78:a9:52:87:5c:d8:
                    96:52:c0:c4:25:3a:a2:f6:ef:ef:39:1a:fa:02:29:
                    b4:1f:da:62:2e:e0:15:c4:71:78:2d:6f:14:f7:26:
                    d9:84:d1:58:b5:af:c0:04:33:fc:87:a0:d6:ff:8e:
                    26:e4:1f:eb:e1:89:52:63:25:cf:78:67:b9:bf:20:
                    60:83:10:23:0a:ba:0d:99:58:43:7e:41:05:a7:ed:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C9:6E:B5:54:E7:9C:31:4E:7D:99:77:57:8D:18:D7:03:4D:38:D7
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UslutVTnnDFOfZl3V40Y1wNNONc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:cc:ba:c1:7d:80:92:60:13:bd:f1:b8:13:46:72:04:47:78:
         11:91:5a:93:05:78:4e:98:4b:10:90:96:c0:9b:2e:75:ed:82:
         a4:a2:c5:a6:f5:e3:65:d1:9b:99:23:6d:f8:36:65:75:7c:c6:
         db:ce:f2:91:ae:f7:78:36:a8:88:91:0d:87:fc:a3:5b:32:90:
         bb:69:05:f1:5d:c8:52:af:57:2e:38:fe:e4:b6:6d:88:1c:27:
         d2:31:86:1a:3a:bf:c0:5f:c7:f4:27:35:95:b5:bb:3b:3f:0e:
         d0:b7:dc:ff:6f:7d:a9:be:13:1c:58:22:6b:82:ce:0c:c7:9d:
         8a:4a:26:0d:47:14:d9:e6:82:bb:db:ec:3c:d4:79:92:fa:f2:
         5f:8f:61:99:a7:62:2d:92:8e:3d:21:29:c1:7b:c5:5c:4b:36:
         20:f4:ab:af:07:da:ac:e0:fe:67:6d:96:78:45:1c:33:e7:77:
         c6:fc:46:49:4f:1f:5e:86:1f:86:c8:1f:32:a8:99:0d:32:f1:
         39:90:f3:0c:73:7a:03:1f:dc:d1:3a:b4:9d:72:81:5c:c5:4c:
         74:49:85:b4:23:f5:25:08:dd:49:17:0b:00:25:13:d3:e5:bf:
         6d:76:67:17:99:8c:05:38:14:74:5b:84:38:09:6a:71:1b:70:
         2e:fa:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:40 2025 by rpki-client