Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jhjM5ll_CpJJKO65mivmVcfpjds.roa
File:                     jhjM5ll_CpJJKO65mivmVcfpjds.roa (raw, json)
Hash identifier:          3pcgWIsoXK9TINXSYF8vEV+MKc1CW6/LgoHDFBd2634=
Subject key identifier:   8E:18:CC:E6:59:7F:0A:92:49:28:EE:B9:9A:2B:E6:55:C7:E9:8D:DB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       266F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jhjM5ll_CpJJKO65mivmVcfpjds.roa
Signing time:             Fri 22 Aug 2025 08:42:55 +0000
ROA not before:           Fri 22 Aug 2025 08:42:55 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        211.76.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9839 (0x266f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:55 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8E18CCE6597F0A924928EEB99A2BE655C7E98DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:bf:6f:a1:fe:28:bc:5d:4e:83:e1:b4:9e:
                    fb:c7:09:38:d8:f0:95:07:f8:40:eb:7a:68:d7:10:
                    6d:29:b4:80:20:f4:dc:44:a5:9e:72:88:58:07:b4:
                    b0:c2:91:1b:c3:ca:a0:14:f2:e6:f0:a5:23:1a:da:
                    0e:1c:8e:f1:fa:2f:3a:68:eb:b4:a9:26:b5:46:3b:
                    1e:34:c4:f6:e2:21:6a:1a:2c:97:73:0c:6d:f9:85:
                    e4:1c:37:d0:e3:ac:69:5a:3b:76:3b:68:5e:66:1d:
                    49:02:3b:66:76:94:ee:60:73:a9:33:77:5d:59:30:
                    2f:f2:87:d4:ba:f6:9c:da:65:7c:ba:1f:4c:78:5f:
                    d2:1a:dd:47:8f:32:8d:db:13:35:a1:46:f8:e5:6a:
                    1d:1a:eb:b3:69:9a:bb:9b:8f:eb:25:f0:b1:70:3a:
                    f3:10:93:b8:70:ca:e2:7a:f9:c5:31:3a:39:04:09:
                    bb:fc:ab:75:39:1a:64:ad:bb:08:3b:ba:f5:6a:19:
                    d3:9c:55:6f:91:f0:c2:03:f6:ee:8a:6b:fc:17:ce:
                    da:93:29:58:49:59:5e:f2:4a:9e:e1:fc:d0:36:05:
                    8f:8b:28:53:c5:57:b4:16:4a:c5:d0:54:89:5b:ee:
                    d0:44:5d:47:ca:77:12:36:30:5d:12:1e:41:ee:b4:
                    f9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:18:CC:E6:59:7F:0A:92:49:28:EE:B9:9A:2B:E6:55:C7:E9:8D:DB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jhjM5ll_CpJJKO65mivmVcfpjds.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:9c:1e:c7:28:2a:76:f1:11:65:8e:e3:9c:1d:3c:41:00:ea:
         11:b0:7e:5f:a7:78:04:b0:56:57:5f:d3:1f:35:79:98:37:21:
         17:ef:8d:38:45:79:60:2d:ac:bb:20:7a:9c:86:a0:ab:18:5e:
         2e:db:8e:e1:32:a0:f9:ab:a5:36:8c:de:6d:c0:29:4b:cd:a9:
         e3:9f:c8:1f:68:6a:22:bb:b7:b1:dc:ea:2f:87:75:14:2e:c6:
         45:67:06:80:70:86:6c:b0:ee:1c:18:fb:4f:ab:b7:01:f6:82:
         94:ee:a3:fa:06:cc:d6:05:c5:e0:0e:2a:cc:1a:39:8a:d6:b3:
         32:4b:50:05:be:e1:83:ed:7d:ef:f7:d1:5e:b6:76:ed:73:7f:
         84:ca:73:73:94:b6:e5:32:43:68:bd:62:fd:b6:94:34:70:52:
         f4:75:65:e9:a0:93:0f:18:73:31:ea:98:63:4b:26:ed:cc:87:
         79:b9:3e:95:de:fc:46:c8:d5:b1:31:0c:9f:86:7a:30:0b:db:
         32:9b:f4:b6:3d:2a:aa:04:55:86:a5:ee:71:b4:ba:84:40:c1:
         7a:d0:3c:4e:07:f7:54:91:b4:f9:b6:45:1a:f2:4c:5b:53:bb:
         8e:51:23:8c:39:77:3a:de:fc:d3:85:2a:81:46:34:38:80:68:
         4d:76:16:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:40:36 2025 by rpki-client