Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_nQYuMM0I9_cCxWJnd31ivZH7Io.roa
File:                     _nQYuMM0I9_cCxWJnd31ivZH7Io.roa (raw, json)
Hash identifier:          +zlfko1njsNCuG+uvgj/GEZQpVmqyyLGk5zdZxL6cIA=
Subject key identifier:   FE:74:18:B8:C3:34:23:DF:DC:0B:15:89:9D:DD:F5:8A:F6:47:EC:8A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       265A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_nQYuMM0I9_cCxWJnd31ivZH7Io.roa
Signing time:             Fri 22 Aug 2025 08:42:50 +0000
ROA not before:           Fri 22 Aug 2025 08:42:50 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        49.158.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9818 (0x265a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:50 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=FE7418B8C33423DFDC0B15899DDDF58AF647EC8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:65:de:6c:07:98:92:b7:99:61:de:2f:eb:
                    d1:c5:bf:1d:4a:a7:ad:e3:83:89:ea:f2:6d:f7:a9:
                    2b:8e:af:18:52:c1:5a:dd:19:92:e7:3e:0e:ec:ca:
                    94:74:b6:b7:75:58:9e:51:20:36:59:70:da:e8:e7:
                    50:b2:93:44:f3:80:61:ca:25:9f:cf:10:86:38:bf:
                    7e:6b:23:b0:58:64:b6:5d:33:db:50:cf:b6:d8:22:
                    1e:86:76:1c:7c:93:c6:3b:eb:28:b4:f7:7a:d7:b3:
                    f6:f2:43:a3:0d:32:3a:a2:89:7b:5d:f7:80:ce:62:
                    eb:66:cd:bf:7d:3d:4d:ec:89:7e:6e:35:64:e0:d2:
                    37:3e:67:97:c6:ae:19:d2:f4:25:7d:71:a8:23:5e:
                    3d:c0:ea:63:9b:bf:e7:9f:d3:62:60:23:54:80:e0:
                    d1:32:30:67:30:d9:cb:99:61:76:e9:03:27:71:f6:
                    9c:54:30:61:80:a8:58:46:4f:d3:40:2f:38:88:b2:
                    84:20:7c:dd:61:ec:0f:88:e2:e5:a9:b6:db:29:92:
                    55:d4:2b:18:c6:05:67:1e:9d:77:fa:aa:3d:11:48:
                    df:dd:6b:05:31:fc:11:12:2d:5f:c2:98:f5:b3:0c:
                    6c:35:9e:08:50:bf:a7:83:36:81:e2:98:ec:79:31:
                    94:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:74:18:B8:C3:34:23:DF:DC:0B:15:89:9D:DD:F5:8A:F6:47:EC:8A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_nQYuMM0I9_cCxWJnd31ivZH7Io.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:37:5c:a6:06:b6:9e:65:fa:e3:c7:0e:10:06:b8:ec:f5:60:
         a5:b1:22:54:0f:8c:3a:5d:76:f0:19:03:57:2e:20:64:9e:cf:
         52:c3:38:c8:ae:18:f7:59:04:72:85:c3:5d:3e:de:6c:84:5b:
         b6:59:0d:28:01:f7:e9:78:c5:22:69:f9:69:6d:ae:3f:62:77:
         80:95:d1:2d:3c:cf:fb:dd:14:fa:15:47:60:d4:67:52:80:c5:
         e8:5a:fb:dd:e1:f4:04:77:28:f5:e6:b0:0e:30:3f:dd:38:a1:
         96:33:61:04:3b:0a:c7:05:7a:ac:61:0e:ad:65:95:91:c5:5b:
         81:3b:11:57:15:50:a0:3c:a9:43:a3:ec:26:04:ae:84:96:2b:
         b4:5f:e4:f3:b7:30:3e:30:6b:ce:6f:3c:b8:0e:ec:f4:89:06:
         55:d2:f4:e9:e3:b0:b2:53:30:2a:60:f6:16:a3:13:ac:8f:6f:
         d4:11:79:ed:94:36:44:2b:00:97:7b:be:5c:79:b2:ff:35:b7:
         55:f3:e0:46:f8:28:0a:4d:0f:27:ec:86:3e:e7:e0:8b:e3:3c:
         1f:cf:e4:b9:7d:54:50:6a:d1:05:15:16:88:99:df:f7:5d:18:
         88:c9:7a:88:99:71:f3:6e:f4:b7:9a:54:fd:7f:3f:1e:fb:77:
         47:f4:66:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:50 2025 by rpki-client