Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dTwYpNgtazhjosjyPDA6fUymQy8.roa
File:                     dTwYpNgtazhjosjyPDA6fUymQy8.roa (raw, json)
Hash identifier:          6fT/MDlRa0PoS5l835EU5keVZxRLnTL2Y9VZCCYCp3c=
Subject key identifier:   75:3C:18:A4:D8:2D:6B:38:63:A2:C8:F2:3C:30:3A:7D:4C:A6:43:2F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       25EB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dTwYpNgtazhjosjyPDA6fUymQy8.roa
Signing time:             Fri 22 Aug 2025 08:42:23 +0000
ROA not before:           Fri 22 Aug 2025 08:42:23 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        123.0.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9707 (0x25eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:23 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=753C18A4D82D6B3863A2C8F23C303A7D4CA6432F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e6:09:87:e1:ee:b3:64:3b:d1:9e:6c:4e:bf:
                    c6:c2:9f:f1:62:76:e9:83:9b:c8:4f:a8:17:04:95:
                    ff:d9:22:77:03:59:20:b0:24:a5:b3:5a:08:fb:65:
                    55:e5:20:72:ae:89:8a:8f:26:f0:05:10:06:83:dc:
                    c9:80:24:0c:3c:35:b6:3d:d2:0d:0f:86:23:96:f2:
                    52:58:fd:81:d7:5d:a0:8e:39:b5:3a:52:df:e3:60:
                    84:cd:d9:fb:20:d5:d6:45:09:57:a7:18:c5:78:7a:
                    7a:61:a7:4e:f6:b6:68:60:8d:48:1e:e6:33:8e:fd:
                    2f:26:6c:a8:cf:43:26:dd:96:6b:7c:ee:1c:00:96:
                    28:bb:b6:7b:ab:60:b1:7f:3d:57:19:fa:91:db:f8:
                    60:f9:ac:70:25:21:c7:94:97:79:05:76:f7:03:ba:
                    11:97:ab:d0:fc:3d:0f:19:17:b3:a8:b9:d0:92:1c:
                    c1:3e:a9:ff:1e:22:7b:fe:dd:1d:ec:09:79:16:27:
                    de:59:e6:a1:ab:4e:83:78:75:a7:07:0e:43:e9:76:
                    6f:ba:3a:75:82:ae:a0:8b:47:a8:23:0b:78:37:18:
                    6c:67:43:de:9e:78:a4:a2:34:46:53:5e:28:db:5b:
                    5e:b3:f1:5e:f8:6a:1f:64:94:bd:29:22:f4:cb:c7:
                    67:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3C:18:A4:D8:2D:6B:38:63:A2:C8:F2:3C:30:3A:7D:4C:A6:43:2F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dTwYpNgtazhjosjyPDA6fUymQy8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:0e:f0:98:19:b8:f6:fa:f0:ac:96:d4:15:42:60:29:e2:3f:
         d1:5e:8f:8a:23:64:ab:24:91:56:ea:b7:7e:6b:97:4a:1d:2c:
         db:1c:4c:1c:e0:da:df:10:e8:dc:88:9c:e1:22:5a:25:df:a3:
         57:55:97:e5:f2:3d:2f:46:03:fb:c8:39:11:0a:ea:f6:87:4f:
         22:ca:11:98:f9:c1:80:8d:05:fd:3c:88:88:0a:ef:19:11:fe:
         c3:c2:4c:2b:53:3a:fb:aa:67:2d:72:6f:5c:c9:85:a2:5f:51:
         5d:a4:df:ab:6b:c8:56:44:b3:21:ab:eb:76:59:9f:98:c7:48:
         48:44:fb:c0:ef:b3:8a:fe:8e:26:2c:9b:c5:d5:cc:04:5c:73:
         4b:f9:52:9d:92:b3:e2:5c:68:37:58:11:8e:20:21:19:5e:a4:
         60:39:db:33:34:fb:df:be:c1:d3:51:58:a1:a1:36:0d:62:54:
         9f:dd:77:b7:4b:cc:1d:0f:24:44:47:9f:3d:09:fd:5a:f7:95:
         a9:51:82:d5:c5:55:c2:9b:8c:b5:38:0a:73:64:a9:27:f3:78:
         91:92:24:26:e3:46:92:08:a7:82:18:44:44:a4:ad:45:ec:20:
         07:e2:15:87:6d:d2:24:82:c5:58:50:80:2d:99:9d:ca:41:48:
         45:6f:11:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:39 2025 by rpki-client