Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Wxwn-weELbnyj3PIWJDUiVp7K-o.roa
File:                     Wxwn-weELbnyj3PIWJDUiVp7K-o.roa (raw, json)
Hash identifier:          1HK+oaths2EDyAl4ZA1RhenxjhLr/ZcrJvxpR3rmCAY=
Subject key identifier:   5B:1C:27:FB:07:84:2D:B9:F2:8F:73:C8:58:90:D4:89:5A:7B:2B:EA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2720
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Wxwn-weELbnyj3PIWJDUiVp7K-o.roa
Signing time:             Fri 22 Aug 2025 08:43:35 +0000
ROA not before:           Fri 22 Aug 2025 08:43:35 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        180.218.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10016 (0x2720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:35 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5B1C27FB07842DB9F28F73C85890D4895A7B2BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:d1:59:a7:38:6b:b7:75:d4:80:dd:38:9c:
                    a7:ea:03:f2:c6:5d:b6:7f:33:98:31:51:f0:7b:a8:
                    78:24:38:ab:7b:43:a1:28:0d:b5:68:c5:fc:dc:a1:
                    5f:20:1c:ff:d4:ff:d3:76:44:70:75:bc:01:57:ed:
                    ec:b9:5a:72:19:27:a4:e7:6c:5a:a0:78:6f:65:14:
                    46:90:de:e7:3c:5d:a2:1b:8f:30:6b:11:15:f0:87:
                    03:6c:5c:dd:c0:05:eb:92:7d:a2:df:b3:10:12:a8:
                    b6:69:83:5c:2d:ba:af:2f:fe:a8:ea:49:76:d0:e4:
                    28:46:ba:b1:8a:27:ab:03:43:25:c5:60:9a:8e:3d:
                    f1:f8:42:61:12:0b:42:fc:d3:79:b3:c5:81:cb:41:
                    c6:bc:49:6c:40:40:b6:ae:34:37:1c:f2:a5:41:7b:
                    af:89:6b:7f:a5:2d:bd:8b:5b:89:d5:2c:68:e2:ef:
                    70:b2:64:ea:2b:75:34:c8:7e:10:3e:6c:fa:86:e6:
                    03:cc:c9:6d:48:88:87:f6:d9:d8:39:8a:67:a1:54:
                    ec:c3:c5:96:bf:aa:ef:8b:2f:33:0d:4b:ef:54:e5:
                    ca:0a:53:16:e2:bf:29:f3:2c:f1:28:51:08:6b:17:
                    14:46:9b:ef:0d:0a:c8:89:d2:bb:85:8b:33:7f:09:
                    67:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1C:27:FB:07:84:2D:B9:F2:8F:73:C8:58:90:D4:89:5A:7B:2B:EA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Wxwn-weELbnyj3PIWJDUiVp7K-o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         64:6c:c0:3e:72:cf:ce:e6:02:5e:80:13:c1:11:3f:1d:24:30:
         b0:c9:33:c8:4e:3a:e5:b4:14:2a:e1:10:49:8b:13:a9:89:23:
         7d:2e:65:21:72:c3:6d:7a:31:2b:7d:96:8b:c0:d3:33:0d:ab:
         7e:75:e6:26:66:35:18:35:94:1e:27:6d:0f:be:c7:be:e5:dd:
         db:64:d8:b7:56:1d:81:a9:8b:02:e1:d3:19:83:c2:ab:ac:ff:
         46:cb:38:cf:d2:d0:60:54:d7:88:33:a7:d1:26:30:c8:88:8e:
         e8:e9:b6:0d:2e:b8:89:e5:f8:23:da:47:7a:be:d7:04:68:ab:
         bb:73:01:0b:54:50:d4:6c:b2:ec:34:ba:95:f8:02:bc:b3:9c:
         44:c5:59:d5:a0:19:92:21:50:23:f1:48:14:fb:ec:ab:80:54:
         15:5d:32:31:df:a4:0a:2f:e0:e1:9a:f4:a2:02:5d:ad:e8:22:
         dd:68:d3:f5:e0:03:95:7b:9f:45:fd:93:3a:ad:54:7e:47:38:
         d1:1f:46:c3:a1:cc:19:80:b1:5f:ab:c6:1e:fc:0b:58:75:12:
         a8:b3:bd:e3:1a:b3:e2:e1:80:9e:e7:18:6d:91:79:50:0d:83:
         21:ab:85:3f:97:0b:d0:22:b3:6e:a8:eb:4f:66:bf:38:a1:3b:
         34:05:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:06 2025 by rpki-client