Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k1Pao_6ct8UrIunbjVJwHoM2ws4.roa
File:                     k1Pao_6ct8UrIunbjVJwHoM2ws4.roa (raw, json)
Hash identifier:          ylYQ2GJYDdpGN/4R++q+WgVrK+htgwl7t34KMSsRzoI=
Subject key identifier:   93:53:DA:A3:FE:9C:B7:C5:2B:22:E9:DB:8D:52:70:1E:83:36:C2:CE
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       263F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k1Pao_6ct8UrIunbjVJwHoM2ws4.roa
Signing time:             Fri 22 Aug 2025 08:42:44 +0000
ROA not before:           Fri 22 Aug 2025 08:42:44 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        180.218.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9791 (0x263f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:44 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=9353DAA3FE9CB7C52B22E9DB8D52701E8336C2CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9a:36:df:d6:71:9c:90:d8:be:1b:91:73:88:
                    84:82:ca:c7:b3:78:0c:35:ca:3b:1e:fb:3f:0f:d1:
                    b0:b5:10:87:c7:31:a7:5b:20:f3:92:12:5f:ae:6e:
                    fd:21:9a:f4:b1:f1:65:f3:dd:e4:3b:57:1c:de:8a:
                    73:f7:80:07:f7:8d:5d:1b:a0:cd:92:4a:9b:65:53:
                    fa:35:df:7a:d5:97:3b:c3:f4:3f:84:0c:2c:fd:05:
                    a7:46:32:45:8c:04:46:be:06:2f:7d:81:93:ea:cd:
                    65:3a:f2:e7:05:24:10:b6:f4:f5:02:e1:60:a0:82:
                    4f:68:71:29:f1:e7:bb:4d:c8:88:21:ab:e5:7e:0d:
                    6f:6e:a9:af:48:6a:3c:37:e6:4c:b7:14:10:b3:16:
                    a8:ee:f7:1a:11:39:d6:6f:cf:2f:75:59:e8:0f:2f:
                    06:97:bb:a7:ca:32:b3:9d:de:66:c0:5f:d3:dd:ef:
                    bc:40:20:5c:75:96:f0:17:6d:09:2e:da:7a:cc:b1:
                    7f:57:5c:ba:2b:42:0f:28:ca:5a:6b:d0:5c:26:e1:
                    ba:f1:a1:94:e5:f5:4d:0b:c8:fc:5a:4e:c7:dd:1d:
                    ee:63:74:61:09:5b:73:a4:86:9d:3f:ad:dd:1a:66:
                    55:d2:8c:5b:3a:07:d8:73:de:2e:e2:68:8f:ee:23:
                    04:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:53:DA:A3:FE:9C:B7:C5:2B:22:E9:DB:8D:52:70:1E:83:36:C2:CE
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k1Pao_6ct8UrIunbjVJwHoM2ws4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:ef:d6:20:20:e0:8d:6f:ae:b3:73:5a:0b:f2:96:ea:65:f8:
         18:e5:3c:82:b0:bd:1e:11:53:c5:1f:c5:5a:76:48:ce:19:30:
         a1:9a:40:62:2e:0d:99:fb:db:1e:4a:72:81:87:7a:36:b0:b3:
         db:84:5e:60:f5:af:ba:39:aa:57:c3:39:78:46:e1:ba:c5:66:
         64:53:62:2c:d3:07:30:6d:e3:1a:a3:b5:97:a3:08:76:d3:2b:
         30:fd:9b:12:6b:f2:1a:f6:e3:18:c3:38:69:fd:68:ce:5c:74:
         41:87:1b:53:43:95:f5:77:b7:5b:ff:bf:6d:ca:77:b2:0c:eb:
         fc:3b:11:c3:70:c4:7d:d3:d7:26:cb:94:80:79:a6:46:2d:b0:
         df:df:3c:d4:69:81:4d:5b:47:82:c8:82:47:54:20:a6:2f:26:
         53:9c:27:6f:59:e5:93:81:9b:7a:56:1d:90:a9:5e:3d:e4:41:
         bb:a3:ff:02:85:e7:98:0c:82:96:0d:3f:58:b0:56:a5:a6:c7:
         4b:36:5d:9e:5f:ef:89:12:8e:94:f9:8b:88:4e:60:2f:f1:9d:
         ad:9f:e4:1c:37:4f:66:34:e5:dd:85:5f:b1:4a:e5:09:36:88:
         c3:74:36:0e:40:15:c2:80:27:6b:0e:da:cd:56:da:66:5b:52:
         44:6a:d3:6c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJj8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw
ODQyNDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkzNTNEQUEzRkU5Q0I3
QzUyQjIyRTlEQjhENTI3MDFFODMzNkMyQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUmjbf1nGckNi+G5FziISCysezeAw1yjse+z8P0bC1EIfHMadb
IPOSEl+ubv0hmvSx8WXz3eQ7VxzeinP3gAf3jV0boM2SSptlU/o133rVlzvD9D+E
DCz9BadGMkWMBEa+Bi99gZPqzWU68ucFJBC29PUC4WCggk9ocSnx57tNyIghq+V+
DW9uqa9Iajw35ky3FBCzFqju9xoROdZvzy91WegPLwaXu6fKMrOd3mbAX9Pd77xA
IFx1lvAXbQku2nrMsX9XXLorQg8oylpr0Fwm4brxoZTl9U0LyPxaTsfdHe5jdGEJ
W3Okhp0/rd0aZlXSjFs6B9hz3i7iaI/uIwRBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUk1Pao/6ct8UrIunbjVJwHoM2ws4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2sxUGFvXzZjdDhVckl1bmJq
Vkp3SG9NMndzNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2oUwDQYJKoZIhvcNAQELBQADggEBAJbv1iAg4I1vrrNzWgvylupl+BjlPIKwvR4R
U8UfxVp2SM4ZMKGaQGIuDZn72x5KcoGHejaws9uEXmD1r7o5qlfDOXhG4brFZmRT
YizTBzBt4xqjtZejCHbTKzD9mxJr8hr24xjDOGn9aM5cdEGHG1NDlfV3t1v/v23K
d7IM6/w7EcNwxH3T1ybLlIB5pkYtsN/fPNRpgU1bR4LIgkdUIKYvJlOcJ29Z5ZOB
m3pWHZCpXj3kQbuj/wKF55gMgpYNP1iwVqWmx0s2XZ5f74kSjpT5i4hOYC/xna2f
5Bw3T2Y05d2FX7FK5Qk2iMN0Ng5AFcKAJ2sO2s1W2mZbUkRq02w=
-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:36 2025 by rpki-client