Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/W1TypA8f4P9RJl-ytu4XAXW45U8.roa
File:                     W1TypA8f4P9RJl-ytu4XAXW45U8.roa (raw, json)
Hash identifier:          g6z/fCVKzU8NyMvbklHoEHo9k7nM+Tv+JgDAMBXGXO4=
Subject key identifier:   5B:54:F2:A4:0F:1F:E0:FF:51:26:5F:B2:B6:EE:17:01:75:B8:E5:4F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2677
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/W1TypA8f4P9RJl-ytu4XAXW45U8.roa
Signing time:             Fri 22 Aug 2025 08:42:57 +0000
ROA not before:           Fri 22 Aug 2025 08:42:57 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        45.64.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9847 (0x2677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:57 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5B54F2A40F1FE0FF51265FB2B6EE170175B8E54F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:42:be:ab:66:fb:95:92:2c:85:5f:18:04:
                    4a:1e:ce:13:a2:ca:9e:bc:7c:8e:38:4e:7a:46:8a:
                    17:21:3e:3f:2e:60:5c:6a:cf:cf:aa:43:41:8d:de:
                    a2:47:ef:71:42:b2:da:27:36:06:8b:51:ff:4a:c5:
                    8b:f4:66:56:42:f8:f1:15:67:1f:3b:1d:1e:f2:4f:
                    0d:81:3e:3a:f6:14:47:95:d3:4b:86:66:a7:4a:ae:
                    8a:88:9c:32:de:b3:29:7c:d7:a0:2d:93:36:07:2f:
                    45:0c:db:c8:0d:dc:7b:f5:23:2e:7e:6b:63:56:66:
                    19:6d:da:42:4e:8e:2e:93:f1:c2:37:cc:da:d9:45:
                    5e:19:c9:41:d4:a4:e3:0c:34:0d:82:70:27:40:f9:
                    4b:b3:88:8f:93:a2:1e:6b:d9:9a:a6:38:20:85:d9:
                    8c:7e:95:96:ba:05:35:d5:fb:00:ba:d5:f6:06:55:
                    d8:f6:ae:ad:e3:1e:cf:e0:2c:4f:fa:e5:d3:78:c7:
                    20:0a:7c:f2:14:bd:c3:21:95:01:41:3d:53:14:36:
                    dd:f4:54:59:13:0a:23:e5:25:de:56:dc:06:fe:fb:
                    08:f4:ac:6a:c2:48:a4:a3:72:4c:a1:d4:94:bf:35:
                    25:d1:99:d4:a6:4b:8b:b8:04:56:85:4c:fa:14:cf:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:54:F2:A4:0F:1F:E0:FF:51:26:5F:B2:B6:EE:17:01:75:B8:E5:4F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/W1TypA8f4P9RJl-ytu4XAXW45U8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:57:e6:64:80:3d:63:28:5f:2e:80:79:4b:ee:39:c9:bf:49:
         db:e3:ce:56:ef:3d:99:b7:99:eb:a7:76:c6:5c:48:52:4d:5d:
         32:89:bd:28:f8:49:af:eb:ee:c5:e3:43:98:88:1f:a4:03:db:
         76:d3:63:6f:db:42:79:3e:cc:1e:73:89:57:66:2e:d0:79:ab:
         9a:bb:e2:3c:34:b9:0b:e4:3d:de:56:3d:fe:3f:4d:fd:49:f6:
         f0:35:4a:55:ee:8f:c8:bc:91:ab:cd:66:5a:15:d1:51:a5:bd:
         a0:74:1f:f5:07:db:fc:0b:c5:8c:cc:2f:8e:e9:54:3c:ed:36:
         10:fb:3f:0f:3a:c0:16:8f:b1:d5:cf:ea:da:d3:59:89:47:83:
         74:fc:ed:0c:fa:77:14:04:74:6a:59:96:07:79:8b:bf:d6:c7:
         c1:0d:d9:ae:72:ec:0b:3a:96:18:97:c3:bb:45:b5:47:7a:01:
         2b:1b:fc:2a:f4:a3:7f:62:30:6e:22:69:7c:2e:2b:eb:fd:7b:
         c1:60:e0:1e:1b:5a:b1:67:de:e8:32:08:21:c3:a4:47:17:8f:
         e6:fa:8a:e0:1c:97:76:b5:d9:42:4e:95:c4:eb:13:9e:35:40:
         56:64:e7:5c:0e:b3:5f:13:55:05:40:fd:64:f0:92:ef:9f:a4:
         05:74:d0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:04 2025 by rpki-client