Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rwsgpkXSexTyOazNVfvBS8qjsnw.roa
File:                     rwsgpkXSexTyOazNVfvBS8qjsnw.roa (raw, json)
Hash identifier:          AuIBzHkGC9vPfvIU9+LunTLRVKVjhTyrf/UqprFcYc8=
Subject key identifier:   AF:0B:20:A6:45:D2:7B:14:F2:39:AC:CD:55:FB:C1:4B:CA:A3:B2:7C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2614
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rwsgpkXSexTyOazNVfvBS8qjsnw.roa
Signing time:             Fri 22 Aug 2025 08:42:33 +0000
ROA not before:           Fri 22 Aug 2025 08:42:33 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        124.6.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9748 (0x2614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:33 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=AF0B20A645D27B14F239ACCD55FBC14BCAA3B27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:54:38:9a:46:5f:63:70:35:77:45:1a:d7:ba:
                    fb:dc:1d:4c:0e:f8:81:0e:97:28:68:b7:43:11:6e:
                    47:5e:47:e8:20:4e:28:a0:00:61:a8:e5:e3:c5:63:
                    f6:5c:69:fd:ed:68:e4:3d:85:ae:2c:85:3f:9a:bc:
                    58:5a:f6:50:e2:7a:d3:5f:ed:e5:e8:7f:18:7e:f6:
                    d7:40:1c:b3:80:74:34:5d:0c:29:6d:87:af:ca:34:
                    7e:c2:8c:2d:74:cb:85:59:bd:37:00:45:bb:87:67:
                    e1:8e:bd:23:6d:db:3b:dd:c7:09:94:1e:d9:72:6c:
                    70:3b:93:ed:68:d9:c6:47:5a:a5:f8:ba:af:30:fc:
                    81:25:5c:c1:82:a9:5f:94:5a:68:2b:06:22:fe:06:
                    05:b9:5a:2c:49:43:1a:a8:95:71:07:a8:1b:fd:51:
                    13:9a:80:d0:4a:5b:78:44:77:3e:7b:e0:ea:a9:ac:
                    67:2d:f7:39:17:aa:25:22:18:ad:e7:a4:0c:00:db:
                    3f:69:4f:a4:11:91:5e:94:7e:da:52:fb:e8:74:6b:
                    1e:6c:4f:21:e8:a7:ab:d7:c4:81:42:bf:e5:8b:eb:
                    7f:db:f6:57:59:61:d8:46:12:d1:d2:71:9a:b9:6a:
                    f7:c0:f7:88:2e:7d:24:83:0b:9c:6b:b4:4a:f4:14:
                    ba:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0B:20:A6:45:D2:7B:14:F2:39:AC:CD:55:FB:C1:4B:CA:A3:B2:7C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rwsgpkXSexTyOazNVfvBS8qjsnw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:b2:83:56:64:27:e9:79:61:02:90:66:b7:67:6c:85:f0:c4:
         d4:50:82:68:d4:36:12:5e:2a:f8:b1:66:f5:e0:39:af:b0:0e:
         62:d4:51:10:7a:9f:38:1a:b9:48:0d:09:dd:b9:0b:41:b1:7e:
         fc:9c:93:ff:54:02:0f:f3:d1:ec:9a:19:ff:53:35:57:68:48:
         ea:c6:c8:ae:ce:e8:27:f6:4b:2f:9b:9f:83:d6:07:49:da:fd:
         f3:98:c4:06:c6:88:bb:a2:5d:f6:ae:f2:da:18:dc:30:c8:db:
         88:0f:cb:2a:87:c8:0e:0e:ee:3e:37:0f:4b:38:69:d3:b5:7e:
         6a:c5:05:a1:0e:6d:c1:ef:3f:10:be:1a:7e:99:63:86:b1:11:
         c0:cd:46:d0:25:29:91:15:4d:29:45:f6:dd:73:c0:5a:fb:ff:
         d7:be:3a:49:4e:bd:2d:b6:b7:0e:8d:e2:24:af:2e:3d:e9:9d:
         a9:2f:cb:ef:d0:a4:c2:44:3e:4c:a0:da:65:b2:5b:79:73:dd:
         95:d7:1d:4a:f3:0a:db:d3:65:06:9a:bd:2e:db:f1:14:33:c5:
         ca:5e:27:da:be:90:80:37:39:0f:42:65:b7:a6:cd:05:1f:9e:
         3f:d6:a6:24:2c:20:bf:85:84:d0:d1:d7:22:d8:40:25:40:c6:
         5d:9d:1b:0e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw
ODQyMzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFGMEIyMEE2NDVEMjdC
MTRGMjM5QUNDRDU1RkJDMTRCQ0FBM0IyN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuVDiaRl9jcDV3RRrXuvvcHUwO+IEOlyhot0MRbkdeR+ggTiig
AGGo5ePFY/Zcaf3taOQ9ha4shT+avFha9lDietNf7eXofxh+9tdAHLOAdDRdDClt
h6/KNH7CjC10y4VZvTcARbuHZ+GOvSNt2zvdxwmUHtlybHA7k+1o2cZHWqX4uq8w
/IElXMGCqV+UWmgrBiL+BgW5WixJQxqolXEHqBv9UROagNBKW3hEdz574OqprGct
9zkXqiUiGK3npAwA2z9pT6QRkV6UftpS++h0ax5sTyHop6vXxIFCv+WL63/b9ldZ
YdhGEtHScZq5avfA94gufSSDC5xrtEr0FLq1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrwsgpkXSexTyOazNVfvBS8qjsnwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3J3c2dwa1hTZXhUeU9hek5W
ZnZCUzhxanNudy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV8
BgAwDQYJKoZIhvcNAQELBQADggEBAGmyg1ZkJ+l5YQKQZrdnbIXwxNRQgmjUNhJe
KvixZvXgOa+wDmLUURB6nzgauUgNCd25C0Gxfvyck/9UAg/z0eyaGf9TNVdoSOrG
yK7O6Cf2Sy+bn4PWB0na/fOYxAbGiLuiXfau8toY3DDI24gPyyqHyA4O7j43D0s4
adO1fmrFBaEObcHvPxC+Gn6ZY4axEcDNRtAlKZEVTSlF9t1zwFr7/9e+OklOvS22
tw6N4iSvLj3pnakvy+/QpMJEPkyg2mWyW3lz3ZXXHUrzCtvTZQaavS7b8RQzxcpe
J9q+kIA3OQ9CZbemzQUfnj/WpiQsIL+FhNDR1yLYQCVAxl2dGw4=
-----END CERTIFICATE-----
Generated at Sun Aug 24 11:38:30 2025 by rpki-client