Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ViWptrJceYc8HPgIk0KmcDqDMG4.roa
File:                     ViWptrJceYc8HPgIk0KmcDqDMG4.roa (raw, json)
Hash identifier:          VAngx3CpTWNx6lvSow1tmXaDh+ovHOSC6e3uGGSTCHs=
Subject key identifier:   56:25:A9:B6:B2:5C:79:87:3C:1C:F8:08:93:42:A6:70:3A:83:30:6E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2633
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ViWptrJceYc8HPgIk0KmcDqDMG4.roa
Signing time:             Fri 22 Aug 2025 08:42:41 +0000
ROA not before:           Fri 22 Aug 2025 08:42:41 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4662
IP address blocks:        61.64.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9779 (0x2633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:41 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5625A9B6B25C79873C1CF8089342A6703A83306E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3a:a5:e0:83:6d:fb:47:c2:7e:aa:bb:88:66:
                    21:b8:0a:65:41:d2:6d:90:0c:6b:33:3f:1d:de:fc:
                    3e:6d:54:ce:71:ff:5f:e2:7c:3c:86:8a:95:1c:93:
                    b6:b7:8a:b1:c1:6c:5a:4a:96:32:40:2d:98:e3:43:
                    dd:bc:b0:74:6e:eb:e4:2d:44:99:49:c2:5d:3e:51:
                    96:9c:a0:c5:97:4c:22:9f:dc:89:e4:76:22:98:73:
                    45:5f:be:04:55:d2:8d:8b:fe:8d:00:66:bc:4a:7d:
                    cb:f3:f6:ff:e8:11:c3:56:bf:19:2b:52:cb:af:87:
                    d5:e4:bc:a8:ad:7c:64:55:d3:69:02:f3:3d:9e:a6:
                    76:ff:fa:71:65:31:08:aa:40:8c:44:08:c5:32:76:
                    9d:5e:22:31:59:2d:07:99:59:c6:20:10:e4:f5:d0:
                    66:8d:39:64:99:bb:ca:e5:d2:e7:3d:33:19:2e:0b:
                    c7:35:72:9d:f5:77:1b:6b:58:07:80:82:5e:5d:62:
                    36:a1:98:e8:a0:d3:30:c4:a4:66:6e:c5:6f:26:14:
                    e2:51:c8:73:98:ca:3d:10:a5:10:43:ba:ae:09:f3:
                    30:e7:ec:f0:63:b4:c7:97:77:07:54:47:5c:ca:eb:
                    3d:ca:87:82:50:ec:16:85:ab:26:af:16:55:10:3d:
                    58:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:25:A9:B6:B2:5C:79:87:3C:1C:F8:08:93:42:A6:70:3A:83:30:6E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ViWptrJceYc8HPgIk0KmcDqDMG4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:28:2e:10:40:2f:88:ef:21:a3:dd:08:46:91:0a:8c:dc:d2:
         2d:a6:89:04:2b:d5:74:79:66:e8:48:6e:d5:eb:75:81:7f:b3:
         06:14:c2:2c:6d:f7:e6:56:d8:b1:2b:07:fe:d6:01:82:d1:00:
         f7:27:6a:14:60:79:ea:e1:eb:bb:04:a6:22:8a:0e:bf:21:9f:
         4f:c1:cb:37:7a:19:81:9c:95:f9:cd:26:63:94:33:95:07:0a:
         ad:fb:e7:b2:f9:63:59:47:ef:79:9c:91:73:91:a0:96:0d:cf:
         a0:ab:92:86:db:0b:3c:59:4f:ce:a7:a1:8b:89:b4:a9:70:d4:
         d7:97:3d:1e:fe:b8:8a:35:a5:a9:73:dc:3e:f2:dd:d0:b9:fb:
         2b:44:c4:0d:fc:ac:58:7d:8a:6f:f1:20:35:ee:88:e1:0a:65:
         2c:f4:30:de:b3:7f:c3:d3:a2:1e:aa:ab:8f:f2:fe:8c:19:17:
         4e:e2:9b:9b:15:fc:65:cb:23:e6:2a:31:ad:54:4a:e8:6d:b7:
         37:51:42:82:a5:7b:bd:f6:1e:1c:cd:90:d3:0b:a7:70:04:d0:
         ec:f8:e3:87:b9:da:ab:46:c9:1a:30:41:f1:6f:92:9a:15:96:
         4b:3c:0f:9d:22:ed:41:df:01:e4:91:17:3c:ca:4a:64:e4:0e:
         fd:7a:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:44 2025 by rpki-client