Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cgllEgK2LGlACKUrp2m6G52ytZw.roa
File:                     cgllEgK2LGlACKUrp2m6G52ytZw.roa (raw, json)
Hash identifier:          dqcbRv9DZ9zcjtMefQHAagtI4tG64YxD7cvMXuOUuqU=
Subject key identifier:   72:09:65:12:02:B6:2C:69:40:08:A5:2B:A7:69:BA:1B:9D:B2:B5:9C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       25C8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cgllEgK2LGlACKUrp2m6G52ytZw.roa
Signing time:             Fri 22 Aug 2025 08:42:14 +0000
ROA not before:           Fri 22 Aug 2025 08:42:14 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        180.218.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9672 (0x25c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:14 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=7209651202B62C694008A52BA769BA1B9DB2B59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:83:bc:14:82:b7:9a:d0:41:f6:d3:56:9e:49:
                    41:be:25:69:b9:da:ef:31:9f:f1:df:1c:0f:d9:b6:
                    a5:9d:f2:d1:28:08:23:f1:ba:06:bd:c2:2c:d5:95:
                    bf:94:5a:3d:39:97:ee:9e:44:67:3d:84:54:d9:5c:
                    f1:09:c8:2a:d9:7a:df:45:21:82:1f:02:dd:30:38:
                    ea:71:f3:27:d7:16:c2:f9:37:47:be:e5:fe:22:cd:
                    81:9c:fd:b0:66:73:dd:3f:40:c0:57:6f:00:19:bc:
                    70:96:90:76:4e:03:7a:38:bb:05:f7:1e:08:a4:10:
                    32:93:9f:c0:6d:b3:5f:c9:c8:20:e7:91:8e:1b:50:
                    2d:88:15:90:8f:90:4b:f1:23:dd:b7:8e:3c:83:a2:
                    f4:48:40:2b:18:45:aa:4d:52:dd:3f:f9:17:7f:84:
                    f7:74:d8:22:db:52:4d:d9:b6:de:2a:84:00:5e:b3:
                    46:16:d0:e6:d0:22:0b:68:cc:2b:80:d9:a0:3d:8b:
                    49:1f:fb:cf:98:f8:46:b6:5a:c1:14:fc:fd:3f:ae:
                    51:78:08:0d:0f:d9:6f:6d:0d:7d:32:43:8d:30:7a:
                    2b:95:f0:25:56:e7:b7:b3:44:74:0a:da:ad:a7:dd:
                    a2:69:3e:d5:e8:40:af:1b:44:f7:da:e6:76:ab:cf:
                    d2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:09:65:12:02:B6:2C:69:40:08:A5:2B:A7:69:BA:1B:9D:B2:B5:9C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cgllEgK2LGlACKUrp2m6G52ytZw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:a3:0d:90:4f:19:80:38:cf:ee:30:f9:ec:76:43:23:bd:ee:
         48:05:03:4d:55:f5:7b:4d:4c:49:d3:53:4d:1f:38:9b:57:64:
         0a:e8:c9:ca:8a:eb:63:3a:83:8a:00:2b:b6:e2:0b:ca:f4:41:
         24:1d:52:cd:ec:cb:98:d9:2d:dd:5b:8c:4f:9c:b0:b2:ee:87:
         36:d8:cb:aa:58:df:3d:2a:59:b3:c4:11:b5:03:3d:1e:6f:89:
         52:02:64:34:d8:2a:35:37:75:52:08:76:34:6a:c9:20:0f:66:
         0c:f5:39:96:78:60:1d:14:94:79:be:ef:89:3e:eb:03:78:0f:
         18:6c:49:ef:8a:62:39:a8:ea:69:81:eb:45:1b:29:37:0a:a1:
         25:6f:97:42:c3:e1:12:fa:6a:4f:a2:5e:7b:38:4f:11:27:ec:
         8c:82:19:17:6c:27:32:d0:8b:66:4d:f2:3b:fb:cd:9d:bc:5b:
         e1:9d:ff:e7:6d:f8:a6:9f:62:99:d2:f2:74:e1:57:f2:4f:6b:
         c4:f7:e8:8e:27:70:79:81:f1:96:b0:c5:d4:cc:d6:80:58:83:
         55:94:6a:e3:a6:7f:fb:3a:b6:19:df:36:4a:43:2b:78:cb:30:
         33:8d:c1:ca:fe:4b:3e:21:a1:e8:b0:84:49:6d:f4:96:55:0f:
         18:63:d9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:42:27 2025 by rpki-client