Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/phrKqip4vF9ys40sYg7b3jzL0IA.roa
File:                     phrKqip4vF9ys40sYg7b3jzL0IA.roa (raw, json)
Hash identifier:          AMWw6yei4p8mKC6XgO0HeLjMRJX/JG2noDDiISR6ffo=
Subject key identifier:   A6:1A:CA:AA:2A:78:BC:5F:72:B3:8D:2C:62:0E:DB:DE:3C:CB:D0:80
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       264B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/phrKqip4vF9ys40sYg7b3jzL0IA.roa
Signing time:             Fri 22 Aug 2025 08:42:47 +0000
ROA not before:           Fri 22 Aug 2025 08:42:47 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        180.218.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9803 (0x264b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:47 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=A61ACAAA2A78BC5F72B38D2C620EDBDE3CCBD080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7f:44:cd:76:1b:8e:a2:e0:97:f6:94:60:c4:
                    8e:07:88:f6:e7:23:42:ba:e4:ea:b0:c2:72:a6:2b:
                    d6:ed:2d:b5:2b:26:f8:d7:9d:c1:04:1f:24:53:39:
                    cc:71:26:dd:d6:8c:d1:28:d7:22:ae:7c:a8:a2:a4:
                    48:0b:a5:f5:e4:3f:4a:0d:c9:04:21:5e:7b:28:31:
                    ca:0c:cb:ee:be:9b:a9:c7:86:c1:38:69:db:d3:25:
                    9e:d2:7d:1c:bc:ba:94:b9:16:8e:fa:90:ec:b1:cf:
                    d0:11:7b:dd:8a:a6:98:ae:d9:7a:a7:be:66:df:cc:
                    57:9b:53:88:95:61:bf:30:16:46:4a:d0:2f:90:d3:
                    6c:06:fe:9e:70:44:06:81:7e:87:d8:89:89:37:d3:
                    f6:64:c9:c6:22:23:eb:c6:44:f4:16:e5:08:db:b2:
                    18:4e:07:66:d3:84:bc:6e:4f:3e:0d:e7:5a:89:7b:
                    97:92:30:82:ba:0b:f8:49:67:ee:b6:da:74:d0:4d:
                    48:bc:67:02:88:25:2c:f7:c9:4d:98:eb:d9:55:71:
                    74:f4:31:f2:4a:fc:06:d7:54:9a:38:18:63:9a:00:
                    cd:00:27:74:5c:d6:1a:86:8f:4b:69:f3:d7:02:d6:
                    88:2c:09:d7:46:58:64:f7:2d:00:8c:07:c2:3c:e4:
                    83:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1A:CA:AA:2A:78:BC:5F:72:B3:8D:2C:62:0E:DB:DE:3C:CB:D0:80
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/phrKqip4vF9ys40sYg7b3jzL0IA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:94:65:03:28:78:07:6e:d3:3b:25:8c:cf:95:16:80:a2:81:
         82:8b:85:2d:1d:a5:54:b8:33:38:06:1c:1e:13:89:e6:d0:06:
         63:5c:9b:e2:ef:a2:5c:c1:8d:b1:2d:93:b3:7c:c7:97:4f:22:
         d8:d5:96:00:6c:b3:14:45:b4:ff:8c:f8:c5:b5:32:b1:4b:f1:
         3b:d3:ce:76:2c:1c:68:77:84:22:03:0d:79:23:20:d2:67:5a:
         cc:91:69:8a:cf:6b:58:38:7c:7d:29:59:8e:24:82:29:1d:43:
         a5:15:31:30:be:e3:91:64:f5:ad:0b:16:10:91:9a:f3:ef:6f:
         3a:39:a5:f2:a6:be:1b:c0:7a:ab:26:cf:12:20:13:e0:b3:36:
         bd:0a:60:9e:e3:b2:10:67:2d:c3:dd:f1:4c:31:f7:26:fc:31:
         15:dc:f0:58:af:19:12:f4:53:38:fd:7c:03:26:e3:95:cf:e6:
         03:b6:9d:43:c2:0d:b3:09:b7:0c:63:1b:c4:52:bd:09:82:6b:
         50:70:9c:b7:6d:30:e7:9f:dc:6d:df:e8:67:9c:7a:25:f0:03:
         d1:3e:d9:02:79:13:86:ca:5c:12:f8:13:e2:89:1a:07:12:5e:
         25:24:fb:b2:36:c1:ef:66:9c:3f:1d:ce:a9:80:a5:c7:56:2a:
         38:e6:20:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:39:27 2025 by rpki-client