Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/coKp9pDa9PN53mxk2T8DRqN3Nus.roa
File:                     coKp9pDa9PN53mxk2T8DRqN3Nus.roa (raw, json)
Hash identifier:          PTwGaFagicXY224+7OinpB476w7Z256DofrD2RG62n0=
Subject key identifier:   72:82:A9:F6:90:DA:F4:F3:79:DE:6C:64:D9:3F:03:46:A3:77:36:EB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       25DB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/coKp9pDa9PN53mxk2T8DRqN3Nus.roa
Signing time:             Fri 22 Aug 2025 08:42:19 +0000
ROA not before:           Fri 22 Aug 2025 08:42:19 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24165
IP address blocks:        61.61.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9691 (0x25db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:19 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=7282A9F690DAF4F379DE6C64D93F0346A37736EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:0d:55:b1:37:5b:24:bf:30:e7:8f:d6:b3:
                    97:f2:7c:54:7b:88:4f:1b:d1:e9:cd:8c:f5:c8:54:
                    f9:88:7c:20:4c:16:f3:d4:02:41:36:fc:13:7f:1c:
                    2e:78:c6:b5:ce:7d:4c:05:88:e7:a5:c4:8d:c9:33:
                    77:41:57:d5:c9:58:aa:a3:6d:75:2e:bb:fd:15:fa:
                    6e:a8:39:91:85:03:e2:8b:da:5b:9c:8c:00:54:f1:
                    b9:64:ee:15:e8:04:d2:c1:8b:9c:2d:39:9c:83:71:
                    16:05:93:85:6d:fb:04:a2:1d:50:86:32:dd:7c:25:
                    d1:e4:8d:be:73:9d:91:06:31:4c:0d:20:84:34:52:
                    0c:8e:43:8e:09:16:8b:fa:dc:98:13:ab:37:c1:6c:
                    97:30:c5:ef:fa:c4:a3:81:4d:75:45:90:e2:7b:e8:
                    93:7f:c1:cb:1f:8d:79:37:fd:d5:96:da:8b:ee:93:
                    fa:eb:82:16:d7:8b:8b:05:df:6d:54:85:6d:67:08:
                    42:a2:2d:38:33:7c:2d:84:7f:78:29:4f:74:c7:15:
                    4f:7a:eb:69:33:a1:95:c3:f9:3b:4f:d8:5d:d6:79:
                    e1:4a:df:42:5c:49:4e:0d:9a:83:53:1d:2c:1d:40:
                    2d:a5:6c:e6:a0:69:59:ef:33:b0:07:cd:18:59:bc:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:82:A9:F6:90:DA:F4:F3:79:DE:6C:64:D9:3F:03:46:A3:77:36:EB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/coKp9pDa9PN53mxk2T8DRqN3Nus.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:a4:f2:aa:5f:94:26:9b:65:c8:9f:48:24:b6:aa:1d:2f:3c:
         76:5f:6a:00:16:1c:f5:82:cf:41:0d:11:cb:60:05:d1:3a:93:
         95:7a:b5:d1:6a:37:5e:3e:55:ab:0b:f3:8c:a6:01:c1:8a:8e:
         74:19:57:fc:7c:3c:44:21:99:1d:72:5b:81:4b:b7:83:18:cc:
         57:4b:ba:a7:43:76:e7:68:ca:64:f0:b7:c3:19:bd:90:01:34:
         ff:fc:52:4f:ba:e8:dc:48:7a:90:f9:56:24:04:fc:3c:20:df:
         6f:fc:9a:06:cb:f4:83:ea:b3:1a:09:59:e5:41:74:4c:08:e7:
         90:5c:a3:55:68:2c:65:61:7f:64:78:3a:1e:f0:6e:79:a5:33:
         20:57:f2:84:31:77:fe:31:91:69:11:41:c1:71:2c:e6:59:a3:
         21:b2:9a:34:19:2b:b0:d1:37:37:0c:ba:4e:de:95:14:c5:3a:
         d0:09:02:11:03:3c:1c:d2:4b:06:e9:e4:4c:8e:5b:eb:87:ac:
         e6:82:31:be:87:8b:e8:03:b7:94:46:76:87:f9:fd:7c:5e:0a:
         6d:2a:84:78:30:68:86:c7:80:c8:99:5e:0c:d1:6d:f1:9c:e0:
         9f:e2:f6:00:a4:73:d2:82:f4:c9:9c:89:57:06:01:8c:29:63:
         e7:cb:c5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:38:40 2025 by rpki-client