Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vcp75G8lID8H5elUtGZpPeyOc3U.roa
File:                     Vcp75G8lID8H5elUtGZpPeyOc3U.roa (raw, json)
Hash identifier:          eA/KZQyIq202f2NuPPJRbY743sL326S+3cglPBYk/o0=
Subject key identifier:   55:CA:7B:E4:6F:25:20:3F:07:E5:E9:54:B4:66:69:3D:EC:8E:73:75
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       26DE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vcp75G8lID8H5elUtGZpPeyOc3U.roa
Signing time:             Fri 22 Aug 2025 08:43:20 +0000
ROA not before:           Fri 22 Aug 2025 08:43:20 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24165
IP address blocks:        114.198.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9950 (0x26de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:20 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=55CA7BE46F25203F07E5E954B466693DEC8E7375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8b:0c:03:06:f7:e0:c6:2a:ef:31:96:d1:ea:
                    64:6e:c8:e0:e0:b0:59:f1:21:55:28:99:f3:b5:8a:
                    ab:0a:1b:80:ba:69:33:a8:39:99:56:d0:79:99:42:
                    cf:f7:db:d6:2c:fc:2b:79:e6:fc:90:b5:90:fa:d8:
                    75:1e:e2:73:d9:72:73:8f:22:5d:55:0e:d9:f7:7d:
                    2b:25:85:1a:96:9c:e6:e4:4a:47:4d:9d:ef:08:8d:
                    f0:cb:65:9c:1e:79:7f:42:5a:b8:62:eb:f8:5c:0a:
                    44:fc:c2:90:33:f3:89:85:8f:fe:8d:de:47:5f:e8:
                    17:b1:bf:39:98:04:8b:e2:06:b0:0f:44:1f:b1:31:
                    14:85:b5:7d:4f:7d:7d:7e:ef:b9:70:32:89:0d:07:
                    ce:7e:eb:e1:76:8a:5c:cb:1e:53:43:23:34:9e:5b:
                    0a:18:7c:38:10:6d:5a:47:bd:09:c8:59:8a:07:c8:
                    55:a2:b9:0f:8e:40:8b:5b:f6:52:63:46:18:8a:ea:
                    48:ee:c4:de:17:e4:43:82:3d:0c:99:89:c1:21:4e:
                    a1:7c:ca:47:50:d6:7d:2d:b6:55:e8:a3:78:ba:3f:
                    8e:2c:ce:5a:b5:f4:87:fb:9e:2e:98:c3:b1:b3:53:
                    19:40:cf:be:63:7d:ab:8d:00:e2:a4:b9:13:d1:95:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CA:7B:E4:6F:25:20:3F:07:E5:E9:54:B4:66:69:3D:EC:8E:73:75
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vcp75G8lID8H5elUtGZpPeyOc3U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:ce:3b:f5:55:b0:fd:64:3c:a2:e3:73:9d:75:ed:9d:00:47:
         59:b6:71:2f:96:6e:21:c0:6e:5b:02:1d:bc:d9:78:f9:ef:e4:
         4f:40:32:37:71:69:93:75:ea:3f:08:c8:64:c4:a6:08:ad:f5:
         87:fb:2b:5e:8e:db:b9:f5:ae:38:b0:f6:d0:dc:dd:77:fc:b4:
         41:f0:44:3d:79:8b:8d:d3:c2:01:ec:a0:74:ca:d4:25:0e:28:
         f0:ae:c3:06:db:73:1a:fc:8f:7b:a1:90:f1:c0:43:2d:78:f3:
         cc:65:36:23:35:fd:65:39:06:b2:12:0b:8a:52:6b:e0:2a:12:
         64:90:06:9f:50:14:51:df:af:d8:02:b3:da:f4:5e:62:83:1f:
         c2:fb:70:d9:6e:f9:8b:1c:46:93:f3:dd:5c:af:f0:6b:d6:9e:
         79:56:99:36:e3:50:86:1a:bd:b9:94:72:7d:6a:28:4b:f9:46:
         61:bd:71:d4:4c:d1:a2:92:4c:6d:91:03:5f:c1:d5:63:77:5f:
         c6:b5:b7:4d:53:f8:12:dd:19:88:75:96:85:4a:15:e0:c6:e2:
         98:b3:49:20:8e:49:13:0b:38:08:51:29:a1:15:0c:d7:c7:82:
         fa:43:a1:e0:dd:53:f8:18:43:c5:c4:76:95:84:4f:17:5f:92:
         dc:4f:b1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:06 2025 by rpki-client