Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mG8zNHUfVk4YKNi-kGQkJMehgh0.roa
File:                     mG8zNHUfVk4YKNi-kGQkJMehgh0.roa (raw, json)
Hash identifier:          N7nzV29X8L6vEjddDW9F7EaWg39maMZ/iLzosZ4W59A=
Subject key identifier:   98:6F:33:34:75:1F:56:4E:18:28:D8:BE:90:64:24:24:C7:A1:82:1D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2623
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mG8zNHUfVk4YKNi-kGQkJMehgh0.roa
Signing time:             Fri 22 Aug 2025 08:42:37 +0000
ROA not before:           Fri 22 Aug 2025 08:42:37 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        49.158.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9763 (0x2623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:37 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=986F3334751F564E1828D8BE90642424C7A1821D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:10:fd:13:15:67:bf:d2:b7:94:ac:25:86:
                    04:70:4e:4e:92:63:32:42:40:f5:0a:d6:5d:86:47:
                    58:d6:f0:ed:24:5d:b5:d2:4d:0d:fc:3e:02:f7:78:
                    da:f0:be:3d:f5:65:d7:9e:bb:53:75:1e:6f:6f:55:
                    df:d9:65:a9:5a:df:f4:21:c1:d5:64:8d:11:57:69:
                    b6:c0:84:c5:9a:3b:aa:7e:0a:66:19:e2:ff:ef:81:
                    28:21:a9:3b:e4:9d:c3:c8:f7:74:a1:51:04:07:02:
                    7c:71:b8:70:06:47:e5:3e:9f:26:e9:f2:be:71:20:
                    db:1f:2e:12:0f:e0:85:d2:a6:5a:18:c1:80:37:7b:
                    9f:46:41:d6:83:63:12:8a:83:48:35:3d:42:c1:fb:
                    0a:5c:d5:ed:ab:71:2a:91:38:87:34:68:3e:a2:76:
                    5d:4d:ff:ec:9f:09:d6:20:4c:27:da:cb:61:a0:9f:
                    7b:ce:87:f0:6e:29:e5:50:18:5d:0a:61:d4:02:9d:
                    77:1f:b0:53:41:e1:a3:71:37:13:5d:e5:16:6b:9d:
                    d2:fa:f9:9a:85:84:33:aa:ff:b5:86:c5:92:ad:4a:
                    d0:00:40:93:e1:57:cd:dc:57:bc:12:c3:54:14:54:
                    26:5a:45:94:77:f1:a1:1b:d9:98:a8:ec:eb:78:a6:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6F:33:34:75:1F:56:4E:18:28:D8:BE:90:64:24:24:C7:A1:82:1D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mG8zNHUfVk4YKNi-kGQkJMehgh0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:58:ab:af:e5:bc:94:2a:b0:5b:8f:49:eb:6d:9b:d7:0e:94:
         9b:b9:f2:84:c1:77:f1:75:16:69:1e:b7:ad:0e:fb:66:30:b8:
         b5:fc:6e:13:68:68:9e:c1:74:8c:b5:d4:42:e1:7c:ce:7c:6a:
         ad:7d:c8:78:70:c2:cf:a3:b1:fa:f6:57:a7:e3:0e:7c:6f:3e:
         65:69:85:99:2a:35:ed:5a:46:e5:6f:46:36:8e:e0:59:6d:01:
         4e:7c:aa:19:27:f8:b3:4d:18:e5:f0:42:f5:54:01:08:b2:fa:
         c6:2f:71:73:33:34:29:60:a4:ec:be:e4:02:00:5f:f9:ab:72:
         78:94:04:98:c1:02:34:06:19:6f:78:0b:a5:4b:d8:d2:f7:e8:
         41:3c:e2:ea:2c:37:c2:78:e0:a5:6d:d7:2b:96:c5:45:26:07:
         68:bc:ad:77:55:40:0e:b6:f7:28:60:4e:cf:d0:ed:2b:51:a5:
         e2:f6:06:4d:62:3e:e2:d9:ca:31:14:f4:bf:d2:fc:41:e6:db:
         a6:b5:c5:f6:80:cd:f9:a8:a5:2c:ec:86:0b:c8:ef:79:8b:8e:
         d6:79:d4:81:1b:ee:87:23:48:4a:11:47:3c:91:63:6d:44:b5:
         7a:48:18:9e:cd:f0:ca:63:3a:8b:33:44:b0:bd:f1:2b:e5:4f:
         60:b0:19:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:38:41 2025 by rpki-client