Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_j92WVLqb3OffZsBhm9THeJBbwI.roa
File:                     _j92WVLqb3OffZsBhm9THeJBbwI.roa (raw, json)
Hash identifier:          w7R4wadX3o/9Cohfn6mHLGt3LqhG+i7U5XhF34g+O6M=
Subject key identifier:   FE:3F:76:59:52:EA:6F:73:9F:7D:9B:01:86:6F:53:1D:E2:41:6F:02
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       265C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_j92WVLqb3OffZsBhm9THeJBbwI.roa
Signing time:             Fri 22 Aug 2025 08:42:51 +0000
ROA not before:           Fri 22 Aug 2025 08:42:51 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        180.218.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9820 (0x265c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:51 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=FE3F765952EA6F739F7D9B01866F531DE2416F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:f7:84:94:4c:20:ea:b1:4c:82:75:c1:77:
                    62:b3:a0:15:3b:27:0a:5b:e8:94:a0:a8:a1:07:85:
                    e2:2a:08:56:43:5e:3d:db:1c:21:9b:7e:c3:4c:cb:
                    8c:3e:62:59:7c:51:c9:d6:8f:a1:dc:98:81:eb:5c:
                    e4:65:0b:8a:8f:9d:be:36:84:bb:b9:02:93:15:dc:
                    89:a4:77:fe:7f:89:72:8f:3c:2f:fa:1a:dc:72:18:
                    c0:ec:37:c1:66:10:d9:a0:b2:5f:23:bb:54:56:da:
                    be:05:3b:a9:10:14:03:0f:dc:e0:cc:2d:79:6b:8c:
                    20:16:3f:6c:9b:9f:85:89:c5:8d:be:b9:87:a4:3c:
                    a5:69:89:b1:ac:15:3c:21:52:32:87:ec:a7:90:01:
                    a9:11:74:b4:85:ff:87:83:34:76:be:47:e4:92:84:
                    1e:61:c0:89:c6:b6:b9:63:80:55:64:d9:f2:06:5a:
                    fb:0b:f4:be:8c:5a:30:89:ab:e0:8c:39:6a:2a:63:
                    7c:a8:03:02:44:a4:cb:2b:3f:a2:15:51:27:38:26:
                    62:73:22:21:61:ca:19:28:dd:d1:20:dc:4d:02:28:
                    25:56:ab:43:80:01:d5:5e:08:dd:d6:46:8f:c7:8a:
                    b7:1d:4a:fd:02:f0:a6:1c:4d:7f:ee:5a:c7:0f:a6:
                    dd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3F:76:59:52:EA:6F:73:9F:7D:9B:01:86:6F:53:1D:E2:41:6F:02
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_j92WVLqb3OffZsBhm9THeJBbwI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:52:94:4e:e8:80:a7:e5:d0:fc:83:0f:65:fa:f1:8b:74:34:
         a5:35:52:7e:1f:39:94:f4:f4:5f:03:4e:ad:b9:a9:bb:f0:b8:
         aa:dc:bd:26:1e:cd:70:f3:a0:0d:26:f3:e8:52:c9:92:73:6a:
         15:00:06:db:9b:9d:f8:2c:dd:7a:f9:67:d0:e2:eb:0d:46:8c:
         d7:c1:a4:f6:a3:05:b2:1a:ae:6a:03:80:e8:be:a6:67:17:b3:
         a7:c7:b5:5c:a4:3f:49:ca:a4:4b:c5:bd:de:df:b4:b8:37:29:
         95:4e:ff:7f:c7:9f:3b:c1:13:73:8f:46:0e:31:7f:6b:36:cd:
         76:d8:5b:2e:fd:96:75:7e:ec:53:3e:cb:b3:4b:4a:54:7e:a1:
         03:52:f3:c7:43:de:a2:7a:1a:7c:95:a4:95:f8:b9:a4:41:42:
         48:af:8c:06:85:d0:a5:df:c6:a6:98:dc:52:b2:02:88:cd:16:
         92:74:ad:a8:3d:b4:2b:ee:42:72:dc:37:c9:85:b7:c6:34:68:
         43:0d:99:4c:7b:f6:18:d9:25:b4:0d:6a:28:65:84:19:34:7d:
         77:6b:2d:d0:08:63:a2:57:e2:11:5d:cd:b6:65:f8:65:dd:9b:
         84:a1:de:50:88:97:11:88:7a:c5:b9:35:4f:a9:b5:69:33:1e:
         7a:78:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:36 2025 by rpki-client