Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VUgDVssEEirlKbyKZZNQv0s4kj0.roa
File:                     VUgDVssEEirlKbyKZZNQv0s4kj0.roa (raw, json)
Hash identifier:          NzNSWzpWTrOaMdce+WoAYz+AyPlowuL+liQXHUS3zxw=
Subject key identifier:   55:48:03:56:CB:04:12:2A:E5:29:BC:8A:65:93:50:BF:4B:38:92:3D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       26A6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VUgDVssEEirlKbyKZZNQv0s4kj0.roa
Signing time:             Fri 22 Aug 2025 08:43:08 +0000
ROA not before:           Fri 22 Aug 2025 08:43:08 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24165
IP address blocks:        61.64.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9894 (0x26a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:08 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=55480356CB04122AE529BC8A659350BF4B38923D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:a4:e2:9d:2e:46:18:20:f8:72:97:aa:ac:
                    bc:b7:5d:a5:f2:d6:0e:38:e6:0a:3d:1a:c6:31:c5:
                    a7:79:e2:a8:80:3a:64:9c:b3:7c:79:4b:82:f3:0b:
                    e9:7f:7e:63:ec:a8:40:8c:1f:c1:98:9f:77:c9:e0:
                    ca:7e:5c:9e:88:19:1e:51:6e:14:2a:8c:97:12:3d:
                    1d:28:12:91:75:5d:ea:78:44:3d:5c:65:b1:36:33:
                    78:88:f9:ed:8e:ae:70:0b:d6:61:ab:f0:f1:7f:49:
                    b8:e4:a7:f4:cd:e2:4c:28:7a:df:92:46:d7:52:2c:
                    97:63:85:7d:76:4f:2b:d7:48:d7:75:b9:56:1a:95:
                    05:bf:32:01:08:a3:0a:01:9d:6b:9e:94:d5:c9:61:
                    93:da:46:72:63:39:b8:2b:67:8b:6a:1a:82:e8:b5:
                    53:2f:bd:db:1a:45:9d:0b:27:ef:fc:f5:39:c7:c5:
                    cc:08:64:82:91:42:be:8d:14:c5:6e:64:3f:08:88:
                    25:c5:55:08:f2:41:af:9c:11:f7:9f:2d:15:f4:fb:
                    fa:40:33:d5:5f:03:87:59:47:ba:9b:f3:be:0a:00:
                    91:6a:23:9c:c4:09:db:55:23:08:16:a2:a3:e1:0c:
                    00:14:6f:ee:71:35:a5:50:84:18:68:43:b7:87:09:
                    ce:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:48:03:56:CB:04:12:2A:E5:29:BC:8A:65:93:50:BF:4B:38:92:3D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VUgDVssEEirlKbyKZZNQv0s4kj0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:80:74:6e:aa:50:be:28:74:de:b2:76:21:97:6c:96:63:0c:
         64:08:bf:17:52:3a:c3:57:1e:51:ff:5a:7f:d3:55:4a:52:35:
         55:c2:ec:f4:d7:0c:5b:58:cb:7f:b5:03:19:82:eb:f6:44:d1:
         b9:bb:bf:a3:66:6d:c4:c3:ec:4b:7b:3c:49:aa:ed:bd:85:cb:
         9b:21:c5:5a:d1:e4:1f:2b:27:6e:1b:65:e5:fd:1e:54:93:16:
         10:c8:8f:5e:32:00:d0:26:92:5d:a8:11:b7:c2:c0:dc:22:e8:
         a0:0b:2c:ab:7e:d4:ac:df:40:99:77:17:11:e3:46:0e:0e:10:
         62:73:f4:bd:d4:79:bc:59:0c:71:07:42:07:eb:69:ea:d4:88:
         cf:04:33:77:9a:f6:ff:26:6e:10:94:79:18:76:20:28:08:ae:
         3f:11:8c:6d:b5:0e:50:8b:28:e9:3c:ec:93:ea:bc:b0:fc:ca:
         3f:20:40:0e:89:26:b0:99:15:42:b0:a1:0c:14:06:3b:1b:b8:
         02:6f:48:3d:99:b9:a7:e8:c3:ea:79:e3:df:e9:24:c0:e6:17:
         a0:38:0a:53:1a:aa:86:df:68:bf:bb:b1:ad:31:1a:3e:18:36:
         3f:66:e9:04:64:70:ba:ca:ec:b0:45:78:ee:5d:3a:13:01:c5:
         00:4e:52:95
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJqYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw
ODQzMDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU1NDgwMzU2Q0IwNDEy
MkFFNTI5QkM4QTY1OTM1MEJGNEIzODkyM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrUKTinS5GGCD4cpeqrLy3XaXy1g445go9GsYxxad54qiAOmSc
s3x5S4LzC+l/fmPsqECMH8GYn3fJ4Mp+XJ6IGR5RbhQqjJcSPR0oEpF1Xep4RD1c
ZbE2M3iI+e2OrnAL1mGr8PF/Sbjkp/TN4kwoet+SRtdSLJdjhX12TyvXSNd1uVYa
lQW/MgEIowoBnWuelNXJYZPaRnJjObgrZ4tqGoLotVMvvdsaRZ0LJ+/89TnHxcwI
ZIKRQr6NFMVuZD8IiCXFVQjyQa+cEfefLRX0+/pAM9VfA4dZR7qb874KAJFqI5zE
CdtVIwgWoqPhDAAUb+5xNaVQhBhoQ7eHCc7BAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVUgDVssEEirlKbyKZZNQv0s4kj0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ZVZ0RWc3NFRWlybEtieUta
Wk5RdjBzNGtqMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
QAwwDQYJKoZIhvcNAQELBQADggEBAJqAdG6qUL4odN6ydiGXbJZjDGQIvxdSOsNX
HlH/Wn/TVUpSNVXC7PTXDFtYy3+1AxmC6/ZE0bm7v6NmbcTD7Et7PEmq7b2Fy5sh
xVrR5B8rJ24bZeX9HlSTFhDIj14yANAmkl2oEbfCwNwi6KALLKt+1KzfQJl3FxHj
Rg4OEGJz9L3UebxZDHEHQgfraerUiM8EM3ea9v8mbhCUeRh2ICgIrj8RjG21DlCL
KOk87JPqvLD8yj8gQA6JJrCZFUKwoQwUBjsbuAJvSD2Zuafow+p549/pJMDmF6A4
ClMaqobfaL+7sa0xGj4YNj9m6QRkcLrK7LBFeO5dOhMBxQBOUpU=
-----END CERTIFICATE-----
Generated at Sun Aug 24 11:38:45 2025 by rpki-client