Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rAOYNBT8sgC4Czm0Dl-WN9FPCrg.roa
File:                     rAOYNBT8sgC4Czm0Dl-WN9FPCrg.roa (raw, json)
Hash identifier:          j9gij+4pZrLaiWL25WHGx+UQ0gNzj8vvr+rjPOeLNDg=
Subject key identifier:   AC:03:98:34:14:FC:B2:00:B8:0B:39:B4:0E:5F:96:37:D1:4F:0A:B8
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       26B6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rAOYNBT8sgC4Czm0Dl-WN9FPCrg.roa
Signing time:             Fri 22 Aug 2025 08:43:11 +0000
ROA not before:           Fri 22 Aug 2025 08:43:11 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24163
IP address blocks:        119.77.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9910 (0x26b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:11 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=AC03983414FCB200B80B39B40E5F9637D14F0AB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ca:42:7c:53:34:48:32:68:81:7a:ce:f4:33:
                    d3:cb:70:2c:15:0f:d7:ba:8a:81:84:83:dd:f1:e3:
                    28:a5:98:c5:3d:36:ea:b7:6e:d0:9c:18:17:0c:06:
                    44:42:d8:3e:d5:b5:f1:4e:81:e0:92:c3:56:69:56:
                    f2:0d:f1:ba:aa:c7:f6:a0:9b:a3:cc:7a:95:ee:0e:
                    02:fb:d9:46:6f:bf:bb:fc:c2:33:ec:99:ab:ef:ee:
                    32:6a:b0:d7:13:ce:bc:df:79:8c:04:0e:72:8d:b9:
                    76:21:87:bc:d1:ca:51:b4:7f:53:05:a0:df:95:a4:
                    da:ad:31:48:db:39:33:f9:83:24:ac:0c:74:7c:f9:
                    f3:cd:49:38:6b:df:fc:4b:75:d3:f4:dd:9e:46:4f:
                    71:0a:00:a7:3f:08:2a:47:cd:0c:85:ea:f1:60:d9:
                    e8:9d:0a:78:04:89:a3:85:04:8c:c5:dc:b3:d4:a7:
                    ec:b8:6c:b9:6e:2a:03:46:f9:d1:30:1f:83:d9:f9:
                    00:fa:f9:77:a8:1f:a5:1e:c0:e2:94:52:3f:20:af:
                    59:df:ca:00:98:20:2b:78:50:19:3d:7b:d4:36:36:
                    19:fd:df:08:6c:d5:5d:fc:c5:b0:74:6c:d2:a2:c8:
                    e7:e6:30:a2:49:ae:0e:1f:66:a2:34:ca:e4:3d:2f:
                    43:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:03:98:34:14:FC:B2:00:B8:0B:39:B4:0E:5F:96:37:D1:4F:0A:B8
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rAOYNBT8sgC4Czm0Dl-WN9FPCrg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:4f:ce:0a:e6:e8:a3:b4:44:b9:37:a0:c8:ef:9f:0e:a6:4c:
         78:e2:7b:38:66:fd:95:ea:56:59:d2:96:55:cb:80:be:9f:b5:
         41:0e:c8:4d:96:cf:63:c3:67:a5:80:2c:f4:a2:09:85:23:cd:
         90:39:67:a3:24:0c:87:05:f0:1d:8b:26:04:75:b1:4f:1a:3a:
         8b:06:47:c8:aa:ee:8b:26:d7:87:50:75:3e:8d:60:4c:ca:6d:
         ab:42:9f:92:ef:8d:54:f5:b1:2b:87:e9:fd:9a:c0:80:56:14:
         5e:d6:09:6e:4c:b6:ea:fc:62:4f:f4:8f:d5:16:50:f9:66:9a:
         39:6c:fb:8b:63:1a:31:c1:b5:78:05:1e:c6:ae:89:5b:f5:59:
         8c:ae:be:3c:52:ef:d1:bc:8a:05:ec:d2:02:c1:dd:bf:aa:90:
         a1:5b:59:b3:76:0c:41:31:ef:01:a0:4b:41:6f:4d:38:d7:82:
         ca:05:5c:79:96:e5:06:38:e3:5c:73:18:00:8f:2f:59:58:ad:
         fb:3a:13:99:ce:85:5e:7e:3e:9e:85:bb:77:29:17:0c:63:a1:
         96:14:39:d3:7f:83:a3:11:31:22:dc:98:80:f5:0f:d9:4f:42:
         6b:ee:6d:22:29:2d:3c:7b:20:31:47:b6:d8:dc:93:e8:fb:d8:
         8c:70:85:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:48 2025 by rpki-client