Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jo093pEA6ZhGqU_9MVUEnvLyP0Q.roa
File:                     jo093pEA6ZhGqU_9MVUEnvLyP0Q.roa (raw, json)
Hash identifier:          zB93R3qvcyMKr8I86O4xqtHTnFNJ5B323gGtQo//z1U=
Subject key identifier:   8E:8D:3D:DE:91:00:E9:98:46:A9:4F:FD:31:55:04:9E:F2:F2:3F:44
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       262D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jo093pEA6ZhGqU_9MVUEnvLyP0Q.roa
Signing time:             Fri 22 Aug 2025 08:42:40 +0000
ROA not before:           Fri 22 Aug 2025 08:42:40 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        180.218.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9773 (0x262d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:40 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8E8D3DDE9100E99846A94FFD3155049EF2F23F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f9:33:d6:f5:b5:75:22:75:47:f5:8a:0a:7e:
                    72:39:65:61:ea:e8:96:8f:b4:e1:73:73:c4:14:8a:
                    61:e2:9d:c8:a9:79:9d:2e:0d:a9:08:19:04:e7:77:
                    6e:b9:ff:3f:19:92:7e:eb:8d:42:1c:34:3b:72:bd:
                    27:b2:3b:ad:f9:bf:f5:e7:01:02:42:c5:7c:25:1b:
                    4e:15:1f:1e:0d:81:c7:93:11:6a:59:fd:b8:1b:65:
                    b0:9a:30:6d:79:a5:f2:52:ee:1b:2e:3a:71:88:04:
                    56:2f:19:83:bb:89:e7:20:79:7d:50:9f:55:0a:56:
                    f1:f0:e6:35:fd:aa:7b:86:1e:3e:50:66:95:41:92:
                    31:a5:34:b8:93:be:6c:dd:9c:ff:ee:f1:2d:5d:15:
                    82:b5:5b:50:a0:89:18:3b:a7:6e:e4:40:4b:3b:3c:
                    c7:a4:da:07:9f:87:6b:b5:b0:68:34:97:98:46:e1:
                    a6:66:02:f6:8a:e0:03:eb:75:b6:c4:7c:84:bd:41:
                    57:73:45:a7:18:a4:01:b1:b1:f0:c9:54:ba:ce:cc:
                    5a:13:b2:01:6e:4c:e0:ff:d9:aa:09:1d:b0:c4:99:
                    6f:67:71:ef:d8:58:43:e6:cb:47:a6:2e:30:12:35:
                    bf:26:b3:7a:d7:e5:e3:c8:7b:9c:66:bc:38:08:70:
                    fb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8D:3D:DE:91:00:E9:98:46:A9:4F:FD:31:55:04:9E:F2:F2:3F:44
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jo093pEA6ZhGqU_9MVUEnvLyP0Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:c3:0e:d4:30:3a:75:58:19:03:18:5b:38:fc:1f:a8:13:67:
         5f:57:b9:05:c2:eb:fb:a7:b1:cf:a8:e4:41:4f:05:94:2c:2c:
         ea:33:d8:5e:bb:42:84:66:97:25:a1:31:43:b6:b1:e8:32:24:
         c3:bc:7c:68:41:f4:d0:73:a4:f3:8f:14:2d:b4:8e:1d:81:f9:
         a9:b7:40:0b:7f:bd:18:09:ea:99:17:88:15:f7:ce:8e:e9:e8:
         f4:20:42:de:08:62:f1:41:fc:16:20:61:02:a9:d0:70:59:a1:
         cc:12:fe:b6:35:10:fc:b6:f1:6d:33:20:85:a5:24:b7:1c:c0:
         af:4f:e2:a3:76:53:19:2c:cd:c2:d0:ae:11:14:a0:6f:37:03:
         8c:f3:16:ab:23:e0:5a:84:e9:a6:79:15:10:e4:86:83:d8:06:
         18:b4:02:39:80:f4:b9:a3:98:1d:7b:2b:c5:5b:02:df:7e:49:
         12:97:80:4c:cb:ae:09:7e:b1:ed:2c:f0:5a:5f:03:e2:dc:0b:
         88:b4:ef:ea:e9:4c:50:48:e7:fd:5e:80:0d:72:1b:b7:93:b8:
         b5:2d:ac:38:16:3b:45:73:e4:7a:96:ef:e8:f1:de:97:e7:25:
         d3:c2:9a:fb:c3:5f:d0:6f:47:87:79:f3:b4:6c:5d:4e:3e:47:
         10:af:f1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:38:33 2025 by rpki-client