Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WchUtnVUHia64drhLJknGN46gVo.roa
File:                     WchUtnVUHia64drhLJknGN46gVo.roa (raw, json)
Hash identifier:          eVujOcF31fJYlByo7dVWp47OcsKDqTmjI3RtMJLG56E=
Subject key identifier:   59:C8:54:B6:75:54:1E:26:BA:E1:DA:E1:2C:99:27:18:DE:3A:81:5A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       25FF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WchUtnVUHia64drhLJknGN46gVo.roa
Signing time:             Fri 22 Aug 2025 08:42:28 +0000
ROA not before:           Fri 22 Aug 2025 08:42:28 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        114.198.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9727 (0x25ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:28 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=59C854B675541E26BAE1DAE12C992718DE3A815A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:c8:76:14:4a:ec:7d:e3:e8:c9:d7:0a:2f:
                    9b:4b:7f:b0:7e:92:e5:75:21:9e:a6:64:bf:07:7b:
                    96:3b:17:a4:59:4b:f3:db:4f:36:59:78:17:46:f4:
                    17:74:c1:ca:0c:dd:66:a8:ec:10:2e:aa:eb:eb:70:
                    96:99:2a:18:cf:75:43:c4:64:b0:db:41:60:63:5c:
                    0b:9a:82:31:5f:10:23:b0:99:ff:a7:3f:97:c8:74:
                    60:b8:3a:5f:86:cd:12:35:c6:47:4a:5e:2d:54:b5:
                    57:59:b9:6d:d5:42:3d:b0:32:02:97:10:fe:b6:c0:
                    2f:0f:c5:95:44:7e:b0:6a:5e:e4:71:cc:40:14:e5:
                    c6:5f:b5:39:c4:b3:e9:24:52:7c:ae:e9:05:8a:ec:
                    e2:39:45:10:24:e0:c9:02:91:d8:bf:af:a9:8b:35:
                    79:cf:dc:58:b5:60:4e:29:dd:cb:ec:18:46:80:5c:
                    c1:76:5e:b9:ff:a2:f1:23:02:97:cd:17:b0:ba:b4:
                    fd:bc:8f:b4:97:48:04:bf:53:cd:a8:99:1d:43:b5:
                    72:87:e0:89:94:8e:d5:b9:77:31:58:66:66:fd:d5:
                    8b:56:d1:2f:9a:e7:9f:66:f6:63:ec:68:46:c9:78:
                    93:f6:53:e1:2b:13:43:75:15:db:e6:79:93:18:77:
                    37:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C8:54:B6:75:54:1E:26:BA:E1:DA:E1:2C:99:27:18:DE:3A:81:5A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WchUtnVUHia64drhLJknGN46gVo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:07:3f:38:06:86:b4:bf:38:42:17:1c:24:9a:61:3b:90:7e:
         e1:1e:e5:32:0b:58:ec:c3:81:84:cb:93:cd:d6:db:01:e6:d9:
         2c:77:81:f0:2b:6b:93:22:a4:cb:b1:c8:ed:f4:b5:11:f4:ab:
         7a:31:16:98:bf:17:3d:02:3c:f8:f0:11:b1:31:b0:b5:e9:5c:
         df:b3:d5:d2:c9:48:7a:85:14:a1:90:ec:6b:d9:d0:af:49:8c:
         86:72:90:75:4b:8d:e9:3f:dc:0f:f8:a0:12:9e:8b:98:48:16:
         cc:cf:4a:74:53:05:b4:6d:a2:35:8a:63:c8:d6:7a:be:0f:20:
         90:7d:22:5a:4e:89:5d:d3:11:8b:4d:f2:0d:6d:67:c4:47:29:
         2e:97:c8:7f:ab:6c:ee:1e:ec:47:a0:61:07:84:b8:ae:26:b7:
         c6:23:06:f4:d8:55:d6:0a:27:b0:15:d2:48:df:31:15:e4:b2:
         99:4a:9c:4c:ad:91:83:60:1d:23:52:51:53:fa:fa:b1:b5:58:
         d6:d3:17:48:51:61:46:9b:ac:eb:38:9c:26:30:d4:a4:39:c7:
         33:6f:54:ae:c4:4f:75:84:9c:a9:ef:ce:ca:4d:9a:4d:a7:58:
         23:22:94:c4:f2:96:cf:d7:51:81:fe:4c:9b:e2:5c:c8:e8:2a:
         8f:8b:3b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:37 2025 by rpki-client